Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File: Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier: F0DNMePrMlDBuyHlCev+PEKEztXnsKCTtAVLgOEjp1g=
Subject key identifier: CA:2C:A1:86:D7:56:15:0B:25:82:C6:F4:67:73:9B:51:A6:D3:F6:F0
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer: /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial: 019E1DC6F6FD60FE1DC9F823D27F405DB1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number: AB
Signing time: Tue 12 May 2026 20:00:39 +0000
Manifest this update: Tue 12 May 2026 20:00:39 +0000
Manifest next update: Wed 13 May 2026 20:00:39 +0000
Files and hashes: 1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: 23kxEP6SPT2xsNzJEVmLWevaT3kyARMb7G0OUvjuQC0=)
2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:f6:fd:60:fe:1d:c9:f8:23:d2:7f:40:5d:b1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Validity
Not Before: May 12 20:00:39 2026 GMT
Not After : May 13 20:00:39 2026 GMT
Subject: CN=ca2ca186d756150b2582c6f467739b51a6d3f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:19:70:7a:cd:d4:f9:05:dc:b5:de:0a:90:
9a:4d:96:0e:bd:77:cd:2d:88:61:f0:0f:19:94:d3:
06:29:4d:d9:77:a1:d2:e0:b4:e2:93:7a:88:50:d5:
03:a3:ff:d7:10:bf:72:93:3e:6f:55:80:57:c2:da:
69:26:3c:1e:d4:cc:8f:4f:5f:6f:f8:46:0a:94:f4:
8c:e2:59:f1:17:ce:8f:92:d2:9e:03:a9:02:6d:dc:
36:7c:e5:82:14:df:15:1b:7b:8a:6f:86:39:8b:b0:
8e:f3:ed:e8:6b:aa:e1:70:08:69:8a:09:61:fa:c6:
36:7a:7c:86:f1:34:3c:fd:e4:68:34:98:cc:f0:66:
92:f9:31:46:4c:37:96:2b:96:a2:0b:fd:14:41:fa:
2e:8a:4e:d3:32:90:c4:09:b1:72:e9:5c:a5:40:aa:
11:8e:7d:d8:f4:f0:59:12:bb:a6:dc:94:38:ae:5f:
11:96:69:5e:eb:bb:92:3d:91:35:9b:43:a7:6f:8e:
cc:7c:fd:9a:d3:c5:65:b7:31:f7:4a:20:7f:64:db:
12:01:22:41:40:8e:93:d3:4b:6b:06:d7:79:7e:14:
94:23:06:d6:ba:40:f7:9d:21:20:89:41:ed:f3:9d:
99:f4:0d:83:17:b9:ac:df:39:40:08:65:da:50:86:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:A1:86:D7:56:15:0B:25:82:C6:F4:67:73:9B:51:A6:D3:F6:F0
X509v3 Authority Key Identifier:
keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a8:9b:b7:f8:d2:f3:f5:32:b1:89:58:6c:38:e5:51:be:f2:
3e:c8:37:e8:71:38:eb:1d:48:60:01:b3:62:1c:02:75:f3:36:
81:f1:45:55:5c:f0:11:79:42:1c:86:2a:65:a2:33:cd:58:72:
2e:da:9f:c6:57:7b:bf:84:34:7d:ce:e1:05:9b:ae:e9:9c:1d:
0e:04:11:69:df:7a:ad:ce:36:d4:03:31:2f:f0:3a:bf:cc:3d:
4c:69:98:d1:42:48:d8:80:1e:92:8c:7c:36:09:18:1e:c7:1f:
2f:1d:bb:8c:a6:82:a2:8a:0a:15:25:50:9d:20:b6:62:34:16:
67:40:96:8b:7f:db:2f:98:63:59:1b:9a:ef:04:1d:f5:cc:73:
f0:45:32:6e:13:e5:57:a0:f8:35:0d:13:e6:fc:e5:15:d9:14:
de:2a:35:ab:29:3c:3f:59:7e:c9:7c:e9:54:8a:ca:8c:f4:87:
a8:bd:c9:e9:5b:a2:49:9f:b3:6b:a3:e8:45:5b:b5:c3:5e:3f:
b2:0f:e0:b1:d8:cd:50:0a:55:aa:de:22:16:92:af:4a:53:0f:
fd:00:95:4f:7f:a2:9e:eb:9d:f5:02:0c:02:65:08:3a:99:c6:
46:eb:f7:31:0c:44:f7:3e:8d:1a:24:d0:a0:2c:2e:ed:99:6b:
c8:00:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:27 2026 by rpki-client