Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: iZLZRnqjstcNs97WLvEbeso93FBn1RbFwlxc+3O09QM=
Subject key identifier: 1F:38:B2:03:5F:22:E9:3B:F4:C0:98:75:50:CA:48:5D:F2:E6:A6:67
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 019E20922EB5A206CAEC811AD1B2BF0D3676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 1620
Signing time: Wed 13 May 2026 09:01:51 +0000
Manifest this update: Wed 13 May 2026 09:01:51 +0000
Manifest next update: Thu 14 May 2026 09:01:51 +0000
Files and hashes: 1: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (hash: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=)
2: _62J83lzQ1oFlJFExShsa6-ZEdE.roa (hash: uU0IWCbhbUzEOirSzRssIA5YpPwmzBjL6oB4XiM15Ok=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: Sp8rGI2aITPZekQqC0sh3AQR8MLmeCn/FIQVNiIX7cA=)
4: jOwlKFNThlCAigDd4FjuTpSW9As.roa (hash: RSHefX5Zz29vKhe8YnCs3jQBCzq18ilVKULjruBqd+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2e:b5:a2:06:ca:ec:81:1a:d1:b2:bf:0d:36:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: May 13 09:01:51 2026 GMT
Not After : May 14 09:01:51 2026 GMT
Subject: CN=1f38b2035f22e93bf4c0987550ca485df2e6a667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:c8:21:19:95:bc:43:01:85:c4:85:4f:88:
5a:a6:c5:30:31:f3:91:e6:fb:1d:da:36:24:45:19:
2f:06:9d:57:86:c3:1e:8e:e2:86:55:df:e9:b2:17:
40:9a:8d:eb:ae:f9:90:44:32:61:74:aa:75:9f:77:
47:80:71:a2:4e:79:32:b4:7f:6a:81:bf:61:e2:77:
aa:ca:9a:5b:bb:57:83:ea:42:22:5d:09:30:18:2e:
7c:1b:89:6e:70:8f:5f:fa:1b:75:6c:00:e3:ca:cf:
e9:90:d5:fb:98:08:8b:d4:93:3d:f2:ce:0c:d0:d0:
55:7a:99:ba:78:6b:30:bb:ca:91:bc:ea:c7:df:cc:
60:58:1f:9b:f2:5c:ea:d4:38:94:c6:ed:4d:c3:5e:
6a:3a:b9:5d:51:6f:12:1c:44:ff:f4:aa:3e:b1:13:
d5:e6:d7:a1:42:69:90:0e:99:67:6e:42:b4:2c:64:
da:c7:03:25:91:96:57:74:51:dd:43:90:90:97:44:
54:3f:89:dc:a4:50:f1:a7:01:65:c3:9a:e5:37:8b:
2c:76:23:c0:1f:75:34:91:1b:06:fd:e9:e4:f7:60:
9e:39:33:a9:2b:61:4b:a5:07:ef:b9:1b:85:57:ce:
04:bb:fd:8a:82:37:7b:45:e1:52:ec:5a:11:4a:00:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:B2:03:5F:22:E9:3B:F4:C0:98:75:50:CA:48:5D:F2:E6:A6:67
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:54:95:ad:06:04:b1:35:22:ba:a3:b1:05:b2:ef:a8:d1:bc:
aa:33:d6:c6:a5:fd:66:ad:4f:a7:6c:e6:94:3d:2c:fd:0a:5e:
d9:66:f8:2d:c1:85:94:eb:9e:a8:c4:f4:8a:a3:2a:42:f5:70:
7f:1c:73:b2:81:65:4b:5d:db:f3:b7:1a:1a:6d:34:21:5e:47:
a6:75:dc:6e:9b:25:99:48:25:8e:fb:ab:fd:3e:d3:d0:f9:9e:
c1:36:4c:29:b2:7f:6b:8d:f6:47:c7:f3:f2:6e:7d:c7:fb:03:
c1:02:52:5b:50:2e:a9:3d:dc:d9:e1:5c:f1:ff:2b:83:f8:83:
ed:ee:bb:15:a1:3c:60:b5:88:07:7d:c6:23:85:ba:58:fa:00:
86:db:25:ba:e9:c7:14:63:a3:aa:dd:ad:39:65:23:5a:bd:c1:
a7:c3:af:4d:ac:8d:10:ae:1a:92:b2:a8:d0:13:cc:52:6a:a2:
a0:5d:ab:8d:ec:5f:e6:30:27:d7:e8:3b:ff:7d:d9:8a:c3:ad:
94:bc:77:88:50:d3:35:d4:50:ba:48:1d:8b:53:6a:80:99:38:
55:ee:17:a0:89:ac:32:52:42:a2:35:19:f7:95:17:7a:2e:cc:
07:76:c1:4c:0a:52:ed:bf:ee:f9:f9:fd:f8:66:e8:23:4c:89:
7a:ee:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:48 2026 by rpki-client