Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: swY4l+5CLCOorAUY1GM7x1UGPiyzb9ZEYvvUmocSnzk=
Subject key identifier: EA:91:BC:7E:CA:14:C1:9B:93:91:8B:37:90:5D:94:9D:2E:F9:37:68
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 019E1DFE307AC3A2D85B3FD22A5E023EE45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 17A5
Signing time: Tue 12 May 2026 21:00:58 +0000
Manifest this update: Tue 12 May 2026 21:00:58 +0000
Manifest next update: Wed 13 May 2026 21:00:58 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: RiD3wxAvRFMturc3WJr+dXLfLkLm1FASVIloqGQtxs0=)
2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:30:7a:c3:a2:d8:5b:3f:d2:2a:5e:02:3e:e4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: May 12 21:00:58 2026 GMT
Not After : May 13 21:00:58 2026 GMT
Subject: CN=ea91bc7eca14c19b93918b37905d949d2ef93768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:2c:00:3e:f1:4e:68:d2:f9:dc:81:8c:7d:
e1:75:9d:b0:b6:55:49:1a:ba:4a:6b:13:12:13:0f:
da:24:e9:9e:c3:dc:a4:d3:a8:ba:08:54:e0:c6:39:
e9:43:ad:2c:71:c4:e2:79:47:6d:fd:0c:1c:60:65:
bb:a5:f3:6c:b8:43:61:56:5c:86:fe:61:58:b2:15:
9a:a6:cb:f0:49:2f:76:3a:eb:a4:e1:4a:0b:07:a3:
f1:dd:49:d7:08:23:9c:7b:9b:3c:cd:a3:ee:a6:df:
b8:11:28:f5:a4:cb:04:15:ce:40:ae:25:b8:00:7c:
4e:3b:64:30:7f:ca:20:92:fa:5f:09:58:ef:be:0b:
9c:ab:08:71:60:59:87:be:bd:01:db:15:8f:a5:63:
15:2b:f5:6f:b4:00:52:62:63:36:7f:46:8e:5e:e5:
a1:34:99:6f:e6:b4:d2:98:ff:95:5a:7a:7c:34:a7:
82:1b:43:21:63:38:a7:ff:80:3e:7e:d7:f3:65:ac:
a7:c5:25:69:28:e8:c2:04:67:51:50:1b:86:86:48:
32:fa:a0:5a:7b:63:69:f2:01:41:c2:dd:39:a0:43:
c6:4f:65:9d:c7:49:a7:54:6a:51:23:ae:9c:1c:92:
5a:5f:98:a3:f8:4e:b4:9b:4b:67:eb:3b:f8:c0:bd:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:BC:7E:CA:14:C1:9B:93:91:8B:37:90:5D:94:9D:2E:F9:37:68
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:37:12:84:7d:b2:5b:10:ac:6b:13:86:ce:a3:fd:cd:62:fe:
e3:b9:e3:2c:85:02:07:a9:03:3a:88:3a:c2:30:7c:f4:74:f2:
47:4a:3f:95:ca:ac:12:64:f9:58:08:61:cf:ca:98:53:b3:51:
0c:cf:b5:51:7e:b3:32:ee:11:f9:d4:05:c9:0d:c1:bf:d2:06:
64:7b:1c:7b:79:e4:81:fa:16:52:00:07:f1:14:f0:7d:5b:14:
60:4a:44:6b:14:cf:cf:7b:59:87:0f:0b:a7:bf:f8:8e:39:e6:
67:25:8d:d3:28:b2:23:89:02:7b:f6:32:4a:f3:ee:ce:1e:84:
12:1a:a0:c8:54:af:8a:6f:24:36:de:d1:5a:9e:4a:64:4b:c1:
5f:17:da:66:42:68:ec:73:bb:80:b5:55:a0:90:31:00:b2:17:
dd:14:a8:f7:93:0a:97:e7:88:d1:d0:6d:20:ea:dc:ad:1e:ac:
eb:e6:80:d9:ed:a8:21:8a:f4:e8:bc:f0:b0:6d:b8:7e:1d:11:
0c:e3:0b:fc:58:8e:ec:60:75:a7:f0:05:fe:ba:a0:ab:e6:93:
19:31:7b:ee:58:42:cb:62:16:fb:ad:c2:9d:28:f2:e8:55:d8:
29:4c:f8:5f:7a:e7:40:69:1b:84:95:8c:03:d6:79:25:04:c5:
91:b6:4e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/jB6w6LYWz/SKl4CPuRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3
ZjZlMmIwHhcNMjYwNTEyMjEwMDU4WhcNMjYwNTEzMjEwMDU4WjAzMTEwLwYDVQQD
EyhlYTkxYmM3ZWNhMTRjMTliOTM5MThiMzc5MDVkOTQ5ZDJlZjkzNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtessAD7xTmjS+dyBjH3hdZ2wtlVJ
GrpKaxMSEw/aJOmew9yk06i6CFTgxjnpQ60sccTieUdt/QwcYGW7pfNsuENhVlyG
/mFYshWapsvwSS92Ouuk4UoLB6Px3UnXCCOce5s8zaPupt+4ESj1pMsEFc5AriW4
AHxOO2Qwf8ogkvpfCVjvvgucqwhxYFmHvr0B2xWPpWMVK/VvtABSYmM2f0aOXuWh
NJlv5rTSmP+VWnp8NKeCG0MhYzin/4A+ftfzZaynxSVpKOjCBGdRUBuGhkgy+qBa
e2Np8gFBwt05oEPGT2Wdx0mnVGpRI66cHJJaX5ij+E60m0tn6zv4wL1/cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqRvH7KFMGbk5GLN5BdlJ0u+TdoMB8GA1UdIwQY
MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt
YjQxOTJhYzYzOGM5LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5
LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTcShH2y
WxCsaxOGzqP9zWL+47njLIUCB6kDOog6wjB89HTyR0o/lcqsEmT5WAhhz8qYU7NR
DM+1UX6zMu4R+dQFyQ3Bv9IGZHsce3nkgfoWUgAH8RTwfVsUYEpEaxTPz3tZhw8L
p7/4jjnmZyWN0yiyI4kCe/YySvPuzh6EEhqgyFSvim8kNt7RWp5KZEvBXxfaZkJo
7HO7gLVVoJAxALIX3RSo95MKl+eI0dBtIOrcrR6s6+aA2e2oIYr06LzwsG24fh0R
DOML/FiO7GB1p/AF/rqgq+aTGTF77lhCy2IW+63CnSjy6FXYKUz4X3rnQGkbhJWM
A9Z5JQTFkbZOFw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:49:53 2026 by rpki-client