Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File: C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier: T+6Y5gMGxKLqabpL81GHVYF8YkmWuib3Hlw08k9IZTI=
Subject key identifier: 4D:6B:94:A9:4A:B6:A3:F7:07:DB:3E:E7:85:48:46:E6:60:8A:8B:59
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer: /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial: 01A0DD97AD5CA57B6ECA88C44182CFFBA962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number: 0240
Signing time: Sat 26 Sep 2026 12:01:39 +0000
Manifest this update: Sat 26 Sep 2026 12:01:39 +0000
Manifest next update: Sun 27 Sep 2026 12:01:39 +0000
Files and hashes: 1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: AnfeqvV9b/qtyGn8HyJpatQGsZ18u+RKI5aFXB1mtCA=)
2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:ad:5c:a5:7b:6e:ca:88:c4:41:82:cf:fb:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
Validity
Not Before: Sep 26 12:01:39 2026 GMT
Not After : Sep 27 12:01:39 2026 GMT
Subject: CN=4d6b94a94ab6a3f707db3ee7854846e6608a8b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:f6:1d:10:5a:74:60:8c:8e:bb:a8:44:13:
0b:55:38:5a:72:8a:07:75:55:78:4f:26:12:02:0b:
e6:00:07:71:c8:c6:d2:24:7e:ed:99:bf:50:53:0b:
17:f2:11:3e:ce:26:c0:08:1b:a1:79:a0:2e:f0:91:
c3:aa:ab:fd:c1:62:f6:d0:a5:c9:3e:a2:c6:31:e0:
c3:f6:aa:d1:cb:82:d9:01:c8:d4:12:26:89:67:08:
a7:a9:44:ef:01:75:cc:46:ec:4c:0e:c4:6f:83:11:
2e:a4:2c:3c:7a:1e:63:a2:a8:f7:ff:91:f8:41:b1:
4a:c2:9d:e7:cf:a1:0a:d7:8c:e1:e4:64:78:73:df:
37:45:cd:fa:d2:16:85:3e:a3:a4:47:f9:bd:29:89:
da:49:82:07:d5:50:d9:a3:ec:85:45:fd:96:f1:8b:
0f:07:3e:30:fc:1c:bb:3c:4d:bd:4f:15:c5:60:31:
6f:c8:e0:1f:58:1d:91:9f:12:49:1b:17:d7:93:a5:
32:bf:67:09:64:44:50:1d:fd:c3:da:cb:ec:91:51:
e0:a4:43:48:85:d6:5f:e4:a2:a7:f2:a6:b4:ba:1c:
91:02:67:3c:22:b9:e0:bb:b2:11:da:26:66:84:99:
62:d3:a6:77:1b:00:5d:2e:50:2e:4f:76:ea:f1:43:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:94:A9:4A:B6:A3:F7:07:DB:3E:E7:85:48:46:E6:60:8A:8B:59
X509v3 Authority Key Identifier:
keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:34:ee:cd:ea:7e:ac:22:6b:7b:4b:b1:fe:c4:cd:dd:03:
72:9f:af:de:bc:c9:0a:36:b0:b1:a3:ae:a5:c7:96:73:bc:79:
5f:06:81:e7:e9:b7:34:1a:71:11:03:84:62:00:82:ab:0a:0c:
cd:25:2b:76:02:9e:d6:2d:b9:28:85:c9:68:25:f5:e7:55:11:
39:44:b9:da:18:60:12:d4:b5:f9:13:c0:62:64:dd:b9:92:b6:
7b:e6:63:8f:8b:20:3b:69:a3:57:39:b6:0a:1a:fc:6a:1a:de:
9b:3b:68:ce:fe:5a:a5:05:28:63:4f:ae:de:c3:f4:5b:ae:76:
b0:9e:a0:b7:90:d1:bc:4b:87:ca:7f:95:90:90:64:e9:3b:d8:
0a:7e:78:57:8f:42:e7:ce:da:cd:26:b0:72:3d:7e:ef:4e:54:
c9:33:4c:e4:17:52:cf:93:3a:28:b5:24:9d:fb:27:03:93:f9:
cd:f5:4d:da:5d:24:83:72:f9:84:ee:4c:18:5e:91:cd:a5:05:
d3:f9:3d:45:5c:a5:09:b5:50:6b:74:00:84:f8:df:bf:ed:e3:
45:9c:e3:46:83:c6:2c:24:22:28:20:f0:a4:5b:a2:87:39:70:
8d:1b:dc:69:0b:3c:a1:ed:22:43:3b:25:8b:cc:89:2b:50:6a:
0a:44:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:58:09 2026 by rpki-client