Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: A1fjdvlVa9azUIqIAUmp/K44KwvKlnW+dtyQfPlG6Aw=
Subject key identifier: EC:19:84:18:2E:1B:01:42:75:32:06:C5:F6:F0:5F:55:29:F0:4A:71
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 01A1DF83657447C1DFB1411DE0BE49FAEB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 14:01:32 +0000
Manifest this update: Sun 15 Nov 2026 14:01:32 +0000
Manifest next update: Mon 16 Nov 2026 14:01:32 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: X4RJ+a07emmKz4SeDnrYnAJUyjUun6VKKjImDiCjSmo=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
3: qpd4n4rrzsaA26B8vSZr6BByIoc.asa (hash: Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:65:74:47:c1:df:b1:41:1d:e0:be:49:fa:eb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Nov 15 14:01:32 2026 GMT
Not After : Nov 16 14:01:32 2026 GMT
Subject: CN=ec1984182e1b0142753206c5f6f05f5529f04a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:a3:04:35:0a:df:65:89:8f:ce:35:0d:dd:
c8:ce:73:a7:a0:f4:08:b5:5d:25:7a:9d:bf:a8:4d:
40:ff:94:0c:e6:f8:35:ff:03:f3:c4:7a:51:9c:00:
92:84:2e:b8:5e:64:f8:a8:85:41:44:31:6b:bc:fd:
aa:08:9a:6a:9c:8d:ba:13:1c:58:62:03:5d:9c:7a:
19:a0:d9:fe:cf:6b:53:76:96:c2:71:35:29:3b:7c:
5b:71:5e:b1:6a:6c:19:0a:7f:6d:3a:ed:bb:64:31:
3f:50:b2:3a:35:77:3d:f2:dd:3f:30:ba:e3:15:8c:
ac:a1:34:36:5d:b9:ec:27:90:a4:be:ee:d4:d4:3c:
8a:42:04:7c:16:9c:9d:4f:be:32:b0:02:ba:b7:2b:
38:b6:18:88:1a:ea:d0:dc:6a:ce:58:4a:ab:f2:2a:
7e:25:aa:ae:b1:bb:02:3b:86:87:de:a9:f0:09:31:
15:0c:ba:21:c2:01:cf:03:b9:d3:dd:ef:e5:a9:8a:
e2:b9:b0:f1:21:64:9d:16:7e:a1:a3:1c:a0:23:c4:
7a:3f:1a:bf:1c:b4:b5:c3:42:73:3b:51:80:ec:15:
82:a0:e3:a7:af:3c:f8:16:f3:df:6e:15:0c:60:8a:
a1:20:85:ee:c7:f3:3f:4e:4f:6a:94:e3:46:f8:58:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:84:18:2E:1B:01:42:75:32:06:C5:F6:F0:5F:55:29:F0:4A:71
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e9:a5:2e:37:b5:61:27:92:76:c5:f2:a6:01:67:43:b4:45:
b7:34:d9:0a:d6:c7:8e:9e:37:d3:27:b1:92:86:9e:21:89:7e:
8e:6d:7d:f9:94:04:c1:4d:b1:06:a3:4b:b5:ca:1f:dd:b0:0c:
49:74:96:61:f0:90:7d:b8:0f:b0:fc:ad:9f:39:6d:76:1d:3c:
c2:6e:ea:a4:6b:85:b6:4d:be:18:5c:c4:68:b7:d6:a4:11:3e:
5f:91:ec:77:ca:b4:12:26:63:9e:05:d8:a9:fe:68:44:f6:ca:
4a:0f:e6:cc:f6:94:a2:f7:9c:a0:c7:44:e5:33:e1:42:49:12:
db:35:03:16:43:1f:51:18:a3:6c:65:ee:d8:77:10:cf:27:7d:
17:00:00:a6:b9:77:b8:65:3f:83:4e:38:55:f9:6c:a5:b6:19:
1c:20:1e:03:7a:5f:22:ad:92:4b:9d:b5:18:45:2d:bd:16:f8:
b2:52:d8:e3:01:e8:5e:d5:d4:9f:51:87:8f:a5:13:69:22:41:
3e:19:5a:2a:75:cb:3b:f7:40:80:a4:ae:c1:48:e5:45:9c:cf:
8b:c4:00:8e:0d:da:78:cd:f8:e9:21:1d:4b:c1:4b:76:c1:c3:
3e:23:2d:db:fc:05:92:02:3a:76:85:99:06:e1:45:18:fe:52:
72:6b:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:03:54 2026 by rpki-client