Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
File: CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft (raw, json)
Hash identifier: FlBJo/3t+Yom/+SpNekFpLi/BrcjgT/CJZrqkRisnaM=
Subject key identifier: E9:BE:69:15:C8:14:1E:F7:F4:7C:59:41:63:08:FF:00:65:34:BB:F2
Authority key identifier: 08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
Certificate issuer: /CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Certificate serial: 019EC2925031CA7470B1DDA7595D40298DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
Manifest number: 1D
Signing time: Sat 13 Jun 2026 20:00:29 +0000
Manifest this update: Sat 13 Jun 2026 20:00:29 +0000
Manifest next update: Sun 14 Jun 2026 20:00:29 +0000
Files and hashes: 1: CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl (hash: BwVGg1F85wEVDMXgiCrIyvxSGI0iSKmIsF3FfA/vwa8=)
2: hR2Y21D7bGLkXBKfLZ5CaTvZjkk.roa (hash: YlH5pSNmOHP/rxbn9aW9AqtUI/I4F8K3HIAacFaEpNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:50:31:ca:74:70:b1:dd:a7:59:5d:40:29:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Validity
Not Before: Jun 13 20:00:29 2026 GMT
Not After : Jun 14 20:00:29 2026 GMT
Subject: CN=e9be6915c8141ef7f47c59416308ff006534bbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:57:80:c7:a9:d6:f9:d1:a2:00:45:61:dd:
91:20:c0:4e:34:22:17:f0:fd:5e:bf:0e:bd:b1:5a:
9d:67:da:2b:c1:9c:0d:88:b3:51:cd:e3:fb:58:2d:
95:f3:8e:bd:86:fa:e7:62:00:b8:e7:b4:c8:4e:a4:
4e:38:78:b0:ab:9d:63:f6:c0:52:c2:31:ab:51:d5:
07:ad:e2:12:fa:c7:03:d0:bf:34:44:ac:a6:af:92:
e1:fb:95:9e:3a:8a:3f:9e:58:b3:5f:6b:22:a2:9f:
e2:94:23:d6:a1:da:17:80:90:22:91:85:c0:18:d3:
fd:c4:1f:66:ce:48:f6:75:4f:e9:23:56:eb:9b:11:
84:19:bd:36:2f:bb:19:45:bd:43:e4:82:8d:d2:ce:
98:c8:25:e5:0f:0b:7d:08:93:f7:3d:7e:0c:1b:54:
6a:4e:e0:0b:fa:ff:2b:e0:cf:39:bd:81:c3:50:81:
b3:ba:9e:8e:03:b4:42:cd:f4:4b:df:40:79:81:e8:
fb:7d:6a:18:f6:98:73:cc:9f:86:57:fc:3a:40:19:
39:c5:c0:be:b4:77:fa:96:38:48:b3:c8:94:5e:f5:
67:39:90:57:c0:78:77:fc:69:56:04:11:5b:83:e5:
35:5a:54:56:8d:9e:b6:5a:6e:b5:d3:e4:59:ac:47:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:69:15:C8:14:1E:F7:F4:7C:59:41:63:08:FF:00:65:34:BB:F2
X509v3 Authority Key Identifier:
keyid:08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:a5:21:47:84:17:b5:b3:f6:8a:be:43:60:1b:d8:ff:4c:
3e:a1:3e:e4:dd:23:57:02:86:85:09:13:d0:ba:0d:a4:ee:76:
4f:63:33:dd:93:86:f4:e4:a7:96:10:25:48:fd:2c:49:13:16:
8a:6b:5b:ce:5c:51:f4:da:d9:6f:e4:46:20:8f:76:0f:c7:32:
27:9c:e4:48:08:d0:cf:2b:b1:ba:98:2c:ce:2d:38:86:a0:a2:
a7:43:ce:a6:ea:a5:82:ca:af:55:ac:90:6f:f0:12:fb:17:09:
b3:44:32:4e:77:80:7c:a7:50:88:45:4f:9b:04:6c:d7:e4:28:
49:32:25:73:a2:3a:25:38:8f:83:5a:20:15:3e:4e:34:9f:e6:
99:fb:8a:49:b7:ee:23:6b:7c:0d:00:80:37:f6:32:af:02:a8:
f3:99:15:fe:ab:f4:39:da:19:79:fa:f6:f3:0f:e3:68:47:98:
0a:1c:30:16:6c:52:5c:6e:cb:46:f0:38:ea:ab:cb:72:de:ee:
61:5b:43:e3:1a:2b:c4:05:60:ac:6a:76:ea:7d:e8:d2:44:06:
4f:cf:e9:e6:b7:2e:b0:68:2d:d9:98:7b:27:cb:26:52:79:45:
7a:ae:cf:70:1b:78:84:ae:8f:49:e2:da:6a:0d:79:32:a8:f9:
97:4c:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:52:29 2026 by rpki-client