Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: sFiee0jJCZeAXbrjjgsE11L01sUV10+9ANWhQT5b9Q4=
Subject key identifier: 49:EB:FC:C9:9C:D8:EF:43:80:AF:1F:C7:82:FD:4C:26:8F:88:4B:2F
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019CADC76A8820CAD7D98E4BF168FC415EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0B40
Signing time: Mon 02 Mar 2026 09:00:53 +0000
Manifest this update: Mon 02 Mar 2026 09:00:53 +0000
Manifest next update: Tue 03 Mar 2026 09:00:53 +0000
Files and hashes: 1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: di7roltf93RaNQ2rCAFwGnk70mL2F7jXEFQoV0+YNDY=)
2: rRTCz9gdKZmCD2CPH7ZEPITaxno.roa (hash: IkdpUdMuuhLbUbcbS19kzqtq8+mEc9r+5ZSOWumJXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:6a:88:20:ca:d7:d9:8e:4b:f1:68:fc:41:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Mar 2 09:00:53 2026 GMT
Not After : Mar 3 09:00:53 2026 GMT
Subject: CN=49ebfcc99cd8ef4380af1fc782fd4c268f884b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:29:a5:59:2d:42:52:06:5f:20:ae:4c:a4:
ee:89:15:c2:8f:1b:6c:e6:6b:97:fa:1e:2f:ad:e5:
e4:79:36:36:9b:a3:f6:4e:6d:ae:4a:a3:8a:e7:90:
df:c0:6a:04:bd:b7:52:eb:31:28:1e:7a:6f:6a:5b:
5f:7c:19:fd:0a:c8:4b:08:39:ce:0a:72:40:23:19:
cc:44:0d:63:a9:2f:77:ad:8c:86:f0:e0:f3:56:8a:
1d:82:21:80:8e:d8:e6:49:c7:3a:b5:ef:3f:13:74:
dd:21:b5:43:4a:92:68:eb:bb:99:e3:ac:d1:f6:16:
d0:5c:7d:2a:89:a4:40:cb:02:03:bf:f7:22:43:1a:
cc:4c:cf:d3:29:a3:22:da:79:53:b7:96:c5:ec:e4:
c7:cb:39:5c:59:e0:f6:60:f0:75:2c:1e:ff:0e:2e:
c1:f9:23:36:bf:3b:b0:81:a5:c6:07:87:49:fe:18:
3d:c8:e1:0e:ca:2e:d7:ca:8f:68:7b:bc:55:35:80:
04:f4:0b:ee:3d:96:33:99:bf:80:e9:4a:f1:4b:ca:
7a:3e:da:d5:78:31:58:f0:cf:f9:2b:6e:b7:50:4a:
53:54:54:56:02:a3:5d:6d:ea:6c:65:e0:4b:8f:ac:
98:9d:55:4b:eb:45:a5:ef:e1:81:ce:01:e7:37:05:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:FC:C9:9C:D8:EF:43:80:AF:1F:C7:82:FD:4C:26:8F:88:4B:2F
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:6e:cd:e9:80:7e:69:19:a0:f6:91:10:5d:8a:bf:53:09:
a0:f1:2e:a7:9b:4c:78:9a:9e:8d:87:37:4a:4f:fa:ca:cd:9a:
55:7f:20:44:e1:3c:3a:aa:be:a7:77:fe:4d:bb:d3:68:24:94:
1b:64:11:7f:1b:66:2c:93:ce:0b:ab:8f:fe:4d:51:d3:09:67:
c2:e3:56:56:2b:aa:32:0e:87:b5:0c:33:02:dc:d2:9d:ba:9e:
8c:2c:92:15:63:f9:56:b3:7a:0a:67:5b:21:42:7f:c7:d5:db:
57:22:2c:9d:3d:9c:07:bb:6c:42:e5:ba:07:ae:63:06:e6:5c:
b0:2a:d1:79:e4:ab:22:c5:17:26:87:cc:ab:c5:51:d9:e7:11:
e2:95:d2:27:9f:57:cf:3f:a5:fa:21:1b:a9:6f:64:92:26:a2:
c9:1d:51:67:2a:6d:24:ef:d6:95:c2:5c:1f:d8:0d:17:44:b5:
34:5a:2d:36:fe:12:a3:b1:6e:28:21:73:e6:17:73:6e:6f:38:
4a:81:3f:3e:c3:52:4a:28:f2:97:d4:de:4d:8d:79:e5:6d:61:
f2:0c:51:2e:81:06:b8:a5:3d:1b:8e:c9:fd:1f:cc:cd:96:ff:
b1:f1:2f:f0:cd:7d:6a:aa:34:ba:07:23:85:44:f5:e2:42:49:
87:ff:4c:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx2qIIMrX2Y5L8Wj8QV6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZDA2ZGQyN2JkOTNhMzgwZGE0Yzc1ZDFhOGJmMDc2ODI4
ZmQ2NGEwHhcNMjYwMzAyMDkwMDUzWhcNMjYwMzAzMDkwMDUzWjAzMTEwLwYDVQQD
Eyg0OWViZmNjOTljZDhlZjQzODBhZjFmYzc4MmZkNGMyNjhmODg0YjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnAppVktQlIGXyCuTKTuiRXCjxts
5muX+h4vreXkeTY2m6P2Tm2uSqOK55DfwGoEvbdS6zEoHnpvaltffBn9CshLCDnO
CnJAIxnMRA1jqS93rYyG8ODzVoodgiGAjtjmScc6te8/E3TdIbVDSpJo67uZ46zR
9hbQXH0qiaRAywIDv/ciQxrMTM/TKaMi2nlTt5bF7OTHyzlcWeD2YPB1LB7/Di7B
+SM2vzuwgaXGB4dJ/hg9yOEOyi7Xyo9oe7xVNYAE9AvuPZYzmb+A6UrxS8p6PtrV
eDFY8M/5K263UEpTVFRWAqNdbepsZeBLj6yYnVVL60Wl7+GBzgHnNwVsEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnr/Mmc2O9DgK8fx4L9TCaPiEsvMB8GA1UdIwQY
MBaAFArQbdJ72To4DaTHXRqL8HaCj9ZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYjc1ZGItMjViMi00M2RjLWFhMTIt
ZWQwMDFhMjg4OWFkLzEvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kYjc1ZGItMjViMi00M2RjLWFhMTItZWQwMDFhMjg4OWFk
LzEvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtxuzemA
fmkZoPaREF2Kv1MJoPEup5tMeJqejYc3Sk/6ys2aVX8gROE8Oqq+p3f+TbvTaCSU
G2QRfxtmLJPOC6uP/k1R0wlnwuNWViuqMg6HtQwzAtzSnbqejCySFWP5VrN6Cmdb
IUJ/x9XbVyIsnT2cB7tsQuW6B65jBuZcsCrReeSrIsUXJofMq8VR2ecR4pXSJ59X
zz+l+iEbqW9kkiaiyR1RZyptJO/WlcJcH9gNF0S1NFotNv4So7FuKCFz5hdzbm84
SoE/PsNSSijyl9TeTY155W1h8gxRLoEGuKU9G47J/R/MzZb/sfEv8M19aqo0ugcj
hUT14kJJh/9MJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:34 2026 by rpki-client