Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: pysRvttzs5hHlPcpcmOYtwYUXKi8GfIRjbUUWS9tvIA=
Subject key identifier: AE:82:95:EF:3F:4A:FA:B5:B7:5F:CE:20:0B:4C:9F:28:2A:C1:80:55
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 019CAD5A42B28FA5D71470E0315F9AC4339C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 12AB
Signing time: Mon 02 Mar 2026 07:01:39 +0000
Manifest this update: Mon 02 Mar 2026 07:01:39 +0000
Manifest next update: Tue 03 Mar 2026 07:01:39 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: NUbCRuomOTUtLiFelVe4YhOQoVvF3qDin/N8Vdpr6Jk=)
2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:42:b2:8f:a5:d7:14:70:e0:31:5f:9a:c4:33:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Mar 2 07:01:39 2026 GMT
Not After : Mar 3 07:01:39 2026 GMT
Subject: CN=ae8295ef3f4afab5b75fce200b4c9f282ac18055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:00:50:a8:ad:a8:b1:db:cf:0e:96:db:43:
86:65:dd:12:5c:ae:39:b2:56:45:da:79:68:8f:a3:
90:58:1b:dd:56:0f:c9:8a:6b:af:a9:55:d2:c1:3d:
a6:13:a6:b6:a0:d2:27:44:54:5e:d3:65:3a:c9:da:
a0:58:6a:6e:87:a7:46:20:8c:40:01:f1:ce:bf:8b:
78:dd:d9:8c:db:59:5d:20:c8:c0:72:f8:29:3f:a3:
42:2b:d2:5b:21:0b:5b:d2:4b:63:27:77:37:49:65:
b9:0f:23:88:34:0a:e0:29:bc:cb:1f:84:e9:fa:2f:
b1:b2:d7:a6:c6:c4:cb:f7:60:71:d7:ed:4c:e5:2e:
fc:3b:f2:47:91:22:94:b7:81:e0:1b:fe:f5:03:cf:
51:9e:54:13:11:ee:c6:51:1a:1b:99:3b:ec:33:19:
98:d3:a5:ae:0a:49:6c:84:0c:6e:41:83:22:f7:86:
e0:39:7b:79:96:cc:d0:df:ed:12:d4:64:8c:ad:73:
d8:4e:0c:cd:b6:ee:62:c9:a0:de:20:f3:40:18:36:
f8:49:1e:b1:78:0c:3e:a2:f3:87:c1:dc:fb:19:cb:
49:ba:28:90:91:fb:67:a5:09:78:69:ea:50:4a:23:
2a:fe:3d:0c:30:09:7f:a2:70:88:42:ee:c3:55:53:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:82:95:EF:3F:4A:FA:B5:B7:5F:CE:20:0B:4C:9F:28:2A:C1:80:55
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:27:d3:45:f3:17:06:63:b1:a3:c0:4d:f0:45:0c:fd:2b:aa:
c6:a0:f2:b6:a9:ab:49:a6:4a:62:96:37:d0:a0:e4:3c:48:63:
46:ae:81:a3:e7:a7:f8:86:37:e6:19:bb:e9:a1:d8:26:a7:27:
6e:28:f6:63:62:65:d3:cf:bf:80:0b:05:a5:6e:60:0f:fe:ac:
4c:f9:a7:59:99:6a:ab:9b:5c:f6:47:ab:12:99:09:1b:5f:da:
e7:3f:e2:c1:73:21:14:46:ce:4f:30:e4:0e:e3:21:a4:3d:18:
f4:ad:85:4f:20:70:f7:24:6a:72:7e:7f:16:40:77:ef:fe:f7:
f0:e1:11:c9:30:c9:10:11:5f:58:85:0f:fc:43:1f:bb:89:f2:
a0:f7:9f:a2:79:0c:de:90:8e:8d:e9:c5:df:fc:0a:4d:fc:f2:
2f:af:e6:e0:fb:71:d2:18:8b:25:dc:81:a8:7f:53:f5:e9:07:
9f:e8:83:cc:45:d3:f6:be:33:53:24:fd:12:2e:b5:e4:52:dc:
93:34:87:e3:10:c3:e8:a1:54:d3:0b:9c:39:ae:95:c4:a6:1f:
83:22:13:63:1d:b3:6d:ba:ba:25:5e:8e:7b:c1:44:48:54:c3:
8a:46:89:1c:16:5c:91:ad:59:9b:61:13:82:41:01:ac:d9:21:
52:8a:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:47 2026 by rpki-client