Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: VvZ/RVQW2/9wj3i8LDqQ0GmahkEvzBJa4XL6pgBUNZY=
Subject key identifier: 3B:37:86:ED:C0:C8:AC:B7:E5:1E:67:0B:29:1F:31:6C:05:E0:52:93
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019E1DC6FF5EC2305032FE598952BA31147F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 1450
Signing time: Tue 12 May 2026 20:00:41 +0000
Manifest this update: Tue 12 May 2026 20:00:41 +0000
Manifest next update: Wed 13 May 2026 20:00:41 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: zoLUt4/8iLmcSb5ayWXXG5PASFmJKvL6Xkt7oI304tA=)
2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=)
3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:ff:5e:c2:30:50:32:fe:59:89:52:ba:31:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: May 12 20:00:41 2026 GMT
Not After : May 13 20:00:41 2026 GMT
Subject: CN=3b3786edc0c8acb7e51e670b291f316c05e05293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:6f:9d:12:7f:d2:23:2d:7b:2c:d3:5f:db:
73:7e:8f:e1:f2:25:19:55:0f:b3:38:c5:b5:ee:a7:
ba:da:ea:4e:a5:11:64:8d:f4:2c:3c:54:39:4b:15:
56:83:d2:c7:9e:92:6b:a4:33:0f:41:1c:7a:4f:d4:
4b:a3:21:67:0f:86:fc:1e:30:d7:6f:a9:22:9d:34:
74:7d:80:5c:4f:2e:34:fc:fb:5d:66:ea:1c:f5:26:
5d:96:9c:f5:06:02:15:56:bf:34:0f:c4:49:51:ec:
80:06:29:eb:9d:25:e4:e8:16:0e:11:c2:a9:26:34:
32:54:fb:08:c5:77:f9:4f:ab:9a:75:c5:df:0c:dc:
14:f8:bb:38:2e:18:bb:53:bc:8b:d5:5b:5b:bb:71:
47:6d:f1:c2:28:f4:45:46:07:0a:98:f2:d2:9e:57:
0b:73:5f:f7:a8:7b:73:02:e6:57:99:24:68:8b:13:
c4:5e:6b:7e:03:1e:66:a8:fb:cc:72:86:be:2a:ea:
d3:6b:19:7e:4d:bf:64:49:72:f9:67:ab:15:43:9e:
86:e1:eb:e5:f5:b4:7e:1f:47:d0:a1:e7:24:a7:34:
3c:da:a6:c7:cd:3c:24:97:e7:13:41:75:50:7f:ef:
0e:e3:3a:27:bd:df:ea:ce:ff:9e:79:d7:12:4f:7c:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:86:ED:C0:C8:AC:B7:E5:1E:67:0B:29:1F:31:6C:05:E0:52:93
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:f5:2c:1e:d8:ca:87:04:25:8d:ac:57:9b:30:22:16:4e:
8b:01:da:11:3a:bc:34:77:d6:fb:ea:b9:01:19:c6:71:03:78:
8c:6e:04:2c:f6:44:d6:60:d9:11:33:7c:6b:50:6c:f6:1d:79:
d0:8f:9d:97:3c:6f:fb:0e:34:0e:79:a7:60:c6:54:d7:41:c3:
8a:62:25:db:30:c6:db:4b:80:be:d8:4d:53:74:8d:3f:88:6b:
48:29:7f:d1:91:27:5e:48:9c:8e:a3:0b:05:ed:ba:d9:09:bb:
cc:60:a6:05:5d:54:ec:af:d8:de:e5:33:86:b7:10:94:fe:2d:
c7:cb:fe:48:43:08:0f:c2:14:53:18:9c:6c:7b:1e:f7:ba:99:
ce:23:c5:b6:db:8b:5e:6c:4e:68:15:0b:31:d6:d2:73:9c:3e:
c5:4e:16:15:5f:84:93:12:7a:c8:5d:f4:76:36:82:9c:88:3f:
7e:c0:88:8b:b3:d7:c9:07:fe:c6:cc:28:e1:65:a4:5d:f0:bb:
fb:ca:84:1f:7f:06:cb:e3:27:2a:98:3d:7f:ac:25:35:f4:98:
8e:08:c6:28:bc:47:64:3c:4b:6b:02:8f:ac:60:de:98:df:31:
07:c3:18:63:9b:e9:3f:9b:57:ab:5d:83:7b:fd:a8:67:fd:4f:
7d:ec:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:46 2026 by rpki-client