Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: 1UZF9dFAE4ceg5ylOJcEuuXrOWZp/Css0tDXakU779U=
Subject key identifier: 02:D2:87:AA:61:20:A1:BD:D5:6B:E8:DE:AA:23:21:9F:7A:35:CF:36
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019FA9AC241C6AC32BF19DDE56B302BAC626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 17:00:58 +0000
Manifest this update: Tue 28 Jul 2026 17:00:58 +0000
Manifest next update: Wed 29 Jul 2026 17:00:58 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: 6DmyBXZUUKjdXjqJ8O8MqS+SILcbA//MmJHwuP1C+9E=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
3: qpd4n4rrzsaA26B8vSZr6BByIoc.asa (hash: Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:24:1c:6a:c3:2b:f1:9d:de:56:b3:02:ba:c6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jul 28 17:00:58 2026 GMT
Not After : Jul 29 17:00:58 2026 GMT
Subject: CN=02d287aa6120a1bdd56be8deaa23219f7a35cf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:c8:1e:77:b2:f7:58:7a:67:31:4c:0e:6f:
4a:aa:80:5b:55:78:6f:ee:4f:4b:e6:c9:6d:91:44:
12:72:72:b2:cc:8d:db:9b:d4:2b:76:39:94:1f:b1:
83:df:f5:bb:6f:60:69:20:51:9d:28:f6:35:9e:24:
0e:09:04:5d:73:21:23:c0:bb:da:3b:1a:88:8d:e8:
f7:11:33:a7:34:ad:2a:7f:aa:89:c0:87:09:19:16:
56:d3:62:ed:fb:4b:b5:0e:31:16:f2:c5:80:1a:38:
32:1f:40:e6:95:5a:e4:c1:90:50:2d:a9:42:36:d6:
dc:30:c0:87:72:2a:d9:1b:82:d6:b6:3e:b6:f3:c2:
f7:d1:2c:f0:42:11:33:71:0c:94:95:6a:36:ca:96:
d0:99:c4:db:2e:a1:0e:8a:cf:0f:86:bf:06:9d:bc:
8c:2d:1d:48:d0:c0:28:6f:bd:f1:76:31:a0:95:01:
b0:11:51:34:36:10:99:b9:ae:d3:98:d0:66:87:d5:
50:e7:9d:2f:ac:3f:2f:6e:3c:02:d3:92:32:cf:e8:
25:86:b7:61:6c:bf:ff:8d:92:87:35:df:9a:6a:93:
ba:60:33:a3:75:a6:ca:16:91:e0:f7:99:56:9e:84:
16:a8:a0:04:6d:93:6f:53:62:db:c0:17:4a:9e:29:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D2:87:AA:61:20:A1:BD:D5:6B:E8:DE:AA:23:21:9F:7A:35:CF:36
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:29:94:35:44:af:0f:ec:b3:3c:4c:75:48:79:19:b1:18:df:
67:d3:5a:a2:1f:73:13:14:8c:ce:e2:70:0e:55:b4:60:f0:4a:
6c:07:75:da:7e:41:25:81:27:ed:d2:5a:2b:78:78:d0:b5:9f:
12:89:8d:13:7b:22:b2:76:02:a8:6a:3c:73:c4:e3:97:66:94:
ca:28:26:35:4c:6a:fc:e7:01:c0:5b:30:52:aa:0a:ff:45:a4:
43:18:8e:ea:6b:16:4b:27:47:7a:1c:99:fa:de:2d:c9:fa:64:
d8:4b:d0:0c:5b:57:19:7e:c6:93:0a:17:c2:73:8e:7f:3d:a6:
a5:89:85:51:f1:f1:35:e4:ba:9c:82:9e:27:10:55:d8:e0:91:
0c:28:8c:62:69:23:ca:65:7a:83:9b:1d:a9:02:ff:b1:c9:20:
e6:f9:98:ef:42:25:9f:01:a6:41:86:65:87:1a:be:dd:b5:ac:
71:2b:0b:c7:6d:20:be:36:62:12:f2:df:b0:48:5c:a6:bf:52:
9d:71:3c:1f:ad:e5:0e:54:dc:7d:81:eb:1a:3f:8a:1c:70:de:
dd:e1:1a:e7:de:98:00:ef:81:ed:aa:53:e2:66:6e:c8:9c:e4:
5e:4a:2a:72:36:ef:2f:9e:bd:b4:6a:20:33:bc:8f:86:33:4d:
19:f3:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:42 2026 by rpki-client