Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: tW9PWDQ3jjFWZ1rINGIh2eN5PD5c3P1PKPQj2Xn0lbk=
Subject key identifier: C9:D3:99:2A:35:6E:93:7D:A6:DD:43:08:26:79:B3:EE:54:3D:7E:24
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 019D26CD0A587B18D1616EBBD64760C82387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 1725
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: GBy5AMefcYVDGqPBR7AIy0dXvd+eRg+cgklGgzn39G8=)
2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0a:58:7b:18:d1:61:6e:bb:d6:47:60:c8:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=c9d3992a356e937da6dd43082679b3ee543d7e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:94:66:a4:47:11:bd:99:e4:f8:1e:e3:53:
5a:44:54:6a:9c:93:60:c9:3f:20:ff:4d:d0:88:26:
f3:a2:85:9f:13:ca:1f:7b:df:e7:77:ac:86:d5:c4:
68:ae:97:5b:bb:d5:a5:fa:65:73:97:3c:6b:77:2a:
2f:37:6c:c2:9b:70:f7:d8:d2:68:cd:c6:e5:f5:2e:
64:93:58:f4:45:44:dd:11:11:a7:04:95:ff:c8:ca:
ba:ce:34:c3:06:00:c5:f3:d3:fe:d2:df:ef:b9:5f:
d7:15:b4:af:47:9d:7e:93:cf:4a:8f:ac:e3:b1:7d:
ac:40:90:a5:42:b2:7d:ad:22:54:81:c3:2e:d3:4b:
f8:75:00:ea:52:d7:fb:61:2a:c1:98:bb:5b:5d:52:
f7:cb:c9:36:69:78:45:86:43:9d:a0:28:50:82:18:
6d:41:21:e6:30:14:cb:53:7d:70:98:e0:51:b1:ae:
bb:bf:68:de:3a:a8:f0:ed:c8:5d:97:43:b5:60:bd:
2b:23:3f:20:b0:e2:05:3e:0a:09:3d:87:81:e6:56:
69:d6:02:db:90:d5:04:12:21:55:c2:68:f2:8d:ae:
0d:76:40:93:a3:f7:f5:3a:13:cd:92:7c:1c:a9:b0:
88:00:a1:0d:5c:78:49:f6:d4:92:08:29:c6:17:39:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:99:2A:35:6E:93:7D:A6:DD:43:08:26:79:B3:EE:54:3D:7E:24
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:90:7e:5d:85:4d:d4:ef:53:99:66:09:1c:e9:50:79:e0:
8a:9d:a7:bc:74:c0:81:39:61:81:33:63:0a:3a:48:e2:cb:68:
92:a0:1c:3c:6b:e0:e1:c4:a2:1c:bc:2b:ca:af:b4:46:89:6c:
d4:c0:fc:6c:1f:35:d8:65:95:3a:a3:81:38:45:1d:17:8d:56:
d6:10:18:30:29:4f:67:d7:8f:d0:5a:ff:ae:82:2b:89:1a:ef:
09:30:ed:8b:79:77:e1:1c:2f:7f:61:4e:19:f7:96:6d:c5:9f:
ca:6e:96:61:47:48:9e:96:11:3f:c9:cf:e2:b8:75:89:76:b5:
ed:ae:43:71:6b:f0:5d:26:95:d6:c3:96:4f:cc:5a:a2:71:86:
d2:95:31:1c:11:35:91:46:c2:f7:e4:07:54:42:03:0b:77:09:
a0:76:f2:f5:e3:58:5e:d7:68:1d:80:42:0e:a1:76:d8:19:0e:
c7:97:63:8d:a2:19:81:a5:72:7d:0a:b8:38:10:90:b7:37:d3:
df:88:83:7c:c4:47:1d:50:5d:5a:88:a5:7e:6e:41:ab:eb:71:
10:b6:b5:4e:f5:f3:28:53:a5:ea:c7:1d:a9:23:93:d0:44:ad:
83:b9:14:c1:28:84:2d:d4:f0:18:87:b2:7f:4f:12:5b:d4:3f:
29:58:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:12 2026 by rpki-client