Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: 2HWO90WK7eBy9cAUeW0eTMBZ3CJFsIGLbRWkyPvgG1E=
Subject key identifier: BF:91:2A:05:86:73:AC:0A:89:5B:B9:4F:CE:A8:DD:55:21:6F:92:7C
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 01A0BDD53B78C701F03D096DA93AA6995FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 08:01:03 +0000
Manifest this update: Sun 20 Sep 2026 08:01:03 +0000
Manifest next update: Mon 21 Sep 2026 08:01:03 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: MLs9hoYRgTweHbkEg+Z75HTvSqVqmCeyyz7H2HJ2k7Y=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
3: qpd4n4rrzsaA26B8vSZr6BByIoc.asa (hash: Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:3b:78:c7:01:f0:3d:09:6d:a9:3a:a6:99:5f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Sep 20 08:01:03 2026 GMT
Not After : Sep 21 08:01:03 2026 GMT
Subject: CN=bf912a058673ac0a895bb94fcea8dd55216f927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:6c:63:21:a0:c1:aa:9c:f4:1e:76:32:eb:
3e:f7:0a:40:5d:d3:11:fd:e8:d0:a0:0f:33:24:c2:
d3:c6:52:86:a6:df:fc:e9:ad:47:7e:26:2c:dc:c7:
69:6b:c2:79:a5:9a:2c:7e:53:ac:1c:ae:0d:2f:54:
18:17:7f:19:fd:42:a9:f4:87:6e:6a:5b:af:97:bc:
1a:a8:ea:1a:2b:71:fe:aa:0c:48:7a:bb:54:05:7d:
9f:a8:a8:e2:97:7a:77:4e:6e:8a:95:f2:d1:2e:0d:
ff:e4:2b:b2:f0:f4:01:8c:83:7d:05:5c:53:31:ce:
3b:0d:8f:e3:32:b2:ab:c5:80:5f:db:cb:05:a7:21:
62:9f:06:6f:62:d0:a8:2e:32:15:fd:be:23:e6:47:
17:0e:46:4d:1f:00:ca:aa:8e:53:f3:6f:33:c9:9f:
b1:27:c8:7c:70:a7:3c:2c:d3:3f:e6:23:07:65:0d:
9b:38:da:5e:67:0d:55:8e:c6:04:d3:64:48:7e:91:
bd:f7:f7:a5:0b:85:d6:0d:99:2b:c6:d0:a0:5f:04:
e5:f5:74:c7:6c:22:94:f4:13:e1:99:c4:b4:e9:55:
9f:a8:d4:90:00:17:d7:8e:46:43:84:08:36:96:b5:
d9:45:11:9b:25:cf:9c:bc:7a:ac:db:2f:de:b9:23:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:2A:05:86:73:AC:0A:89:5B:B9:4F:CE:A8:DD:55:21:6F:92:7C
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:96:a5:3f:df:fd:fa:a4:65:f4:a5:a2:81:fc:54:6f:1a:39:
bb:fa:27:ee:19:ef:61:55:c0:f7:0a:46:07:a9:61:4d:b1:e6:
4c:09:88:ce:b5:77:40:31:79:c6:8d:33:2a:93:61:56:3f:85:
dc:95:1e:33:8f:94:62:37:1c:69:56:c9:75:c8:2a:23:39:11:
ed:a6:1e:a6:4e:31:d4:78:6b:a7:c9:07:bc:87:0b:ff:49:02:
fc:ad:6b:9a:f0:5e:19:07:19:7c:4f:1a:29:d0:2c:4a:4f:f4:
34:09:e3:70:3f:0b:32:ac:e9:8c:68:fd:76:91:f1:3c:1c:a0:
8e:9d:54:29:5e:80:fe:24:35:8a:cf:85:31:65:55:f1:9c:35:
6f:e4:89:f7:91:11:2d:52:28:b7:e4:3f:cb:8d:60:52:86:97:
f9:2f:f8:52:83:13:6a:a5:f5:ad:cb:1f:bb:ce:a9:4d:9a:66:
e8:f7:54:c0:d5:cc:8b:2f:04:91:a1:c0:13:2e:7d:01:28:9c:
a0:47:5a:b3:5d:3f:39:f6:79:c0:7a:88:e3:7a:83:6f:fd:d3:
80:d0:e9:fb:84:ac:2a:05:40:b4:52:9f:d7:4e:67:5f:05:f7:
f8:6f:8d:dc:bd:6a:3a:46:2f:70:bc:e9:db:46:70:cf:f9:18:
89:7b:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:57:29 2026 by rpki-client