Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: JiwEKCm++g7a3g/OLZrrHeIl5vrNKBPV1dR96yil7Tg=
Subject key identifier: 05:AD:3A:38:F0:13:BB:17:BF:3F:E8:AA:3C:DB:09:10:84:99:36:56
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019F9090DC5BE534227DF7309F1F423BE57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 20:00:40 +0000
Manifest this update: Thu 23 Jul 2026 20:00:40 +0000
Manifest next update: Fri 24 Jul 2026 20:00:40 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: eNRVmu4lXBW9/BPvZInEeZ1XzZ//ZdwFlBY81bdXEQ4=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
3: qpd4n4rrzsaA26B8vSZr6BByIoc.asa (hash: Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:dc:5b:e5:34:22:7d:f7:30:9f:1f:42:3b:e5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jul 23 20:00:40 2026 GMT
Not After : Jul 24 20:00:40 2026 GMT
Subject: CN=05ad3a38f013bb17bf3fe8aa3cdb091084993656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:9e:7d:da:a8:cc:8e:f6:8e:dc:b5:ab:fc:
f3:37:9d:95:07:1b:2f:5b:27:26:1f:f1:48:ab:e1:
28:de:12:e3:86:06:00:46:c2:69:71:76:b9:a7:b6:
ca:f8:b3:1a:0d:cc:7b:4c:30:86:5a:78:9a:50:be:
fa:8f:08:80:0b:13:53:45:ac:ab:a7:30:f0:ff:89:
56:93:11:d4:e1:9f:7c:36:3d:23:35:82:51:ee:06:
29:b5:b0:47:0a:dc:27:ec:2a:fd:b7:c3:c3:7a:3c:
23:35:f1:51:dd:4f:89:c2:d9:a4:9c:87:2b:a4:a4:
e2:0e:5c:cd:e1:7c:7b:21:14:39:6f:19:69:2d:0a:
bd:00:a4:b8:cf:cf:08:f0:fb:4f:d0:b4:de:41:c1:
8b:d8:0d:34:84:f9:34:90:51:94:f8:09:62:e6:a9:
c7:cf:ca:7d:c6:7a:b2:99:4e:c3:a5:58:ae:04:1c:
2c:55:bd:31:09:4a:e6:a5:4a:80:21:88:ec:19:69:
9e:af:b8:d2:f0:ff:f1:bf:f5:39:b6:d8:58:9e:11:
cc:9e:7c:90:f9:f3:a1:fa:dd:df:9f:9b:55:96:5c:
36:72:b0:09:31:8f:1f:04:86:be:1b:e3:a3:01:2c:
91:8c:d9:2a:61:56:de:fc:2b:61:6a:0e:7c:ba:e1:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:3A:38:F0:13:BB:17:BF:3F:E8:AA:3C:DB:09:10:84:99:36:56
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9a:44:03:46:8b:71:69:a6:cd:7d:31:55:68:66:b4:35:02:
5a:28:d2:e6:7b:36:c3:ad:92:9a:60:5f:84:f1:d4:06:e7:63:
cc:98:78:ea:0a:29:05:aa:2d:c8:2f:d4:9f:db:04:a5:ae:bb:
27:7f:85:8d:59:16:3c:22:94:71:63:c4:a9:c7:e2:ff:d1:12:
38:ef:b5:29:50:78:c0:0f:02:dd:6d:a8:21:a2:31:39:7a:a3:
78:b6:b0:78:59:33:0b:54:15:5e:3e:8c:40:3a:e0:61:bf:5c:
d6:5f:02:4b:c0:54:9c:f2:21:52:87:48:d2:17:76:e3:e7:ec:
e2:f5:00:6a:0f:cd:ab:79:2b:f4:3b:70:e7:cc:01:22:96:26:
76:b8:0b:73:98:d3:21:d7:4f:d0:6f:24:2f:42:c7:96:8e:29:
d5:dc:ca:78:62:04:f0:3f:aa:bf:85:d1:58:2c:35:34:01:23:
9b:ae:ab:5a:3e:94:7c:97:17:24:fa:d4:61:25:c6:44:d9:75:
94:21:61:77:7a:13:99:89:ed:be:c1:b0:90:41:46:16:ec:0e:
51:77:fa:e9:57:ff:3a:17:a3:1b:22:45:a1:c7:3e:d2:87:cc:
de:47:24:bb:34:04:20:37:ec:51:db:6b:09:ad:48:ae:1d:1b:
d4:88:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:36 2026 by rpki-client