Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: CHuCtLNeRCNWq1/mzEakw0riSE6PV70kN7MLtqy3M0c=
Subject key identifier: 03:68:13:15:07:E1:32:CB:CC:6C:78:D5:A0:01:37:04:D8:4C:08:FF
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 019E4EEA856DF2B7691B9AF5620A792946ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 1638
Signing time: Fri 22 May 2026 09:00:52 +0000
Manifest this update: Fri 22 May 2026 09:00:52 +0000
Manifest next update: Sat 23 May 2026 09:00:52 +0000
Files and hashes: 1: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (hash: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=)
2: _62J83lzQ1oFlJFExShsa6-ZEdE.roa (hash: uU0IWCbhbUzEOirSzRssIA5YpPwmzBjL6oB4XiM15Ok=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: 1jaKjrM/oYd8YFEUdM8MQH+WlNWaFLwnJefATeG3YYM=)
4: jOwlKFNThlCAigDd4FjuTpSW9As.roa (hash: RSHefX5Zz29vKhe8YnCs3jQBCzq18ilVKULjruBqd+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:85:6d:f2:b7:69:1b:9a:f5:62:0a:79:29:46:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: May 22 09:00:52 2026 GMT
Not After : May 23 09:00:52 2026 GMT
Subject: CN=0368131507e132cbcc6c78d5a0013704d84c08ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:f3:cb:bd:d9:fc:c5:7e:e1:08:84:a5:7d:
a6:0a:35:92:f8:e0:25:f2:5c:e1:bd:36:ce:a7:41:
b3:f1:4e:3e:00:6c:f0:98:19:24:e0:da:74:41:8f:
23:a7:e7:8e:fd:3a:12:9f:0c:40:0b:4b:0a:43:93:
4c:4c:2a:4f:4a:79:4c:db:81:75:4a:de:0e:86:fb:
60:60:42:49:3b:85:b7:09:6c:68:b2:2d:0b:c5:60:
d8:9b:84:cd:6f:c5:a0:20:3c:01:36:94:15:6c:e1:
5b:b4:f7:ff:f5:4a:b0:5d:e6:98:df:c0:d3:8a:57:
b8:6c:58:0c:a1:6d:64:0b:75:04:25:88:11:47:1f:
32:4b:56:17:c4:c1:fc:cc:1a:19:4e:a8:fc:c5:86:
ce:52:d8:1d:04:b1:e7:11:d3:49:98:a5:1a:17:17:
de:86:60:e4:d5:36:a8:8a:5c:a2:82:6b:f5:f1:b5:
70:d8:8b:96:d0:92:ab:e1:ef:c8:0d:54:c4:8a:37:
f5:6c:2d:41:3d:f9:bd:da:3a:89:70:bf:5b:09:d5:
2e:32:63:98:13:e6:1d:97:da:49:8d:52:c6:93:f9:
22:86:db:b6:c9:61:3b:b8:31:08:fd:c9:e3:fe:ec:
4b:41:ec:ad:27:96:c9:bf:c9:c1:4c:9e:8d:b1:a3:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:13:15:07:E1:32:CB:CC:6C:78:D5:A0:01:37:04:D8:4C:08:FF
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d0:8f:b2:b6:d0:07:ae:52:c2:4e:83:05:30:58:3b:76:d5:
2e:15:43:05:0b:bb:fb:09:ee:33:87:ee:7c:dc:05:a7:85:17:
53:68:6d:d4:4d:c3:a6:bd:b1:1a:5c:9e:63:36:57:75:48:c1:
5d:50:eb:4e:2e:46:ea:2a:1e:2b:b0:78:b1:84:9d:ef:90:99:
a5:10:38:b1:c5:63:a0:37:7a:cc:64:b2:0c:8b:b8:87:5b:5f:
a6:cb:ff:c8:c5:a9:69:00:d3:8e:82:2f:bd:3d:0b:cc:9c:d9:
05:4c:ec:4e:0d:85:05:e4:c3:b6:4e:be:6e:44:93:cf:21:1f:
ed:2e:aa:ed:0f:c4:6e:3b:3d:66:96:9b:a6:5c:db:9a:ca:42:
1d:68:2e:44:c8:29:24:a3:22:29:b4:09:e2:ca:ec:9b:b9:d1:
af:a7:5e:df:70:ed:7b:65:aa:10:52:96:09:dc:dc:ae:56:e0:
00:c2:1e:5e:87:e4:f9:b3:3c:8c:84:4d:eb:04:fa:25:52:a0:
b0:3f:ea:cf:b7:2a:9d:31:aa:39:f1:01:14:15:24:0c:61:1e:
46:a4:5b:68:8b:57:a0:cc:66:d9:20:45:71:15:55:3d:b6:b9:
86:de:22:4a:1c:da:0a:1c:b4:8e:41:ea:d5:a5:e3:f0:88:95:
56:90:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:37 2026 by rpki-client