Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: XdwYb7SZhttv0LV9iHONeDtzdMUnUwD4eWeTbkNeLR4=
Subject key identifier: AB:DD:AB:3C:BC:79:40:64:8B:D9:11:69:6D:F0:54:A1:FF:1C:B7:09
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019E30A90BEB9E3C55B840CE17E7CF7408F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0D7D
Signing time: Sat 16 May 2026 12:00:45 +0000
Manifest this update: Sat 16 May 2026 12:00:45 +0000
Manifest next update: Sun 17 May 2026 12:00:45 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: dsIFJk6MqdL+rPtyNFSe4pwGfL70GsijNrgqdkrAJPE=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:0b:eb:9e:3c:55:b8:40:ce:17:e7:cf:74:08:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: May 16 12:00:45 2026 GMT
Not After : May 17 12:00:45 2026 GMT
Subject: CN=abddab3cbc7940648bd911696df054a1ff1cb709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:bd:42:af:1d:0c:6a:aa:7c:4a:6b:89:e1:
3d:d3:50:3a:10:6a:f0:65:3f:04:ba:a0:88:8c:6d:
9a:7d:ac:3f:31:61:24:54:0c:22:4c:ea:84:56:21:
6b:6a:f9:c3:da:23:07:64:5b:ae:2d:f7:da:dd:c3:
eb:f8:c4:9f:01:36:1e:86:40:ce:07:07:6b:c2:82:
c0:15:e9:1e:88:b2:1c:78:d4:52:dc:59:83:5b:5a:
27:fe:47:6c:ad:1a:81:f6:9b:6a:35:4f:97:75:a8:
fa:05:2b:4d:55:50:8a:38:46:ad:7c:d4:22:af:53:
7d:0b:08:fe:35:78:e9:d2:17:b9:65:75:75:2a:0d:
78:c5:e4:7a:06:22:c8:ed:4a:d1:db:7e:98:87:65:
af:b4:27:04:89:b4:c5:4b:7e:3a:4d:7b:ef:19:ea:
61:1f:11:30:fb:51:f8:a6:37:b1:52:af:b7:8e:e1:
32:fc:cf:bd:20:a8:5f:1c:9a:19:67:4b:f6:f5:2d:
52:44:0c:f1:b7:e1:74:63:bd:9c:5c:41:35:25:e0:
37:3c:78:71:1c:68:d8:b6:53:9c:3a:1c:da:5d:db:
f0:3f:45:31:5d:46:b2:bc:68:a5:e5:0f:85:ba:28:
94:2f:7f:fb:f0:90:c5:85:df:b1:e0:fa:44:f1:a0:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DD:AB:3C:BC:79:40:64:8B:D9:11:69:6D:F0:54:A1:FF:1C:B7:09
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9e:b8:08:e5:9f:01:e7:ed:bc:e5:eb:3e:e6:95:5e:ae:2a:
eb:d7:70:fa:ce:56:c5:fa:b6:6a:c5:28:79:79:59:56:da:b2:
ab:1f:75:e0:7f:df:8b:12:dc:f9:13:22:b6:6a:cb:40:03:5d:
8d:0c:4a:42:aa:38:08:20:1c:fd:f9:63:03:70:96:f9:4c:d5:
c2:a0:31:cf:f8:9b:4a:fd:73:af:e7:74:86:6d:42:7e:55:bc:
10:ab:95:e3:b6:88:d0:18:30:f8:21:32:b3:28:3d:14:69:d6:
ff:49:42:53:27:e1:35:4e:d3:0c:8d:41:d5:01:dd:26:22:e1:
86:cf:43:92:0a:3e:9e:b1:ab:74:b9:3d:74:c4:e1:ff:f0:78:
b4:05:19:8d:b1:b0:e6:b4:4a:5f:8f:80:60:fe:44:4c:a9:6f:
c2:f7:e7:e3:af:5b:3b:73:ff:68:29:f8:f5:c0:ae:29:6e:bc:
fd:0c:ba:6c:d2:71:06:0f:ce:31:89:3a:f8:06:4b:f5:5c:40:
53:ef:1d:11:2b:c7:e1:20:fa:ec:01:a2:8c:07:67:bc:97:5d:
c4:1f:ef:36:19:ce:76:93:23:68:58:26:7b:6a:81:ed:5c:c8:
7c:bc:7e:98:74:31:62:2f:7d:54:c5:cc:b5:a5:39:dc:2a:31:
ce:8c:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:54 2026 by rpki-client