Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: yJmNsQigorJMUnHUc+CZrQQSWZN0amqZ3lVgYptPy80=
Subject key identifier: F9:4A:01:16:E1:4C:D2:7B:F7:DA:A0:7A:80:7A:08:E8:5A:4E:4B:A3
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 019DF983E5C20718352DDD506C5B70F6F59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 1357
Signing time: Tue 05 May 2026 19:01:03 +0000
Manifest this update: Tue 05 May 2026 19:01:03 +0000
Manifest next update: Wed 06 May 2026 19:01:03 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: 1zSApZP+Ux35Klij0cGA3OkNG427L7sLY/F/4DtQh0k=)
2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:83:e5:c2:07:18:35:2d:dd:50:6c:5b:70:f6:f5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: May 5 19:01:03 2026 GMT
Not After : May 6 19:01:03 2026 GMT
Subject: CN=f94a0116e14cd27bf7daa07a807a08e85a4e4ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:c2:df:8c:69:0c:d2:c8:d5:b1:6d:17:1b:
5c:1a:f6:02:9e:96:d0:a3:b9:56:89:56:db:c1:2d:
08:6c:bf:36:8e:ae:5e:5c:c2:e6:66:0a:7c:79:f0:
96:bc:94:0d:69:3e:3e:fb:8e:ce:23:bb:96:01:c5:
1a:cb:29:03:4a:e6:0b:b4:2b:dd:d9:09:2a:35:e9:
4c:e2:e1:e0:5b:27:d8:2b:60:aa:bd:43:91:4d:cd:
f1:15:47:49:b5:d2:b1:4b:dd:46:88:d4:d4:95:52:
ed:d0:44:ff:4e:2f:7a:b0:9f:ec:41:bf:b2:6c:22:
65:03:8e:ed:32:de:57:47:d0:19:56:45:ca:fd:9b:
53:18:e8:de:af:4f:48:2d:27:38:66:b5:de:15:b7:
c6:45:f0:c4:8c:95:ac:42:3f:f4:9d:04:73:1e:cf:
3a:f2:85:4a:b4:cd:8b:b9:ae:13:2d:e3:68:74:ef:
19:06:41:87:98:b2:2f:51:6e:00:12:75:fd:7d:87:
63:ce:1b:d1:3b:59:b7:ed:7e:5f:52:10:07:f8:10:
6b:02:85:87:66:7c:64:17:95:ba:41:b7:45:09:95:
fb:05:e8:8a:a5:f3:36:f1:a7:ba:4a:ce:68:81:83:
7e:eb:56:fc:84:0d:48:e4:76:57:5d:54:14:ba:f1:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:01:16:E1:4C:D2:7B:F7:DA:A0:7A:80:7A:08:E8:5A:4E:4B:A3
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:50:16:9b:bc:bb:0b:7c:ea:cc:db:75:a1:f9:9e:40:f8:
e4:2b:78:20:b0:1e:1d:b4:08:a9:bd:df:01:f9:de:4a:50:9c:
2b:af:2d:d2:6b:b4:07:29:df:69:29:bc:d4:8e:e0:81:00:fb:
4a:3b:16:d3:cb:4a:fe:60:79:94:76:cd:42:ef:b8:54:05:b6:
40:ee:88:59:5a:0f:ea:61:92:d7:a4:22:bb:72:a2:61:07:8b:
d1:93:25:5c:d4:af:52:f8:2e:07:0a:dd:ff:06:9a:37:90:80:
36:5b:4c:82:a9:a4:54:9e:cf:ec:61:a7:3b:c0:60:40:30:86:
d4:ad:7d:aa:1e:1a:f0:4f:68:a0:a8:37:6e:8f:4f:ad:b6:18:
bd:1d:f0:7b:8f:0b:58:1c:5b:89:9b:d1:14:01:5b:14:35:9f:
2b:03:85:60:e7:7b:21:6f:f8:0e:f6:b1:21:c4:64:6c:03:74:
c5:ec:db:80:8b:5a:75:92:6a:28:60:ee:93:d8:c8:d4:e5:a5:
89:71:5e:bb:94:a7:dc:95:2f:28:26:39:fc:d0:0e:e6:21:c8:
94:53:b5:4d:48:7f:bb:5e:2e:65:8e:92:c1:8c:67:41:dd:2d:
f3:aa:45:ad:64:dc:51:f2:63:ce:6a:c5:36:6b:15:f8:d5:13:
40:84:79:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:26:38 2026 by rpki-client