Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: apv4qIuaHzuCPHUBHGXko1jRK2SLxDxrN66gpZPdvV0=
Subject key identifier: E5:F3:DF:C5:B0:5D:AF:54:4F:9A:73:C7:2B:52:84:D9:90:DF:56:DC
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019F8F7DE5EEBF346049EBE114DEF789C07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0CBE
Signing time: Thu 23 Jul 2026 15:00:20 +0000
Manifest this update: Thu 23 Jul 2026 15:00:20 +0000
Manifest next update: Fri 24 Jul 2026 15:00:20 +0000
Files and hashes: 1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: s5dG+JONJPITmMRz0QzLuNnqR3UDuBgNAuPzGU0utlE=)
2: rRTCz9gdKZmCD2CPH7ZEPITaxno.roa (hash: IkdpUdMuuhLbUbcbS19kzqtq8+mEc9r+5ZSOWumJXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e5:ee:bf:34:60:49:eb:e1:14:de:f7:89:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jul 23 15:00:20 2026 GMT
Not After : Jul 24 15:00:20 2026 GMT
Subject: CN=e5f3dfc5b05daf544f9a73c72b5284d990df56dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:b1:01:c7:e9:70:2e:32:b6:82:fa:61:c5:
dc:a8:27:c9:1b:20:2b:94:1b:bd:e2:da:12:b6:0f:
d3:47:db:81:a5:65:0b:43:16:25:ca:37:f3:dd:70:
48:51:c1:cb:e1:8d:f0:3c:a5:b6:36:21:4d:c2:34:
62:7f:0a:79:f2:d2:df:51:10:6c:52:dd:21:59:8f:
e9:ad:97:42:49:1c:5b:18:9e:15:cb:74:f2:28:98:
eb:95:da:ed:6c:14:2f:b5:c7:29:91:36:bf:64:bd:
5d:bc:b4:d7:73:ff:b0:d3:cd:ab:6a:3a:77:2c:6d:
50:52:c9:5a:84:f4:88:2b:24:9b:c3:b3:07:d6:16:
88:d9:f6:80:93:f1:9f:f7:1f:f6:9f:73:6b:ce:04:
06:fd:fa:38:2e:6e:40:39:00:02:9c:b5:5a:62:eb:
90:4e:80:16:61:4a:ea:20:e6:d6:7b:e6:99:c2:53:
e1:3a:6a:5c:ff:4c:f4:aa:b3:72:92:50:e7:79:2f:
5c:53:a5:88:76:b8:98:d6:0f:ed:00:df:94:ed:f4:
62:e7:c3:4b:9b:8c:c0:07:4c:4d:c1:27:da:f6:22:
4e:c1:0d:07:28:32:4f:b0:6c:f1:91:15:fd:19:55:
2d:35:3a:a8:15:19:bc:dc:eb:65:00:85:da:39:0b:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:DF:C5:B0:5D:AF:54:4F:9A:73:C7:2B:52:84:D9:90:DF:56:DC
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e0:ad:f1:84:01:5c:6f:92:d7:07:12:ee:5e:72:f2:37:85:
50:8f:0b:b1:13:50:35:89:34:79:9e:d1:44:f2:83:82:9a:54:
06:3a:ef:ad:c4:44:7c:55:a0:e7:8e:f9:e0:9a:0e:af:1a:f4:
2f:8c:bc:3e:23:80:af:97:20:a2:db:29:85:d3:2e:80:b2:b6:
37:72:b4:a8:0f:72:d8:1a:1f:35:b2:68:84:bb:c8:00:4c:4e:
d8:ec:06:cb:d6:a2:26:08:5e:ee:0c:b9:97:79:07:8a:63:b4:
db:d6:2d:40:5e:f0:75:f6:17:a4:1a:3b:00:88:ec:bd:bd:ab:
39:9f:d9:41:a5:f9:28:6b:3e:20:56:68:8e:07:27:9a:07:e2:
96:96:37:a3:a3:fb:b2:d6:54:6b:7e:40:77:bb:01:a2:d2:ab:
20:c1:d4:7d:b9:83:c2:8e:dc:51:a9:76:cd:73:5d:15:a3:61:
b8:93:dc:51:54:5c:ab:c4:95:28:7b:7e:75:33:af:5d:35:b4:
c7:76:10:06:63:8d:2f:78:2e:e5:bc:f0:81:4a:06:de:df:f6:
cf:fd:b2:63:d9:59:55:91:2c:0b:11:c1:82:bb:76:b5:dc:64:
e3:35:93:f7:cd:11:27:98:05:c5:7b:62:23:39:f8:98:ac:5a:
06:b2:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:17 2026 by rpki-client