Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: i9mY1Yz+AL5ryYAMRSD4bEHiiQeGqiyZhqyMCkPPQUI=
Subject key identifier: BB:08:37:A2:B9:4D:5B:2C:26:F8:07:34:D9:D1:51:B2:E3:A5:DD:FA
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 019E1CB545FE21CB98E37A707A7C6F6CCC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: D3
Signing time: Tue 12 May 2026 15:01:42 +0000
Manifest this update: Tue 12 May 2026 15:01:42 +0000
Manifest next update: Wed 13 May 2026 15:01:42 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: 2JwyvSkpwBZUAlo/O9T6PMv4lE6qSd29VPrOqQrK2b4=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:45:fe:21:cb:98:e3:7a:70:7a:7c:6f:6c:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: May 12 15:01:42 2026 GMT
Not After : May 13 15:01:42 2026 GMT
Subject: CN=bb0837a2b94d5b2c26f80734d9d151b2e3a5ddfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:e0:a1:39:68:b9:f9:f0:38:64:4f:91:2b:
b6:0a:2c:7c:25:8e:6d:e6:14:78:68:1e:80:2c:5e:
a2:07:35:5a:ea:d4:41:c4:69:5f:b5:dd:b2:c9:c4:
1e:17:4a:72:0c:75:9d:0e:6e:a3:a8:48:74:e8:f5:
b0:27:51:87:e4:a9:ef:34:05:52:b5:f9:87:73:55:
ad:df:aa:99:4d:77:02:d1:db:26:7f:cb:eb:af:42:
6b:ed:17:fe:57:b8:bc:b7:e0:e8:f5:61:a2:58:36:
f8:38:f0:16:23:99:5f:36:fb:90:36:2a:68:42:ad:
00:3c:9e:0b:e1:83:3b:0e:61:3e:5e:74:71:ea:65:
bc:06:2c:46:29:a3:77:4e:91:ea:b9:ea:36:ab:f3:
50:9d:bc:01:c4:5a:34:d5:a8:cd:0c:69:56:44:44:
aa:d0:e7:34:be:37:9b:30:02:74:ad:d0:b7:f6:6c:
c0:76:2a:99:80:a9:9b:74:1d:31:36:ce:fb:4a:ee:
9f:04:5f:43:c5:e8:c5:02:69:13:4f:52:52:51:32:
b0:15:96:04:e2:16:3d:72:20:e3:0e:21:1e:c9:be:
26:f4:53:03:4e:cb:e6:67:ec:87:85:1c:8c:9a:1a:
12:f4:57:82:e4:fa:0e:4d:65:7e:ac:eb:9a:db:bd:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:37:A2:B9:4D:5B:2C:26:F8:07:34:D9:D1:51:B2:E3:A5:DD:FA
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2d:4a:79:31:57:35:62:f8:e4:8c:65:b6:c1:4f:d6:07:ac:
b2:e0:50:17:79:12:52:71:97:37:fd:44:40:7d:10:f1:df:57:
96:ec:df:ee:ce:31:b1:ac:2d:69:8b:c3:c6:89:4c:32:bd:34:
30:51:0c:3d:2b:5c:56:44:69:a6:31:76:27:e4:f3:3f:a0:23:
8d:3f:16:3f:e3:a5:93:c0:bf:8a:93:10:10:70:cf:29:30:02:
6b:ab:57:c7:14:cc:9c:ee:87:49:a8:75:43:48:8f:be:92:d8:
30:b6:e1:f7:36:21:8b:1f:47:95:29:2b:9e:2d:d2:0a:e0:4b:
4f:ad:5b:e6:42:ac:51:74:34:c5:d4:31:70:24:fd:ca:6f:05:
3b:89:2c:91:60:bf:91:17:c8:1e:f5:c5:0a:1f:32:08:21:de:
81:84:80:e3:14:69:1e:61:4d:a6:4f:4d:71:37:1e:25:70:5e:
18:2e:e5:57:c3:ed:f3:69:87:97:2c:e4:0b:1a:a8:33:f6:6e:
cb:66:95:51:92:c5:f7:f0:de:84:31:b8:75:40:c6:96:1c:49:
99:98:b9:18:b0:44:86:a6:ce:b9:5f:6c:81:2e:9a:6e:b2:48:
bc:dd:69:ec:f3:61:c1:85:70:a0:82:72:8d:03:bc:66:c6:89:
17:30:e3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctUX+IcuY43pwenxvbMxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDA1MzA2ZDA1NjFhMzc5ZDc3ODk0NzJiNzhmYjIyYjY4
NzBhOWMwHhcNMjYwNTEyMTUwMTQyWhcNMjYwNTEzMTUwMTQyWjAzMTEwLwYDVQQD
EyhiYjA4MzdhMmI5NGQ1YjJjMjZmODA3MzRkOWQxNTFiMmUzYTVkZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6TgoTloufnwOGRPkSu2Cix8JY5t
5hR4aB6ALF6iBzVa6tRBxGlftd2yycQeF0pyDHWdDm6jqEh06PWwJ1GH5KnvNAVS
tfmHc1Wt36qZTXcC0dsmf8vrr0Jr7Rf+V7i8t+Do9WGiWDb4OPAWI5lfNvuQNipo
Qq0APJ4L4YM7DmE+XnRx6mW8BixGKaN3TpHqueo2q/NQnbwBxFo01ajNDGlWRESq
0Oc0vjebMAJ0rdC39mzAdiqZgKmbdB0xNs77Su6fBF9DxejFAmkTT1JSUTKwFZYE
4hY9ciDjDiEeyb4m9FMDTsvmZ+yHhRyMmhoS9FeC5PoOTWV+rOua272MXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsIN6K5TVssJvgHNNnRUbLjpd36MB8GA1UdIwQY
MBaAFAtAUwbQVho3nXeJRyt4+yK2hwqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBCVEJ0QldHamVkZDRsSEszajdJcmFIQ3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zNTBhZGEtOTY5YS00NmMxLTllYWUt
N2JiYzk2ODQ3MDhiLzEvQzBCVEJ0QldHamVkZDRsSEszajdJcmFIQ3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zNTBhZGEtOTY5YS00NmMxLTllYWUtN2JiYzk2ODQ3MDhi
LzEvQzBCVEJ0QldHamVkZDRsSEszajdJcmFIQ3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy1KeTFX
NWL45IxltsFP1gessuBQF3kSUnGXN/1EQH0Q8d9Xluzf7s4xsawtaYvDxolMMr00
MFEMPStcVkRppjF2J+TzP6AjjT8WP+Olk8C/ipMQEHDPKTACa6tXxxTMnO6HSah1
Q0iPvpLYMLbh9zYhix9HlSkrni3SCuBLT61b5kKsUXQ0xdQxcCT9ym8FO4kskWC/
kRfIHvXFCh8yCCHegYSA4xRpHmFNpk9NcTceJXBeGC7lV8Pt82mHlyzkCxqoM/Zu
y2aVUZLF9/DehDG4dUDGlhxJmZi5GLBEhqbOuV9sgS6abrJIvN1p7PNhwYVwoIJy
jQO8ZsaJFzDjlw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:24 2026 by rpki-client