Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: v84sgkDbAD4I+0xlcZrDYXps6C7OpfiWNktw6u6lUWY=
Subject key identifier: 09:C6:7D:4F:1E:99:F3:98:08:05:B3:09:1D:27:F4:EA:F5:64:91:61
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 019D38D37EE1DDF3D61338627EEC49470407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: 5D
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: XrqaiaJppp4UbBI7yjTWcykZ4JbdJnPqhW4zuw7Ec/o=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7e:e1:dd:f3:d6:13:38:62:7e:ec:49:47:04:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=09c67d4f1e99f3980805b3091d27f4eaf5649161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:98:43:9c:a3:d4:7e:e0:0c:4c:e1:6c:32:
6b:c7:2d:fa:6d:7a:f6:6d:ce:25:71:41:8a:c6:c4:
62:d2:54:bd:97:de:a2:6f:c3:c8:03:24:a4:f3:5c:
bb:22:57:f2:fc:83:d7:56:ee:c3:a8:57:bf:e0:47:
e8:96:98:4f:2a:80:eb:0a:d3:58:58:91:f4:13:a1:
8f:9b:88:1a:49:0a:40:6f:0f:f4:6c:22:71:af:86:
8c:90:28:a9:27:36:01:a9:e3:e1:dd:90:4d:0a:e5:
f9:4e:9e:d4:6a:ed:2f:c9:cc:38:29:61:af:9b:fe:
f6:61:38:c0:2b:3a:b3:ac:98:f2:93:70:23:e7:49:
62:18:79:08:3f:bd:c0:b7:c3:71:29:ff:9f:3e:1d:
c8:e7:bc:9a:83:70:ad:01:28:fb:8c:85:ec:67:29:
6b:57:c1:49:97:f8:51:8f:63:05:ec:1a:45:dc:a9:
ed:78:18:a0:f0:61:c8:d8:df:64:a5:d3:29:ff:61:
67:ab:59:68:84:b2:97:56:2e:86:32:fc:88:b1:b2:
b8:82:30:c7:2d:25:83:e3:8d:00:ad:11:69:fe:86:
97:35:d8:5e:82:91:e5:30:e6:3a:9e:da:fc:31:8a:
43:17:d4:27:28:b7:59:3f:1e:30:57:90:cc:aa:7b:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:7D:4F:1E:99:F3:98:08:05:B3:09:1D:27:F4:EA:F5:64:91:61
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:56:e3:48:12:69:7f:6f:39:24:3d:fa:e1:25:48:84:8b:88:
4e:d2:88:2a:be:3b:0b:6c:89:16:00:dc:6c:47:dd:9a:2e:a8:
e9:b0:b0:80:d7:69:d9:8c:36:cb:ad:64:7e:f8:06:be:af:19:
a8:62:4b:d0:f3:f7:54:89:15:69:7f:75:12:51:88:2d:f0:b9:
32:30:8c:b6:90:d1:91:52:28:95:1c:a6:66:ee:e7:d4:bf:be:
71:60:d7:4f:11:bc:96:36:09:e6:c3:98:e6:2a:e8:c2:ab:61:
69:d2:23:da:dd:0a:14:cd:2a:4a:69:74:b9:d1:b8:aa:94:cc:
7c:c2:b1:f2:87:80:8f:aa:d5:5e:ab:b6:4c:e4:ed:b9:00:6f:
ce:70:62:32:04:e5:bf:f1:4e:eb:09:a2:3d:a1:e1:0a:09:1c:
12:fb:4f:30:6c:01:aa:37:fe:e8:c8:dd:ba:cb:28:78:d1:30:
c2:0d:9c:70:81:3d:64:20:7d:17:a5:b7:2f:57:6d:c8:c3:78:
50:f4:bd:e8:5c:18:db:88:15:5b:c0:d3:1c:95:f2:d9:3b:05:
e8:86:20:55:ef:75:56:08:bf:c6:f4:47:69:5e:fc:17:03:58:
63:5e:7c:7b:d4:42:05:b1:5d:cf:f1:2a:95:ca:1b:86:9a:0e:
53:b8:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:06 2026 by rpki-client