Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: ORKXR7F9BCL5a3SiGYjxLXh0XcQcj4vQITC3YvJMR8c=
Subject key identifier: 71:A6:F1:5B:40:BA:E2:68:CE:F6:2D:2C:8B:9F:79:7D:D1:33:00:43
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019D277288527B91E975FABC0F427A644A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:01:50 +0000
Manifest this update: Thu 26 Mar 2026 00:01:50 +0000
Manifest next update: Fri 27 Mar 2026 00:01:50 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: 5dqsXaXayNMSivBzVwSWGEJtgb90za80llseXnIQVM8=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:88:52:7b:91:e9:75:fa:bc:0f:42:7a:64:4a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Mar 26 00:01:50 2026 GMT
Not After : Mar 27 00:01:50 2026 GMT
Subject: CN=71a6f15b40bae268cef62d2c8b9f797dd1330043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:79:99:b8:7f:e4:4e:8c:02:39:e0:cb:0f:
f1:12:89:14:c8:07:85:20:80:5e:c3:cc:b7:a6:f1:
61:c2:44:ac:b3:f8:e4:44:11:bd:23:33:ed:9e:27:
f0:56:42:c3:65:29:10:12:3e:ec:23:f4:68:85:9e:
05:5e:b8:83:cf:57:c6:4b:a3:f0:30:e8:aa:48:fb:
89:7f:56:66:42:68:6d:5c:f7:17:4b:36:1c:5b:bf:
a9:32:a4:8a:cb:56:05:37:d4:eb:c5:de:99:d0:31:
d1:33:6f:ee:bb:b4:d9:9f:05:0f:15:78:30:39:d0:
61:9d:0f:33:ce:8b:6f:ab:9c:3e:69:86:30:ef:5f:
9c:d4:fb:a4:1e:36:36:e7:9e:70:60:28:bc:89:f3:
b9:a4:94:ac:77:29:84:63:4a:4f:ea:93:17:01:dc:
b0:28:19:09:93:50:ec:35:c3:54:71:e7:4a:f7:65:
5c:9d:1e:59:b8:94:5b:76:b3:23:2d:7c:c7:e8:15:
8f:ef:19:59:d8:fb:db:41:c4:ff:f4:d3:23:55:5a:
e4:95:15:c9:f3:70:bc:3e:7e:6c:8d:79:a8:1c:b4:
cc:6c:95:8d:69:01:c2:b6:d9:76:91:0a:cd:27:00:
39:fc:26:fc:e7:14:43:5b:af:37:1f:69:1e:76:7b:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:F1:5B:40:BA:E2:68:CE:F6:2D:2C:8B:9F:79:7D:D1:33:00:43
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:69:14:9f:a0:88:29:e8:e7:07:a3:41:36:5c:cd:e4:e7:bb:
13:fe:d7:be:9d:02:2d:41:60:c3:da:bb:3e:85:f1:84:59:44:
50:57:f2:79:9d:85:51:3c:a9:33:77:ab:46:51:8c:30:2a:e5:
ed:e4:07:49:c9:c7:68:8d:03:43:da:dc:f8:bb:13:5c:90:c9:
84:b6:c5:a7:c7:6f:de:5b:16:56:ff:0c:24:04:c4:b7:12:70:
85:ef:08:6d:b0:70:5b:e8:79:42:0a:a2:34:89:a9:72:ab:5b:
29:0c:18:fb:27:bb:fe:f5:f1:cf:b7:15:f8:8c:1d:65:51:76:
de:a9:3c:d8:3c:19:ee:30:b7:a8:78:e9:24:87:a1:75:68:af:
05:01:ee:bd:46:ba:91:56:aa:c8:11:cf:9f:51:8f:52:88:bb:
75:b4:d6:94:dd:6c:01:83:4c:1c:7d:1d:bc:a4:38:ba:73:b3:
e3:cb:c7:47:05:0b:76:bd:49:32:92:69:44:e1:48:92:a0:68:
6d:ed:e7:69:7e:64:29:af:95:ec:79:fd:52:a6:0a:08:93:62:
82:4c:ff:c5:a9:cb:64:4b:a9:67:75:a6:e4:c0:a2:a0:4a:e6:
b4:88:b9:40:bd:4b:ac:b4:1c:14:c9:0e:c6:b0:86:9b:5c:1f:
8b:88:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:49 2026 by rpki-client