Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: ETGaw32/nQm8quKttW3Ccw+9csgCqo4ZlS3V+XLd+pE=
Subject key identifier: 20:60:79:11:1F:22:9F:CE:21:3D:D2:64:91:8F:44:4E:1B:01:AC:18
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 019D299769B172D24A1EE7378EAD0FFC9405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 09BD
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: KhzaAbAn3_Qsuar7p5qwswlTC_o.roa (hash: t3+nQzkQvp951a+38EJDZpoSf5luy0cimxl8a8ewvNA=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: qQtjylvObgfWuBcwVsEgyWVW2YsMCQvpdCcJXnKGkbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:69:b1:72:d2:4a:1e:e7:37:8e:ad:0f:fc:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=206079111f229fce213dd264918f444e1b01ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:47:96:d8:b9:52:04:e3:2d:a4:84:9b:72:
77:79:bd:86:f3:f2:25:9e:a9:e4:e5:36:d6:55:b8:
1a:56:ee:44:90:bd:5b:fc:03:89:4e:25:ed:98:b6:
d9:d6:66:63:33:cc:64:fd:9e:aa:3b:98:cc:82:a3:
74:30:60:67:55:92:48:5f:d1:e7:5d:54:72:d5:67:
78:60:dc:fc:52:ce:ea:9b:8a:f0:b3:e4:64:01:74:
24:df:36:78:e5:3f:c7:41:79:da:92:3d:82:61:44:
2d:49:82:28:5d:c6:9b:a8:97:f5:93:17:91:33:4a:
f1:de:9a:ae:ea:24:9c:aa:8f:a2:e3:3e:23:7a:14:
16:1d:4c:a3:54:60:d0:bc:9e:03:ac:46:74:78:7f:
fb:6f:96:48:04:ba:ae:31:15:0c:f2:84:a4:5e:47:
f5:5f:c1:9b:51:bc:07:73:78:a2:7c:85:a9:f7:57:
c9:ee:bc:db:c8:c0:b1:4b:d7:66:5f:0e:f6:b4:8b:
fd:6e:90:cf:a4:38:18:28:fa:21:87:49:cd:0e:ec:
3c:7d:be:c7:c1:05:58:1b:78:92:81:81:e6:9d:43:
59:2b:2c:26:1e:dc:06:52:ca:24:b3:c9:7d:90:fb:
d6:ef:11:65:8e:44:d5:e1:ed:ad:5e:f5:b8:4e:fd:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:79:11:1F:22:9F:CE:21:3D:D2:64:91:8F:44:4E:1B:01:AC:18
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2b:14:4b:80:03:f3:06:a1:ad:cd:c0:74:8b:da:09:87:de:
65:10:3b:ba:9b:36:6d:5d:86:7f:10:d7:f3:fb:c3:6d:0a:54:
d5:ae:89:4e:fb:46:72:b7:9a:98:ec:ce:4d:58:37:d4:0f:d3:
b8:52:b0:9d:5c:d6:47:1b:03:72:ff:01:1b:e1:2a:dd:6c:9f:
4a:1a:d6:e2:03:c7:30:9c:1f:57:7a:4e:ff:1c:c6:8c:b1:70:
33:ca:58:8f:7f:ed:e6:26:ff:c6:da:60:01:f8:72:bb:3d:e7:
38:ca:e0:78:0b:7c:2b:8f:4b:93:aa:2b:6c:c1:96:c9:97:9e:
6c:fe:03:72:96:a6:db:4c:85:82:e1:55:f5:62:8a:99:d5:8a:
92:e7:30:24:fc:47:43:4b:0c:19:f5:c0:67:40:c5:d8:02:5b:
b5:0b:d4:8a:e3:2d:1d:f9:aa:0b:ee:cf:0a:eb:cb:95:72:f8:
87:0b:69:44:18:ac:bb:41:8f:3c:ed:d2:36:39:b6:4b:26:38:
b3:8b:3e:1f:9b:17:8b:d3:77:99:10:19:03:48:44:81:61:9a:
fd:5a:41:cc:52:e9:c8:a1:37:16:7d:5a:14:0d:f5:2e:df:ca:
a5:a4:a5:1e:d6:15:a0:7b:81:5d:d9:66:33:c0:c7:fd:f4:b8:
23:18:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:26 2026 by rpki-client