Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: 56WZoHe+pXcsi0XO7SVgN8urGPuxdURFQ3auOvMe47s=
Subject key identifier: F9:41:C5:D9:4F:E8:88:04:EA:17:00:E9:47:7A:15:30:47:31:CB:B6
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 01A0C669E9D3F43A2AC6B09FC429A3943ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: 0234
Signing time: Tue 22 Sep 2026 00:00:24 +0000
Manifest this update: Tue 22 Sep 2026 00:00:24 +0000
Manifest next update: Wed 23 Sep 2026 00:00:24 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: uf4fbjxGFB4nKxBHKFBgxzKY+7S/qt9YB3AEEO1p3dA=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:e9:d3:f4:3a:2a:c6:b0:9f:c4:29:a3:94:3a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Sep 22 00:00:24 2026 GMT
Not After : Sep 23 00:00:24 2026 GMT
Subject: CN=f941c5d94fe88804ea1700e9477a15304731cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:90:e0:c1:22:0d:92:c1:e3:04:31:ec:61:
6e:17:25:07:0e:00:87:31:e9:4b:be:79:a6:fe:88:
45:d5:68:dc:2f:52:74:e1:ca:37:6a:8c:79:ab:8b:
d3:b5:dd:c3:1c:e5:ae:29:9d:02:04:45:e4:72:f7:
16:67:3e:63:e2:29:b7:8c:7a:53:7a:43:bf:d9:29:
64:32:84:28:b6:09:9e:88:33:19:c1:da:57:01:4e:
ed:2f:4d:ba:83:54:eb:40:39:1c:ce:67:13:65:90:
16:5e:26:d0:79:d1:85:25:53:d5:19:21:88:e4:da:
87:3f:e0:08:a8:0b:cb:8e:7e:f5:14:b0:d8:de:bf:
33:67:42:aa:82:63:5b:4d:04:f0:c7:1e:94:94:81:
96:6a:ea:46:98:a1:06:e7:65:e8:37:9a:cd:e2:be:
38:97:04:23:85:47:0c:dc:1f:43:6d:cf:e1:73:dc:
05:39:3f:b0:18:85:2e:c1:06:c7:44:21:f6:bc:5f:
36:06:39:18:1c:4a:bb:92:9c:86:82:0e:54:d4:33:
36:61:e6:a7:90:45:f1:b8:ec:a4:a8:c8:35:df:ec:
70:d1:f4:eb:a5:e7:bf:e9:af:26:e2:a8:ee:ae:f4:
7f:14:d3:c5:3e:3e:72:01:9f:a9:f4:5c:60:7d:bc:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:C5:D9:4F:E8:88:04:EA:17:00:E9:47:7A:15:30:47:31:CB:B6
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7d:85:07:40:1e:99:67:db:4f:25:00:a2:a6:f9:92:6b:d0:
b7:21:ec:60:7f:9c:77:52:bd:81:3a:c3:6e:9c:6e:d0:1f:0d:
ed:71:91:19:a6:3a:2f:90:39:a0:69:d7:e2:11:2b:3d:48:9f:
1a:31:61:02:0b:df:e5:8b:9b:cd:32:97:b9:11:8c:67:40:d0:
55:bd:b3:5e:3d:1b:35:b7:32:47:89:e6:3d:42:00:bd:ab:cc:
8f:7e:99:65:d4:09:b4:92:eb:94:a7:57:92:02:8f:81:ba:a3:
13:cb:6d:76:e4:cb:b2:b8:67:da:16:cd:b2:4b:49:5c:d0:c1:
61:94:af:3a:77:ce:06:55:f4:81:66:61:77:78:72:94:f2:7b:
31:32:31:30:14:c1:a4:4f:c3:2b:9b:7c:c9:36:3a:6e:1f:d2:
f1:c6:7b:fc:7c:00:aa:49:a7:7d:06:53:8b:f0:3d:d5:5c:af:
29:ed:eb:d2:54:90:15:64:59:02:6c:1b:0d:e5:d2:5c:9a:4d:
59:89:e1:fb:43:dc:ba:75:c4:5f:96:5a:81:ea:d1:82:d6:9c:
cc:60:e9:f9:8f:88:72:ac:35:2d:43:2d:8e:9c:de:88:08:80:
02:b7:d1:33:3c:56:67:05:9e:8a:3a:0a:91:a6:b9:c4:63:02:
d0:fa:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:02:44 2026 by rpki-client