Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: NuU4QbvkZJh6yduGm2Lx1KFaWoX7PJBR97ImyfJYNdw=
Subject key identifier: E3:BE:6F:54:3E:E3:C6:5D:70:A0:F4:41:2B:59:D7:3D:A3:37:54:F6
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019EB845BA73CAE69441AEFCE852635D52CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 14A0
Signing time: Thu 11 Jun 2026 20:00:37 +0000
Manifest this update: Thu 11 Jun 2026 20:00:37 +0000
Manifest next update: Fri 12 Jun 2026 20:00:37 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: /XZkFHmtuSSaZl6Ikn0KW84+0UdtD7Iam5KVcCL237k=)
2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=)
3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:ba:73:ca:e6:94:41:ae:fc:e8:52:63:5d:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jun 11 20:00:37 2026 GMT
Not After : Jun 12 20:00:37 2026 GMT
Subject: CN=e3be6f543ee3c65d70a0f4412b59d73da33754f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:0a:36:19:0c:9a:ee:0e:ee:0a:24:30:1e:
04:df:43:bf:93:98:20:4d:e4:56:a3:9a:b6:13:ff:
97:4e:0d:a2:36:8b:d8:82:4e:72:f6:6d:77:5c:4a:
ac:9f:f8:a7:18:31:d0:fe:67:3d:6f:c0:31:27:66:
c2:ce:f1:e6:fe:cb:1e:87:bf:33:4b:d8:1b:99:72:
d9:6f:ee:59:8b:7b:cc:5a:3a:10:7c:77:92:53:1f:
7d:85:4d:a0:2e:84:fc:70:35:72:0b:3e:6c:13:8b:
18:04:9f:5f:b4:30:d9:2a:fe:8a:0e:03:7b:67:4d:
c2:75:df:a0:b6:f2:e6:9c:99:71:ab:42:c2:b0:00:
8a:cc:47:35:07:cd:88:67:e0:f5:2d:a8:bb:01:36:
83:7b:40:f0:0f:20:8e:b6:0d:d0:83:c9:fe:ed:6d:
3c:3d:aa:c9:e1:cd:15:45:d7:29:e4:ff:fd:68:37:
26:01:d9:cb:28:65:1f:e9:61:00:cd:8c:de:97:af:
d2:5f:8e:de:c1:75:02:74:f4:49:95:51:9c:c1:04:
d9:d7:93:6a:3c:eb:13:16:fe:26:08:c6:2f:47:34:
93:f2:42:5c:0e:65:5d:e0:ab:35:48:b6:02:90:05:
d2:c9:9f:3a:90:c7:5d:9b:cb:83:87:c0:af:1c:41:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BE:6F:54:3E:E3:C6:5D:70:A0:F4:41:2B:59:D7:3D:A3:37:54:F6
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:8e:4d:77:21:74:3a:df:a7:0b:cc:74:be:e2:18:e0:67:
2b:77:eb:c5:c8:68:a8:c0:0a:51:10:0c:78:c2:bf:5a:fc:cb:
9a:ff:c0:24:bc:79:90:a2:75:f9:86:94:ad:a5:18:57:d6:72:
70:09:05:0e:ba:b8:59:be:d9:f0:7f:9d:f8:d8:bc:53:f4:57:
96:9a:e7:ba:7f:8a:72:52:5f:97:48:c0:28:a8:49:67:24:3e:
ee:f5:46:56:31:a1:35:62:6f:41:db:c4:d9:d4:fc:ea:03:00:
ed:10:f4:42:a9:b6:21:d8:ed:f1:7b:93:87:46:1e:d2:02:02:
c3:56:eb:50:48:3d:5c:b3:66:e7:f6:e7:43:df:c8:b2:2e:0e:
cf:9b:86:0b:54:2c:90:60:99:28:83:2b:b5:18:ae:b3:25:89:
ed:c5:4b:4b:8f:0e:00:2a:2d:21:aa:fe:7e:8a:d9:1b:db:dc:
cb:5b:71:cd:db:d1:67:85:ff:0f:d5:6d:20:ee:de:cd:6a:9f:
9e:32:d1:aa:94:d6:74:ce:b3:04:6a:7c:b8:a1:b1:e8:11:fc:
99:33:43:99:06:20:47:e8:28:d5:3f:45:c6:9e:c2:9e:7c:97:
bc:c5:34:9a:d0:c9:f1:00:ec:91:c8:9a:15:53:16:25:60:8b:
86:48:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:32 2026 by rpki-client