Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: KrBekDde1e+pq7FrKeDRtB3vCII63+bV91v66XHFdr8=
Subject key identifier: BD:49:77:D7:A3:79:05:86:3D:34:04:6B:DD:EC:79:29:AB:09:BE:61
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019D288475038564F08B3C146FB59B6CB224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 13D1
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: aFinM6+Mfp6Xaj/PH4X3DkkO78sy7yZ8+To0gOLa3nw=)
2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=)
3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:75:03:85:64:f0:8b:3c:14:6f:b5:9b:6c:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=bd4977d7a37905863d34046bddec7929ab09be61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:8c:73:94:fe:d0:17:e0:85:47:38:cf:41:
f0:b1:6a:2e:3c:54:29:eb:bd:2d:4f:b9:69:b9:f2:
7d:ea:00:47:b2:8e:14:a1:89:3c:56:55:c1:57:3e:
1f:35:c3:bb:da:35:b6:f1:95:d2:ca:cb:de:41:4e:
5e:fc:fb:58:33:91:77:6f:6a:65:56:88:71:fd:16:
90:f0:5e:f7:d7:f5:7e:66:fe:a3:47:e6:16:f1:e0:
2f:39:e0:56:54:a2:04:94:a8:fb:ea:72:83:9c:39:
e9:47:8e:b6:b4:c2:70:65:e9:1c:62:71:b3:b0:f6:
41:32:ab:b9:fb:5e:d0:6c:99:ff:39:fc:3e:3c:fc:
c4:76:fa:09:43:cb:cd:a5:67:e3:75:8d:b7:59:9b:
e2:cd:13:b7:85:b8:6c:fb:59:f4:f7:5d:e4:3c:70:
f1:48:98:0c:35:31:43:cf:de:d4:54:81:e6:28:00:
07:7c:17:25:7e:fe:43:78:17:3d:da:1e:b2:03:93:
9d:10:94:63:77:70:f4:8e:bd:9d:b5:50:71:cf:e2:
00:46:a4:72:eb:b5:3d:11:a6:46:e8:5d:d0:0a:58:
61:f9:12:a2:0a:49:92:fc:e1:3b:5d:e1:e3:cb:4b:
20:8c:30:2f:fd:a8:75:b5:d5:68:84:72:fa:71:0b:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:49:77:D7:A3:79:05:86:3D:34:04:6B:DD:EC:79:29:AB:09:BE:61
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:fa:8a:78:33:cb:80:8f:ef:a9:24:3a:f8:38:53:97:65:0a:
2f:24:00:99:c5:00:c4:2d:54:30:6c:27:00:8d:8f:01:a2:68:
94:e2:dc:cf:56:ee:ee:6b:90:c8:12:65:5f:04:09:ee:7d:08:
f0:c4:24:02:56:78:1e:73:d3:35:8b:a3:16:6b:bf:e4:74:41:
9d:12:aa:22:0f:3a:16:9b:52:5f:1e:2d:b0:50:34:93:4b:63:
e4:d9:b6:e6:6a:e8:25:dd:4b:10:52:46:4a:a2:c0:ed:6a:7a:
b0:43:ea:6b:6b:34:d7:57:f5:c0:d4:25:1a:f8:92:48:74:df:
52:8e:d0:fb:60:8d:1c:ca:cf:42:7d:40:a1:e9:e7:3e:fe:ab:
4d:b2:d9:eb:bf:ed:cf:43:55:02:22:c8:98:7c:2d:04:a9:bf:
6d:c9:4b:37:11:21:7f:9c:ce:a7:bd:56:b5:8b:9f:38:e9:22:
16:f8:59:d4:26:e7:45:d2:10:ad:30:b9:e1:c1:42:e7:25:d2:
41:77:c8:6f:0b:bf:1a:92:12:99:e0:10:65:fa:77:07:41:05:
f3:a2:72:93:e4:0e:11:8b:4a:c2:96:63:6c:d4:1b:61:2d:f3:
cc:c9:e9:c3:a1:46:b1:cb:da:21:71:11:87:55:e5:e5:7f:47:
80:8f:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:02 2026 by rpki-client