Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: gEyO+muNeqDIBFMcoJpQVZ5MkniwPst8mK+RgTCLOSo=
Subject key identifier: 5E:76:02:3C:54:DD:51:0D:50:3B:80:0B:84:AC:48:6F:BD:B9:7D:B8
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 019D996218B30F9CF94E5DD5A09508914119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0BEF
Signing time: Fri 17 Apr 2026 03:00:35 +0000
Manifest this update: Fri 17 Apr 2026 03:00:35 +0000
Manifest next update: Sat 18 Apr 2026 03:00:35 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: KvrLLJ5T35M/qYFc4bxKibJCqq2jH7kfZX2+03kY3W8=)
2: fzKhZS7tgEqUrdZvJWQiBhGYXjs.roa (hash: oNIwrLOUrwNgDI/YRh0BOg1IxHhuOn9PuGYKfadJj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:18:b3:0f:9c:f9:4e:5d:d5:a0:95:08:91:41:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Apr 17 03:00:35 2026 GMT
Not After : Apr 18 03:00:35 2026 GMT
Subject: CN=5e76023c54dd510d503b800b84ac486fbdb97db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:18:76:45:e8:02:96:61:88:c3:1b:56:9d:
2e:ff:3b:7e:83:d4:0e:0a:51:26:e7:f6:46:00:0f:
e7:4d:3e:ca:7a:9b:2a:7c:4f:99:20:3c:eb:90:52:
7e:f6:aa:e0:ac:dd:80:1a:ea:fe:4a:06:71:b7:9c:
10:ce:ed:81:43:c4:65:ff:ce:da:a7:40:18:14:0f:
02:af:d5:82:6d:dd:cf:d5:c0:fe:de:84:db:5d:60:
55:90:e0:87:e2:bd:85:a6:f5:bd:db:33:a2:63:03:
2a:a8:c4:bf:ab:fa:cd:83:98:16:76:33:93:3c:cd:
88:1f:90:5e:23:15:7d:6c:c3:80:13:e6:31:e1:16:
52:d9:12:c6:d9:49:5f:b2:48:f4:af:c2:ff:f1:b4:
79:96:75:30:cc:60:66:af:b0:a0:02:f6:4d:6f:3d:
15:8d:24:bb:d5:18:35:1a:1b:ea:8c:49:d6:d8:4e:
df:a0:d8:06:bb:8b:a3:36:01:fd:b9:3f:ef:2c:8f:
52:1a:22:3d:4b:6a:c0:7e:e5:01:4a:47:44:26:db:
76:c6:f2:5b:2c:60:3b:93:2a:3e:f1:76:e4:81:b4:
61:4c:8b:01:ec:a2:45:20:14:7b:69:bc:85:64:10:
c3:e6:a8:7e:55:d8:eb:dd:65:c2:ae:8c:b7:14:30:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:76:02:3C:54:DD:51:0D:50:3B:80:0B:84:AC:48:6F:BD:B9:7D:B8
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:08:98:c4:95:38:25:a6:f4:c6:d2:b4:f5:3f:c6:32:8e:59:
9c:fa:3e:c1:07:aa:2e:05:09:0c:8f:8d:d9:be:45:1b:12:ba:
3d:55:60:b6:59:78:3e:50:14:53:8a:d2:ce:7f:48:bd:6e:19:
52:da:82:02:a6:03:26:2c:26:70:8f:c3:31:6a:0d:4e:7a:c0:
53:20:79:67:61:44:59:7e:95:47:6f:dd:50:bf:a3:68:c2:e3:
5f:2f:f7:e8:b1:1a:c2:21:6e:52:33:38:50:f1:60:9e:70:02:
66:01:51:c4:11:bc:c4:b8:64:a1:b8:98:55:82:1f:f8:85:1d:
29:f0:5b:03:14:bc:e8:5e:a1:68:17:d0:1e:15:33:97:3b:cb:
2e:1b:e1:15:ec:31:a0:02:1f:22:40:94:24:47:d3:d5:6c:31:
8d:da:ac:51:65:c8:7e:a1:07:a9:d0:1e:7d:c6:6d:3a:a8:aa:
bf:52:0f:10:a9:78:58:8e:a6:47:55:f2:1d:27:fa:42:ac:c5:
10:56:e7:92:e3:22:31:a3:f1:57:bb:e6:86:88:53:38:4b:4c:
13:57:df:3b:59:a8:d2:58:10:32:41:0b:4f:02:e4:52:59:7e:
be:65:2c:8e:d0:8b:b1:3a:b0:bc:8d:cf:6c:99:dc:3b:2e:c1:
09:c4:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:15 2026 by rpki-client