Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: 6v8nYsACmfI6V2IZTt4eUHicK4a7wm/CjuNB7gPyGl0=
Subject key identifier: 29:42:98:A2:79:58:2D:04:A8:80:76:84:17:E8:71:E2:86:29:7A:BD
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 019DA48AD934004E1A4EAD1A32978D80816B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 132B
Signing time: Sun 19 Apr 2026 07:00:56 +0000
Manifest this update: Sun 19 Apr 2026 07:00:56 +0000
Manifest next update: Mon 20 Apr 2026 07:00:56 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: 3f74sQ/dHSjr8q+S7b+kPI0Hbzvkw1Kwox9vRHrHuc4=)
2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:d9:34:00:4e:1a:4e:ad:1a:32:97:8d:80:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Apr 19 07:00:56 2026 GMT
Not After : Apr 20 07:00:56 2026 GMT
Subject: CN=294298a279582d04a880768417e871e286297abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:db:69:a8:22:71:65:b4:d1:8f:54:45:fe:
f3:40:63:1d:f1:ac:58:29:70:b1:be:c9:e2:0d:54:
44:3f:3c:c3:bc:f8:cb:63:ed:27:9a:6c:aa:8b:85:
8c:3f:c7:32:83:86:a5:5e:6b:96:de:b1:95:e8:a6:
3c:48:da:2e:9b:a7:21:7b:12:b1:45:11:fb:ff:a1:
13:27:b1:95:a5:51:a7:d6:bc:04:03:63:af:13:4f:
47:79:cf:f9:fe:d3:52:6f:0d:f6:fb:08:a6:7e:19:
06:71:f4:d2:63:2c:55:9f:74:91:dd:ab:85:ea:30:
df:3c:9c:e4:c3:22:9e:ee:ef:e7:d4:a2:46:ca:f7:
86:31:22:60:cc:27:14:41:5e:2c:bb:50:fc:20:4a:
cd:d2:79:00:da:1d:58:86:19:ab:c5:b3:4e:5e:85:
c4:88:f7:cf:c4:9d:41:b9:26:96:ac:45:dc:c8:db:
92:08:ac:97:e2:b7:06:9b:ca:95:6d:fa:42:66:f8:
90:62:c9:52:88:eb:36:42:f5:f4:a7:a6:da:42:14:
83:f3:b1:ba:00:35:5d:b4:a5:01:bc:68:b6:c7:28:
8f:02:ea:53:07:d5:47:b2:24:a5:34:a8:9e:17:20:
b7:00:8b:0c:57:cf:50:4d:da:cc:26:5f:63:4b:b4:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:42:98:A2:79:58:2D:04:A8:80:76:84:17:E8:71:E2:86:29:7A:BD
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:95:37:6f:56:71:f7:fa:21:d2:1c:2e:d8:7c:6a:15:3e:35:
05:b1:22:78:16:7f:91:e0:3d:d1:0f:72:2b:47:0d:ef:a1:97:
ec:4f:9e:cf:82:e0:d3:7e:c3:a8:11:23:43:30:93:6b:57:3d:
f0:97:db:d6:ab:90:9c:25:ed:24:c7:a2:08:7f:67:de:cb:b6:
8d:75:a8:df:78:f1:f8:9a:dd:f5:f5:72:9b:ad:dd:52:11:aa:
d4:1f:71:7e:93:16:d3:78:76:f4:42:3f:ba:a2:93:74:a6:48:
f5:fa:0e:d2:bd:c0:bf:f3:90:1e:23:08:6f:65:36:72:cc:1a:
39:14:3c:d8:41:31:bb:80:4d:38:16:d0:d5:49:9a:a3:70:4a:
fc:6e:3a:e2:13:1e:6b:32:9a:d8:bc:8b:b3:81:73:20:65:8b:
ec:c9:94:7a:e2:3d:45:a6:26:c9:ca:c5:5a:e8:bd:44:c3:27:
6e:78:23:21:b1:e9:b9:21:2f:29:57:c7:c3:1b:43:aa:6b:e5:
f6:e3:79:1d:3e:95:4f:f3:7f:13:a7:e0:d9:b7:01:24:65:f7:
50:cd:e3:4e:6b:af:d6:e6:31:16:91:dd:09:55:93:38:a9:5a:
0f:9a:68:4a:59:93:3e:b6:21:04:af:70:80:2d:3c:2c:d1:ab:
31:1e:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:05 2026 by rpki-client