Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: tBw+HGnnaO7Cx0Zg0di8UgLr84+rLhjINDLjSEJ1k/o=
Subject key identifier: C4:08:DA:94:5A:AC:49:8C:8B:FC:ED:69:30:63:5F:E4:89:26:B7:09
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019EBE10BFB53792AE90174BD99D171EA9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 195C
Signing time: Fri 12 Jun 2026 23:00:29 +0000
Manifest this update: Fri 12 Jun 2026 23:00:29 +0000
Manifest next update: Sat 13 Jun 2026 23:00:29 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: 7tvMxURREyPDPjki/Xxs7GucHvInOPp4z07QZXXRSpE=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
3: qpd4n4rrzsaA26B8vSZr6BByIoc.asa (hash: Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:bf:b5:37:92:ae:90:17:4b:d9:9d:17:1e:a9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jun 12 23:00:29 2026 GMT
Not After : Jun 13 23:00:29 2026 GMT
Subject: CN=c408da945aac498c8bfced6930635fe48926b709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d3:a4:12:af:5f:67:ab:cb:02:4b:9c:0f:d1:
c0:72:38:a6:a6:be:13:03:95:ae:0c:9d:51:11:62:
78:a4:bf:33:c9:45:9b:81:4d:71:d6:09:2f:72:b1:
89:d3:a5:37:aa:0e:6a:00:38:b3:cb:82:1e:ed:a5:
6e:95:df:c9:04:c0:e7:0c:7a:30:6f:48:17:3c:93:
19:a0:ed:bb:6a:f5:94:ff:29:45:72:f4:88:d8:55:
f4:77:50:39:50:42:38:44:5d:d5:a5:df:ce:c9:90:
ed:11:49:86:46:df:dc:07:ec:c6:e8:a0:98:c6:88:
f3:61:74:7d:bb:57:b8:cb:fa:e4:23:25:12:c4:18:
c8:d8:93:67:a8:8c:51:a1:9e:a7:2c:00:e6:a7:a0:
94:01:22:ae:01:41:c2:f9:d2:47:3c:a3:5e:da:01:
5c:09:4e:68:3d:78:b6:77:96:ff:0d:db:6f:c3:1d:
d2:6f:bb:bb:5d:10:44:04:0e:82:43:6a:80:67:2c:
75:8e:a1:ff:7a:42:a2:88:f7:f6:0b:40:1b:f9:94:
af:07:eb:9e:a0:3d:b2:b8:a8:d0:1b:7d:66:57:25:
e3:75:0d:bd:37:bc:8d:1f:52:f1:10:bc:47:6e:62:
9e:14:29:41:f4:83:7c:1e:1b:9c:08:29:42:9a:fd:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:DA:94:5A:AC:49:8C:8B:FC:ED:69:30:63:5F:E4:89:26:B7:09
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:91:0a:ab:c8:91:45:0d:c6:1b:f0:90:4b:85:1b:d9:9c:5c:
15:b1:31:ac:01:c5:c7:34:bc:26:3d:59:3f:50:46:6a:ea:e1:
49:ff:a8:d1:46:6c:d1:5d:c6:73:15:64:96:eb:2e:32:69:ed:
1a:fe:4c:bc:03:2d:2c:c8:b1:ef:76:a5:4c:12:ec:9c:6f:fc:
a1:74:67:fa:ac:c5:b4:cd:a4:01:ee:38:33:17:6f:61:68:ae:
33:68:f2:37:1c:01:3c:28:1b:b7:ef:92:24:6b:e4:10:68:50:
8c:a7:38:85:61:39:a5:ed:aa:91:56:46:c7:ac:a7:e4:b5:99:
21:7c:ca:c3:1d:79:69:b6:68:29:15:a3:75:19:5b:bd:16:02:
71:39:aa:9f:82:19:49:d2:68:ca:0e:ca:45:d8:03:d5:98:1e:
df:f1:c9:0b:9e:99:70:ec:74:c1:6d:cd:fd:72:73:a0:05:11:
b0:cb:6b:9d:78:c9:97:ce:9b:6f:56:d5:d4:bb:81:a9:8b:22:
ff:fd:f3:b9:3a:28:11:15:42:77:85:fd:ee:6c:0a:e0:54:cc:
e5:e6:79:04:72:76:41:a4:c9:bc:0d:27:23:d3:44:b1:34:04:
5f:b4:b1:e9:7a:50:93:2a:49:6b:23:ee:92:16:54:5f:8c:b7:
89:96:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:07 2026 by rpki-client