Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: WiSNBYyijVOGfVpgmRKURfkfAjPRECo4xySoxf8fNxQ=
Subject key identifier: 40:E2:B9:90:08:A4:FB:0F:03:F2:E0:95:C2:D9:D0:B4:50:F0:E0:5B
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 019FA82B166D95538E8BE17A9548C6838A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 1436
Signing time: Tue 28 Jul 2026 10:00:23 +0000
Manifest this update: Tue 28 Jul 2026 10:00:23 +0000
Manifest next update: Wed 29 Jul 2026 10:00:23 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: LMLXOnWu21jhgH7PYb42IQp8P6Z/4PyvmNH66eSS+yk=)
2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:16:6d:95:53:8e:8b:e1:7a:95:48:c6:83:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Jul 28 10:00:23 2026 GMT
Not After : Jul 29 10:00:23 2026 GMT
Subject: CN=40e2b99008a4fb0f03f2e095c2d9d0b450f0e05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:56:26:4b:57:d9:eb:0a:b0:5e:32:89:d9:
b6:11:8e:be:b6:fd:92:5b:a2:c9:a0:1a:fe:c7:e5:
9f:ef:28:df:41:a3:62:45:3d:48:1c:4c:70:72:a5:
77:88:35:3b:56:91:11:bb:3f:51:5b:ca:f4:c5:cc:
e7:f8:c0:ec:47:cc:ba:5f:1d:16:77:31:72:38:aa:
ad:70:f8:46:0b:53:a1:4b:bc:5c:0b:f7:6b:5b:96:
97:1c:80:7e:0a:86:7b:8c:6c:76:34:be:c4:87:c2:
e7:68:6c:5d:48:80:fc:d4:fa:fc:a1:3a:1c:a2:b6:
01:e5:06:84:a8:e2:84:e3:67:b1:64:d2:43:f4:34:
39:1b:74:8e:fc:a0:33:3c:64:f9:82:d3:fd:82:6e:
65:89:3c:b1:05:a7:7e:23:2c:83:8d:3a:c3:57:b8:
b4:f8:d2:4f:dc:83:d9:7f:c3:5b:4a:e9:74:3c:1b:
0a:c2:ff:23:39:86:3e:7c:62:7d:24:29:05:76:0d:
c9:99:7a:70:00:ab:b7:b9:71:40:62:80:14:1b:b1:
32:07:ce:5a:6f:b1:bd:10:eb:ce:97:b8:ce:c6:50:
2a:65:e8:5a:fd:d7:37:a6:6d:56:35:a0:a0:da:91:
d0:b8:ef:df:32:b6:22:a2:3e:28:f2:30:e9:80:d2:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:B9:90:08:A4:FB:0F:03:F2:E0:95:C2:D9:D0:B4:50:F0:E0:5B
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7a:a6:af:c6:52:7d:c2:b4:7d:92:41:9d:2e:0c:06:0d:93:
e7:53:80:78:26:a7:32:06:c9:a1:1d:c1:cb:31:98:64:2e:a6:
ad:1d:05:ad:e2:52:38:e7:67:b8:92:3c:75:b2:cc:1e:91:2b:
fc:65:aa:64:94:8b:1e:9f:37:8a:d8:57:cf:98:ab:73:09:ac:
17:ee:f6:be:40:a2:f3:85:24:6f:76:fc:87:f9:b2:39:b4:8b:
07:8b:54:dc:11:ec:88:90:40:a5:fb:c9:e1:b6:98:78:d5:66:
8d:93:ea:4f:da:56:77:e5:53:25:9c:38:e9:02:50:bd:66:c8:
38:70:37:3a:ba:97:5f:1f:2c:e7:b8:29:37:86:4c:87:31:6c:
7a:7c:2f:84:3b:00:ad:ec:67:9c:b8:86:c8:37:11:60:9c:5e:
52:2f:df:1e:16:8f:a6:a1:7b:89:b1:77:b2:85:02:fe:fd:1d:
d6:22:06:6c:b7:b3:b1:dd:91:51:71:33:f2:5f:75:ef:6f:c1:
6d:d9:68:28:cf:92:d8:3c:5c:a1:a6:f9:06:43:02:5e:5e:fc:
52:ca:a7:32:bd:f1:ce:51:71:92:38:a5:38:38:61:e4:01:e2:
37:32:5d:13:77:63:59:d5:c4:31:8d:5c:1a:97:6a:d7:78:31:
e1:c4:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:39 2026 by rpki-client