Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: SLvbc7W5nAx7qNCdcD1ucAelG2cjeSUu6Q9zWQ878vc=
Subject key identifier: 57:82:4B:AD:AB:36:AB:36:B2:CC:E2:8D:99:A5:22:99:6B:61:52:E1
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 019D25831CA041BDB983B4D6FBDF9F015B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: 53
Signing time: Wed 25 Mar 2026 15:00:42 +0000
Manifest this update: Wed 25 Mar 2026 15:00:42 +0000
Manifest next update: Thu 26 Mar 2026 15:00:42 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: 1HGG/ViU6XdS2dipAbj37f54uoW/fTVvi1N/vpIlMBg=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1c:a0:41:bd:b9:83:b4:d6:fb:df:9f:01:5b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Mar 25 15:00:42 2026 GMT
Not After : Mar 26 15:00:42 2026 GMT
Subject: CN=57824badab36ab36b2cce28d99a522996b6152e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:bf:53:67:63:d5:2d:9b:1c:5e:d7:41:05:
6b:55:32:03:ad:d7:11:68:1d:60:7c:ea:0b:25:68:
d1:a2:72:fd:08:82:b9:ae:65:65:69:fd:06:70:a0:
df:28:62:b1:d5:6b:20:55:b3:80:7d:8a:74:fe:86:
5a:8d:3d:46:4d:e9:28:00:a6:d1:fc:dc:03:de:9e:
99:97:60:50:0d:11:29:c6:93:34:20:1b:33:95:ea:
ea:85:7d:c7:32:82:96:60:b1:72:6e:10:be:76:ef:
e9:72:ae:d3:cc:82:75:95:f0:27:8c:d2:69:9e:df:
d0:09:35:98:43:93:66:f2:b1:94:49:97:5b:1f:cd:
c6:eb:9c:81:f1:17:c1:c9:24:f7:9b:b6:a2:f5:c0:
98:f7:34:ce:8b:2f:cf:e2:fe:83:83:cd:13:61:34:
17:82:2f:bc:58:d5:f9:a8:6f:10:b0:5f:f9:c2:a0:
1e:b1:9e:15:c9:90:77:60:01:a0:f4:3f:b2:91:12:
74:5a:9a:b8:40:f8:8d:f8:b1:36:50:21:21:3e:2f:
60:ba:c4:37:31:5f:59:51:ec:6d:4b:a1:e5:78:ba:
2a:c4:7f:b6:81:4b:c7:99:9d:3e:dd:de:3d:eb:80:
05:91:51:d1:e3:7f:8d:82:af:24:86:59:de:fd:11:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:4B:AD:AB:36:AB:36:B2:CC:E2:8D:99:A5:22:99:6B:61:52:E1
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:15:e3:6c:6c:3f:da:8b:77:77:fa:4a:f1:9c:1d:31:52:ba:
1e:d9:2b:88:51:89:e0:7c:3f:23:92:56:b1:c2:8a:37:0c:a5:
e2:be:7f:f8:4a:80:65:e2:66:ae:75:4e:ef:c7:14:ba:0b:ee:
f8:08:1f:c5:75:cc:d0:a4:e9:94:36:96:7f:c7:dc:ce:8f:16:
45:a9:23:f3:7e:66:45:87:81:c9:cd:63:5f:16:02:92:5e:e7:
04:4e:73:32:ba:0b:87:87:8b:0b:07:ac:83:4d:42:fe:f4:59:
bf:29:b3:ec:36:8e:8f:29:21:6e:d9:f4:ee:85:a5:e8:6c:27:
f9:fb:89:eb:0f:13:71:54:59:29:1e:8a:35:9f:db:77:3a:d3:
65:7c:d6:a3:d7:83:2e:83:b5:ef:10:00:2f:96:91:aa:77:dc:
69:3d:52:b2:48:08:0c:59:4e:2b:f8:90:f4:4c:0e:99:ae:40:
1c:51:f5:27:e8:4d:d8:b5:0f:76:a5:16:b3:d1:99:d1:e0:d3:
e6:32:33:de:89:82:da:81:87:e4:c3:9b:8e:6a:24:f9:24:5b:
df:cc:0a:67:5c:11:80:a9:f3:c9:3b:5a:80:2a:06:95:37:69:
dc:b0:05:0f:04:40:aa:f3:12:76:9e:4e:37:eb:2e:29:11:1c:
31:94:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:29 2026 by rpki-client