Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: 50yxvKcBiD411VzPzEVaiEQU+/OUP2GVUz4Yta7t4z8=
Subject key identifier: 3D:8B:41:EE:37:42:4A:CF:32:0C:34:8D:28:93:56:5D:85:EC:7B:C9
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019CABD8F76414E16200B7590DCF93B203BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: oDws64Vw1CRyJqIbOXfzBDXf3qITOxwNDBxb9Ra8qdo=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f7:64:14:e1:62:00:b7:59:0d:cf:93:b2:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=3d8b41ee37424acf320c348d2893565d85ec7bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:e3:25:19:9c:95:a7:50:ba:a3:66:74:8a:
ac:18:7a:5e:b9:32:a8:91:b0:1d:7c:c3:7f:3b:ab:
8e:fb:57:c7:58:b2:68:95:f8:13:25:a9:5d:c3:c3:
c2:aa:9f:1d:27:13:89:58:59:71:4e:b1:60:df:a7:
f4:78:72:22:6b:eb:4e:f5:e7:ac:2a:58:4a:8e:2b:
ff:d9:b1:bc:64:22:ce:fa:de:37:c1:44:ab:df:26:
f8:ec:b4:92:f3:26:df:e5:7e:5d:eb:2b:05:98:ef:
60:58:a5:ef:80:6d:9a:73:57:1a:4b:ad:72:3e:5f:
62:33:c0:3c:2b:b4:b4:66:19:e0:04:c1:dc:4b:d3:
3b:b1:4c:09:8f:86:e5:03:67:79:f0:9a:39:8d:4a:
cb:f4:64:3e:17:da:a7:f4:64:68:f8:7a:c2:d9:e2:
7d:5c:24:64:21:47:34:f8:ee:7e:69:83:8e:9d:03:
f9:e1:f1:09:22:31:df:85:f1:3c:f5:67:59:13:05:
e3:ca:b8:da:e6:35:e6:d8:ec:4d:fc:c3:cb:cb:c4:
e2:57:4d:a2:fc:86:0d:ef:e0:69:74:c8:c0:c6:77:
f8:7b:2b:42:e5:ac:19:b9:7f:77:bf:df:1a:18:e8:
0f:70:4b:c9:3f:35:53:7b:e4:80:8b:27:bf:68:8d:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8B:41:EE:37:42:4A:CF:32:0C:34:8D:28:93:56:5D:85:EC:7B:C9
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:ad:f2:f3:3c:2b:76:31:ca:42:06:0b:2f:ed:98:8f:38:
e9:05:4b:81:5e:c8:6d:e1:9d:48:4e:c2:0c:14:da:7a:1c:fe:
f7:38:65:f3:a9:72:28:5e:a5:f2:38:27:71:0a:0c:b3:f1:cf:
74:84:be:7e:66:59:af:75:ff:b0:c3:86:68:8e:5a:fe:3c:ad:
2f:79:93:92:be:b5:fe:9e:c2:f0:1b:09:34:5b:9e:1c:5f:99:
64:9b:23:18:ac:e5:ce:af:98:28:37:90:3d:a9:40:34:77:b3:
4e:31:a6:4d:25:24:a5:aa:25:b1:46:3a:71:4e:ab:3b:22:d2:
6f:b9:a1:cd:92:ab:c7:1d:e8:64:75:49:45:a2:9b:9d:c1:1a:
5d:4e:3d:95:40:ab:49:9e:9b:17:f0:22:07:ea:39:61:68:70:
e7:37:4d:cf:a1:ec:92:fe:a3:5d:a0:0c:b1:df:19:9b:25:6e:
02:fb:b1:92:e2:ee:49:a4:1c:29:59:60:33:63:c9:49:7e:86:
82:a6:d3:0b:25:8f:96:d9:be:69:00:0a:b6:d7:7e:16:78:52:
64:3d:09:aa:e2:94:60:1e:dd:25:28:c7:5a:e6:ba:58:aa:cb:
ec:2f:e5:31:61:04:7c:87:b1:36:53:6d:d2:0b:51:a0:36:49:
87:7a:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:14 2026 by rpki-client