Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: uvEXLvyQvsAL0/A10yMQc2X6T12AI7TXV2SE625d9Zk=
Subject key identifier: BA:8A:BD:9D:1D:1D:11:C9:53:51:1A:9C:ED:B7:1F:22:0B:79:3C:99
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 019CAFB618DF8443210FFD461A391617F557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: 16
Signing time: Mon 02 Mar 2026 18:01:12 +0000
Manifest this update: Mon 02 Mar 2026 18:01:12 +0000
Manifest next update: Tue 03 Mar 2026 18:01:12 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: wMmJ+wi5x0nR0bs0gCsCfnFYZ0R5tnMQOwFzA9+cbBQ=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:18:df:84:43:21:0f:fd:46:1a:39:16:17:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Mar 2 18:01:12 2026 GMT
Not After : Mar 3 18:01:12 2026 GMT
Subject: CN=ba8abd9d1d1d11c953511a9cedb71f220b793c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:c0:6e:ae:b0:1f:6c:41:31:b1:0f:c4:e4:
6d:29:43:af:c9:37:09:45:c0:6d:6f:58:83:2c:98:
9d:e5:fc:96:dc:8e:fa:d0:bc:18:d9:f8:00:b0:a8:
44:67:77:e2:75:4b:61:75:c4:a8:e5:0d:bf:88:e1:
bc:47:00:98:cc:f7:fd:51:5e:4d:1e:a0:d0:e9:49:
c1:46:05:28:8c:67:56:c3:cc:80:14:d1:a7:22:05:
60:76:94:c6:1b:9f:1d:b9:1e:7b:61:f6:a3:d4:b9:
3b:3c:78:c1:3d:1a:17:e4:07:48:0c:39:05:43:bf:
58:65:cc:e2:b6:8a:a9:18:82:5f:d3:c2:60:30:46:
e5:3c:29:bc:22:e7:e0:07:fa:60:b4:73:c0:31:f0:
c0:21:dd:5e:69:ee:85:b8:8f:23:a5:3e:53:09:d2:
4c:51:55:cd:9e:8f:d2:4d:31:d7:51:96:cf:d5:8e:
ed:87:99:f7:a0:f1:a8:31:44:57:72:28:80:49:d7:
36:62:59:7f:df:7f:bf:34:e6:17:6d:b2:fc:ce:6f:
0a:66:7a:d8:d6:47:a4:b4:f0:82:23:31:ef:7f:d1:
a9:b2:1a:91:bf:30:fb:59:85:fc:a8:6f:32:86:2b:
15:b0:1b:f8:64:e8:eb:f3:d8:8e:ce:f3:60:d6:bf:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:BD:9D:1D:1D:11:C9:53:51:1A:9C:ED:B7:1F:22:0B:79:3C:99
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:56:5f:1c:d4:e7:32:7f:94:c8:7a:6a:54:79:66:36:5f:81:
3b:c2:3a:e9:16:d5:7d:d0:69:59:33:4e:06:0a:1d:55:c6:cb:
4c:78:59:45:2b:3d:ff:64:5e:e2:a8:05:fd:fd:d6:d0:80:30:
62:4a:90:4f:e2:f7:29:e3:da:f7:c2:88:54:e6:27:4f:86:b1:
de:8e:06:71:cf:c3:76:ff:e8:4e:ac:73:4b:f6:20:32:8f:b2:
07:49:cb:fb:3d:f1:b5:82:80:81:d7:9e:0f:b1:46:ad:df:4c:
c7:c7:70:fc:29:83:97:3d:b1:01:53:1e:56:e3:01:72:f4:de:
42:72:50:9e:b4:5f:2b:50:6c:56:eb:e9:de:91:25:c0:6f:67:
58:f7:79:58:f2:37:3e:e0:9f:8f:92:f4:0d:d5:c6:05:db:ab:
f6:a2:b1:7e:ec:55:c6:ce:57:9f:b3:e2:57:85:37:1b:fb:f7:
c7:4c:fd:82:8f:5e:97:72:fc:21:8a:37:f3:3c:3e:a8:a8:69:
eb:95:ab:c2:4a:78:32:53:dd:8b:d3:bf:2c:87:bc:07:91:78:
bd:9d:5b:89:52:0f:8a:17:5d:d8:98:a7:b5:2b:b4:08:de:22:
33:0b:e1:c1:e7:d2:51:2a:ee:00:4e:8d:8d:3e:8a:c0:0a:56:
d2:e3:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:20:55 2026 by rpki-client