Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: qommqSunYnFNDsOzlSAO/nAJ5NKsz2fhiI7pUUjl5Hw=
Subject key identifier: 73:66:82:75:42:6B:CA:B5:20:BE:DD:36:C3:E3:34:17:72:47:A7:68
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 01A0C7EA85743260BB71AD0D703191D7C69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 14CB
Signing time: Tue 22 Sep 2026 07:00:30 +0000
Manifest this update: Tue 22 Sep 2026 07:00:30 +0000
Manifest next update: Wed 23 Sep 2026 07:00:30 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: ih5z6suJt4Nx+gm4RLCDOUBH8U6jy11b8fL4pW4ju6o=)
2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:85:74:32:60:bb:71:ad:0d:70:31:91:d7:c6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Sep 22 07:00:30 2026 GMT
Not After : Sep 23 07:00:30 2026 GMT
Subject: CN=73668275426bcab520bedd36c3e334177247a768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:cd:24:53:fd:c7:c2:98:d7:aa:0a:39:0a:
d7:d4:eb:5e:ca:56:b3:df:8a:a5:a8:a0:d2:d2:4b:
ec:e6:9a:02:08:40:99:4a:51:aa:7c:98:84:b6:60:
20:83:e6:4e:e3:67:81:c6:c9:af:71:a6:6d:67:60:
1e:c2:61:ed:d2:14:fe:78:d3:63:2a:c5:48:f5:bf:
6d:1c:ef:5e:66:71:3d:e4:0b:83:6e:d7:24:a1:ee:
a0:59:e1:0c:98:4e:31:71:b7:c5:23:97:59:7c:fd:
6b:cf:02:ba:ed:69:18:cc:78:bc:e1:57:67:70:b7:
cd:bb:cf:c1:49:4e:cd:69:b2:06:94:e0:6e:78:13:
91:b6:a4:55:48:88:10:91:59:ba:9b:91:07:2f:43:
9b:11:82:af:48:cf:0e:3a:8f:78:2f:a0:27:92:07:
97:2f:a2:b6:54:56:16:80:f8:7b:25:6e:4f:de:3e:
71:51:56:38:93:f2:a1:a9:2e:b7:f3:8c:d7:b5:28:
f9:08:2b:1c:44:a7:b6:09:d6:34:94:66:ee:70:d0:
a0:ae:5f:68:ee:ac:90:25:bc:cc:b7:f4:d7:11:46:
eb:fc:93:97:1e:e0:c1:f6:34:7c:b5:7c:30:cf:81:
ab:5b:cd:bb:4e:24:58:49:58:88:40:62:31:44:34:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:82:75:42:6B:CA:B5:20:BE:DD:36:C3:E3:34:17:72:47:A7:68
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:84:2c:9d:f7:d5:7a:86:08:08:13:35:2c:63:12:bf:bf:
44:34:16:e0:05:3f:0a:d6:3a:81:4e:5c:21:f1:df:fe:78:2e:
aa:ed:ce:5d:f6:f1:d5:c7:57:eb:4b:67:f1:69:91:88:fb:2c:
12:18:8c:52:d6:27:b6:d1:d5:49:70:e1:3d:e6:d2:72:a1:23:
cb:07:f5:5a:c6:6d:ac:04:ca:b6:5b:48:23:6f:67:c7:1f:3a:
f5:ed:a9:3a:26:f0:eb:e4:c2:c5:35:fc:cf:6a:bb:ab:e6:52:
02:39:fa:53:5d:31:72:10:dd:16:f5:cd:f5:a8:70:4e:77:68:
45:95:3d:7e:e2:a1:ef:23:bc:87:79:e7:34:5a:7f:77:42:00:
dd:bf:60:b0:00:c3:93:85:e7:de:17:01:7d:10:ef:91:97:77:
4c:ba:05:83:b0:0f:60:54:d5:12:de:e9:44:09:37:c4:fa:22:
ae:3a:7e:55:17:a5:71:5a:f8:f6:9f:9d:87:1c:b4:78:e5:1d:
1c:c2:8c:15:dd:29:4b:71:e3:ea:fe:de:1e:2a:a4:be:c4:84:
3c:11:a2:49:aa:03:3b:66:57:35:09:32:74:29:43:da:e4:54:
e3:9d:d1:98:29:24:82:27:40:71:24:52:7b:8c:f1:00:56:8c:
c9:f4:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:17:46 2026 by rpki-client