Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: Aus1w239UnI5SvXz1zQP4R/mDEej4lKLL1rJTAHCsHQ=
Subject key identifier: 0F:EB:50:06:60:0D:CE:D5:D5:8C:F1:53:99:B9:3C:96:35:E2:D9:52
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019D996217E8EACEB68A7FF29B79874FFFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0BBA
Signing time: Fri 17 Apr 2026 03:00:35 +0000
Manifest this update: Fri 17 Apr 2026 03:00:35 +0000
Manifest next update: Sat 18 Apr 2026 03:00:35 +0000
Files and hashes: 1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: 6Q/+WCeYjWNI6GL/Px8RTPLCxEmw1U6hw4lYqeX+RFE=)
2: rRTCz9gdKZmCD2CPH7ZEPITaxno.roa (hash: IkdpUdMuuhLbUbcbS19kzqtq8+mEc9r+5ZSOWumJXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:17:e8:ea:ce:b6:8a:7f:f2:9b:79:87:4f:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Apr 17 03:00:35 2026 GMT
Not After : Apr 18 03:00:35 2026 GMT
Subject: CN=0feb5006600dced5d58cf15399b93c9635e2d952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:02:b1:41:38:7c:a4:b2:c0:2d:8d:03:af:
17:94:e5:48:e4:ac:0f:c3:c2:31:43:18:b4:48:77:
21:a0:a1:94:63:33:e9:9f:2e:91:ba:23:c0:a2:37:
da:b9:7e:ea:11:54:70:51:09:70:04:a2:ce:0a:35:
2f:94:93:8f:15:11:ac:e4:d9:f0:6d:70:50:98:b5:
2a:02:9a:13:03:ef:4e:3a:79:78:40:e3:4c:5e:01:
da:cc:c8:4f:a8:a8:55:01:1d:a1:c9:06:1a:f6:24:
18:ed:d4:1e:03:31:69:45:da:0f:a6:4a:04:08:b6:
98:cf:7d:a9:f0:ed:d9:12:dd:80:80:03:cc:91:ec:
98:cd:60:08:a4:92:dd:97:b1:07:f3:7e:45:3f:db:
49:46:a7:f8:61:10:98:a3:ec:03:4a:8d:ee:cd:24:
08:4c:b8:5a:f9:fd:69:3a:aa:3f:40:fd:c5:d4:00:
b9:4f:65:ea:c4:2e:d7:39:d3:05:0f:10:67:dc:ae:
1f:78:5e:33:1d:b2:a3:40:92:a4:8d:62:53:43:d5:
c8:49:5b:82:23:bf:5f:18:17:df:da:cf:7f:4d:d2:
2a:d5:33:1d:0b:40:aa:84:dc:60:d7:47:6a:fb:a1:
c0:c3:c1:a6:16:ad:88:83:c6:33:08:bc:11:e3:7e:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:50:06:60:0D:CE:D5:D5:8C:F1:53:99:B9:3C:96:35:E2:D9:52
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:31:1b:ad:0c:5d:32:a9:21:77:cb:72:f0:d9:6e:d3:0b:3c:
82:29:07:b6:88:c2:ed:e9:21:ae:4f:1e:cd:49:8a:be:6b:7d:
40:26:77:74:f4:6c:c9:1d:8c:ce:97:54:c4:21:7e:2a:65:c5:
86:38:af:88:71:36:79:9c:78:70:c8:0c:d0:fb:43:b7:90:5f:
f3:d8:ae:be:ac:35:dd:23:46:b4:63:c4:73:c9:53:43:2c:9b:
13:63:fb:fc:17:02:e2:b1:84:c7:b6:83:0e:52:eb:c6:6b:00:
cd:df:93:00:c5:19:20:78:ff:58:8d:95:a2:e3:ff:2c:76:0d:
c7:6d:cc:ed:da:d5:4d:15:c7:7c:4a:27:71:5c:36:39:12:d2:
b7:54:6b:91:e1:6f:56:6b:4e:3a:4c:8f:c4:51:dc:c9:5f:e0:
2d:52:83:89:d1:48:f7:88:93:15:d5:52:98:4d:ad:06:0d:78:
40:a4:6a:12:cc:92:59:a7:24:d3:3d:ad:bf:df:6e:7e:12:6c:
81:39:fc:a5:0c:11:2a:ca:ef:ca:1b:1e:7d:62:6a:a6:bd:ab:
7f:39:a3:95:26:ad:43:10:6c:1f:21:f5:3f:09:cb:72:29:0b:
f2:e9:d5:20:28:2a:b8:60:bd:db:c0:20:ce:a4:1d:3e:38:f4:
4c:2a:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:18 2026 by rpki-client