Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: ond7dr42otypVvEMQ9aY6GLcmx2yiLxBza3YfpvK9BE=
Subject key identifier: AE:0C:9C:8D:BB:E6:89:87:AC:D0:6D:CF:54:91:60:66:E1:D8:7A:93
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 019EC2CA1AF1556E42CDBB8350FD68BE1B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: 0129
Signing time: Sat 13 Jun 2026 21:01:25 +0000
Manifest this update: Sat 13 Jun 2026 21:01:25 +0000
Manifest next update: Sun 14 Jun 2026 21:01:25 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: tFITKIUhXaIBxQqhkwn42KDtB7ZzISPjYAvO/ykUv2o=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:1a:f1:55:6e:42:cd:bb:83:50:fd:68:be:1b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Jun 13 21:01:25 2026 GMT
Not After : Jun 14 21:01:25 2026 GMT
Subject: CN=ae0c9c8dbbe68987acd06dcf54916066e1d87a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:01:75:50:18:e1:7a:9c:6b:f1:97:b6:05:
91:63:00:da:b9:40:0f:64:ba:ae:1c:eb:b8:d2:7e:
1d:10:b4:b7:4f:9e:8a:3b:b9:32:1a:eb:79:6a:97:
77:20:ea:2d:66:2b:7f:76:d8:be:6e:81:cf:80:30:
6b:2b:17:b3:1c:50:7b:9a:76:dc:34:09:dc:ee:fa:
d6:5b:86:72:b1:8d:2d:a4:33:27:70:68:9d:11:52:
8d:50:d0:c3:8e:e0:82:e0:f4:71:e7:3c:42:05:6a:
79:42:03:65:61:cc:37:51:c5:8d:70:f6:88:2b:86:
26:f5:03:62:a4:b5:61:de:aa:82:e3:ab:72:4d:ff:
ff:0b:da:6f:f6:08:dc:85:bd:1b:f1:36:8d:e0:82:
f2:9d:43:cd:a4:55:1f:55:02:f3:c5:a5:66:f3:38:
2a:53:6b:3e:4d:78:f7:9f:5b:c2:fc:ea:f5:03:d1:
05:eb:39:8f:c5:99:e8:cd:cb:26:c8:5a:29:af:ee:
92:dd:fa:54:4a:b3:c6:03:a7:1a:46:36:a0:04:73:
93:9b:84:10:d9:1a:f7:05:35:7e:71:e7:ae:ef:00:
e2:75:b4:bc:fa:df:0e:bc:ab:e7:53:8e:84:c0:8a:
2a:60:66:98:a2:89:f3:be:59:d4:d2:dc:df:7e:ac:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:9C:8D:BB:E6:89:87:AC:D0:6D:CF:54:91:60:66:E1:D8:7A:93
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:02:16:69:4d:68:fd:ed:05:7d:f9:22:f0:65:29:7e:e7:c5:
36:a2:d1:c7:4b:89:66:79:66:04:5c:1e:6c:ac:50:5e:bc:c5:
d6:0c:5a:7c:9d:fc:ab:24:09:7a:55:97:e9:f1:3a:2b:0b:68:
d6:d0:68:60:05:02:2c:05:32:d3:46:f2:02:9a:88:f0:3f:51:
73:fd:4b:6f:42:69:2d:2b:06:69:11:36:ec:12:51:be:dc:e4:
0e:36:bb:f1:6d:56:83:33:e4:9f:48:1f:cb:df:45:f3:98:5b:
00:61:11:5f:1e:40:64:45:0a:98:b7:2c:51:0d:96:e5:99:79:
26:d8:5a:9f:47:5c:58:0e:62:d1:49:30:6f:e3:42:52:a9:46:
99:f1:18:f3:51:07:6b:96:be:c3:0d:0f:70:ef:66:41:e5:a2:
b7:9d:22:f6:c0:e5:b0:08:58:d5:b3:c7:c5:86:73:83:31:c2:
5c:82:18:e5:bb:5f:f1:cf:3f:75:d2:b8:d2:33:3d:21:51:36:
cd:dd:a8:f3:e0:c0:ca:85:0b:af:0f:c8:bc:bd:16:de:15:cf:
0f:74:8b:54:eb:36:8d:cc:1c:7e:c5:4e:c5:c8:dd:b7:64:fa:
82:86:c8:53:42:f9:54:c3:b7:14:74:a9:74:41:4f:54:f9:53:
e8:ae:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:42:52 2026 by rpki-client