Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
File: cBKlLoiwGDLPDuN8zath3s59EsY.mft (raw, json)
Hash identifier: td67m5D0p9dqJVdhn2QbeNprGuMpg0chsTLpetQM6NA=
Subject key identifier: 48:2A:35:85:02:A5:16:D8:64:6A:99:C1:76:06:AF:3D:10:9B:C7:35
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial: 01A1A7B8EA1EBCCBA3C019AE0C9E03281FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
Manifest number: 0F5E
Signing time: Wed 04 Nov 2026 18:01:15 +0000
Manifest this update: Wed 04 Nov 2026 18:01:15 +0000
Manifest next update: Thu 05 Nov 2026 18:01:15 +0000
Files and hashes: 1: cBKlLoiwGDLPDuN8zath3s59EsY.crl (hash: f4HOaxvtip6z0q44PvRU0HskescqHZZJwI4dvuO9J6Q=)
2: kmOqU7zjynH8Xo_HXld7L4D6ZwE.roa (hash: F6H51PDiBf245mo21ZPJPmsmWZywcrZgfr2G2+ZNtqQ=)
3: tZChOLxLtXwPbe0OiHpjJvxtRv4.roa (hash: erqukdZGkr6JPQ1aYoOUC39EmJQKW8gHgsgJvbVbPxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b8:ea:1e:bc:cb:a3:c0:19:ae:0c:9e:03:28:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Validity
Not Before: Nov 4 18:01:15 2026 GMT
Not After : Nov 5 18:01:15 2026 GMT
Subject: CN=482a358502a516d8646a99c17606af3d109bc735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:49:86:7e:88:67:cc:91:e6:80:5f:f0:df:
3e:bc:64:78:13:52:28:95:7c:b7:53:0e:9a:5f:9b:
bf:7c:81:a5:6d:eb:64:68:2a:ef:68:88:27:f8:8a:
e3:61:8c:5d:3e:81:18:9f:36:ea:e6:ab:4b:a8:99:
2d:d8:4a:1c:a9:a3:df:a5:b2:09:32:a4:89:38:ea:
78:b4:53:10:30:f0:65:ee:dd:16:85:9d:df:99:c5:
e5:94:53:3f:72:02:2a:dc:6e:0e:6e:1d:82:44:3a:
ff:2a:dc:e7:a7:5a:57:41:74:85:19:ff:e3:32:1b:
0c:09:ef:5b:7f:5c:2e:f0:83:0e:b4:e6:1b:a1:a2:
7a:78:74:3e:32:83:32:ae:c1:95:da:f7:82:32:f1:
7e:9c:79:1c:19:94:19:9d:de:a3:23:6f:3b:5a:26:
d7:ad:de:4b:05:47:cf:37:3c:91:4f:24:5b:59:73:
c8:96:ad:09:81:f1:45:26:c4:ae:eb:10:7e:e8:7e:
16:ca:7b:69:14:af:41:33:ce:b6:ec:59:99:79:c6:
50:98:99:7e:4c:e3:9b:c7:18:64:f0:02:81:26:c9:
ac:c2:bc:82:cd:b0:fd:a5:25:b0:f3:02:bd:e3:b7:
ea:4b:10:25:f1:0c:9f:54:1d:81:ac:f5:27:cc:4d:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:35:85:02:A5:16:D8:64:6A:99:C1:76:06:AF:3D:10:9B:C7:35
X509v3 Authority Key Identifier:
keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:15:19:78:50:3b:dd:83:64:89:a1:16:7f:bd:77:02:e4:06:
d4:46:97:72:56:0b:67:43:92:3e:1a:f7:aa:7c:15:3f:bd:4e:
e5:bd:47:f3:8f:29:2f:01:b9:81:1d:fb:84:8f:51:09:a1:49:
9e:fb:e8:8b:77:b6:af:63:53:ea:fa:1c:c6:29:2a:7d:d9:c7:
1d:20:80:eb:f8:f7:e7:9b:58:b9:24:5f:3c:78:0d:b7:7a:7f:
31:09:94:6b:93:37:2e:ca:83:77:30:63:45:b0:5b:95:f3:8f:
91:c9:b6:b2:7e:56:74:55:3d:40:79:bf:03:26:d1:b1:cf:f3:
e5:e6:93:0f:cc:a3:89:17:e8:5f:e6:b9:ec:98:14:7b:a3:8e:
c7:91:62:26:f9:03:01:cf:5f:2a:b2:8b:75:2a:24:fb:77:cf:
b0:e3:62:a1:ed:2c:07:4d:b4:6d:16:d3:00:86:7b:1a:b6:2c:
e6:95:b3:e0:a2:ef:73:9c:60:ec:5e:d1:12:ff:bd:eb:94:00:
e1:d5:e2:b9:c1:8a:05:b3:02:b5:4f:d8:c8:6b:83:b9:8f:ce:
39:e7:71:a7:7e:87:65:b8:f5:82:8a:03:91:71:ad:b5:f9:a3:
7f:dc:ca:d6:6d:3f:ca:ba:8a:14:a6:f6:4a:2d:5b:d3:aa:54:
ff:1a:d8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGnuOoevMujwBmuDJ4DKB/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTJhNTJlODhiMDE4MzJjZjBlZTM3Y2NkYWI2MWRlY2U3
ZDEyYzYwHhcNMjYxMTA0MTgwMTE1WhcNMjYxMTA1MTgwMTE1WjAzMTEwLwYDVQQD
Eyg0ODJhMzU4NTAyYTUxNmQ4NjQ2YTk5YzE3NjA2YWYzZDEwOWJjNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6hJhn6IZ8yR5oBf8N8+vGR4E1Io
lXy3Uw6aX5u/fIGlbetkaCrvaIgn+IrjYYxdPoEYnzbq5qtLqJkt2EocqaPfpbIJ
MqSJOOp4tFMQMPBl7t0WhZ3fmcXllFM/cgIq3G4Obh2CRDr/Ktznp1pXQXSFGf/j
MhsMCe9bf1wu8IMOtOYboaJ6eHQ+MoMyrsGV2veCMvF+nHkcGZQZnd6jI287WibX
rd5LBUfPNzyRTyRbWXPIlq0JgfFFJsSu6xB+6H4WyntpFK9BM8627FmZecZQmJl+
TOObxxhk8AKBJsmswryCzbD9pSWw8wK947fqSxAl8QyfVB2BrPUnzE3J0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgqNYUCpRbYZGqZwXYGrz0Qm8c1MB8GA1UdIwQY
MBaAFHASpS6IsBgyzw7jfM2rYd7OfRLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgt
MzIwMWI4N2YxNDkwLzEvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgtMzIwMWI4N2YxNDkw
LzEvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhUZeFA7
3YNkiaEWf713AuQG1EaXclYLZ0OSPhr3qnwVP71O5b1H848pLwG5gR37hI9RCaFJ
nvvoi3e2r2NT6vocxikqfdnHHSCA6/j355tYuSRfPHgNt3p/MQmUa5M3LsqDdzBj
RbBblfOPkcm2sn5WdFU9QHm/AybRsc/z5eaTD8yjiRfoX+a57JgUe6OOx5FiJvkD
Ac9fKrKLdSok+3fPsONioe0sB020bRbTAIZ7GrYs5pWz4KLvc5xg7F7REv+965QA
4dXiucGKBbMCtU/YyGuDuY/OOedxp36HZbj1gooDkXGttfmjf9zK1m0/yrqKFKb2
Si1b06pU/xrYsQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 03:45:57 2026 by rpki-client