Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: bBLsEolKKRHHW/FF2LoczYHZpKQAup1VbI0f3Q0SMNE=
Subject key identifier: A6:07:83:1B:CF:9D:8E:71:7E:8C:A7:AE:CC:59:7B:43:06:D0:53:8A
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 019DA4F8B0E8F9BC144047DCEB66B03F5F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: 95
Signing time: Sun 19 Apr 2026 09:00:54 +0000
Manifest this update: Sun 19 Apr 2026 09:00:54 +0000
Manifest next update: Mon 20 Apr 2026 09:00:54 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: 8qr4OE9hTkOf/DxYOzZuJmBV7zaDUGHiyHr3ei1OMII=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:b0:e8:f9:bc:14:40:47:dc:eb:66:b0:3f:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Apr 19 09:00:54 2026 GMT
Not After : Apr 20 09:00:54 2026 GMT
Subject: CN=a607831bcf9d8e717e8ca7aecc597b4306d0538a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:f7:1e:fc:13:5f:bd:29:d2:fd:17:2f:18:
66:37:23:7a:69:68:ef:ad:0c:36:44:a4:e7:68:db:
24:53:be:5a:35:f4:48:79:74:13:90:c0:2d:35:68:
51:31:39:b2:0f:de:7e:60:fb:e7:d8:0d:90:44:c8:
85:8f:2a:a0:94:1d:5b:70:f7:a3:0e:4e:34:e8:4f:
53:b6:66:d5:5b:1f:07:d7:78:a5:96:df:df:5b:c2:
69:a8:55:79:70:38:0d:82:fa:af:06:e9:b8:96:9b:
0a:7f:b0:ae:d5:ef:20:59:ce:ba:51:1e:a2:02:a9:
c3:89:42:dd:74:4e:d5:b9:ef:b0:02:3c:56:fe:ec:
a1:13:11:d8:40:71:0a:35:91:9e:73:4c:f4:d2:08:
75:99:28:66:ec:e6:db:11:bf:0a:d0:d3:88:ad:f8:
04:5b:ad:f9:50:47:63:2e:5e:63:d6:be:e9:cc:d9:
fe:79:1e:e1:8b:75:47:a8:d5:2e:a4:ff:33:ad:6b:
6e:15:12:2d:61:58:9c:e6:9b:38:cb:7a:27:dd:0a:
30:ac:6a:c8:8c:32:df:7f:e9:d7:c0:34:bf:44:1c:
a6:97:c6:2e:13:1d:f4:c2:7d:c1:61:8c:9b:63:bb:
85:dc:41:ea:31:5a:56:3c:c2:39:a1:0e:e5:76:bc:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:07:83:1B:CF:9D:8E:71:7E:8C:A7:AE:CC:59:7B:43:06:D0:53:8A
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:08:4f:ea:17:26:73:2b:10:b7:bf:f5:30:3b:73:27:75:
10:40:09:56:6a:a7:e3:aa:6c:a4:4a:2b:b8:c9:43:5c:df:13:
38:4c:2e:a3:49:3a:91:0e:3d:28:ff:a8:c4:d1:34:2f:59:3f:
44:87:62:a5:45:70:ea:33:de:f5:2f:ea:98:01:3d:60:0e:52:
23:55:47:91:1d:ff:36:0d:19:88:ba:30:81:e3:0d:c7:85:b0:
cb:a3:e6:18:93:57:34:8d:5f:91:7d:7d:c6:41:f4:a7:41:62:
bf:24:22:59:08:bd:a1:98:8f:3e:eb:fb:c9:10:84:0a:21:1f:
aa:2a:b5:da:57:31:24:ce:d4:5d:8d:70:90:a4:6a:e8:99:84:
26:8e:12:26:89:96:d3:f0:c0:42:b8:72:b7:c8:7b:c8:cb:e2:
f3:d6:f4:26:c0:75:7b:f3:a2:93:f1:d2:fe:36:cd:39:13:5a:
15:40:0b:ec:fb:1a:22:5f:64:0f:b5:a4:54:01:74:88:f4:7a:
ae:c3:b4:db:1b:fe:b7:e8:c0:68:3f:13:4a:b8:ac:8e:e5:1c:
62:01:ec:80:9b:88:c8:99:48:9b:37:95:ed:02:13:31:95:fc:
0d:b0:b3:04:70:ac:91:7e:0b:15:07:ca:f7:46:38:d3:b3:29:
6d:18:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 18:09:00 2026 by rpki-client