Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
File: cBKlLoiwGDLPDuN8zath3s59EsY.mft (raw, json)
Hash identifier: GPahgivdoL5S7jwm8x/1UW4zyPvLmLVOLSm/3Daqvq0=
Subject key identifier: F0:CD:A8:99:19:7A:DC:3F:E7:52:AF:1C:B8:E9:47:8D:1E:93:3F:E0
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial: 019D281697A718AC17E01E4A50683A1D7980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
Manifest number: 0D08
Signing time: Thu 26 Mar 2026 03:01:02 +0000
Manifest this update: Thu 26 Mar 2026 03:01:02 +0000
Manifest next update: Fri 27 Mar 2026 03:01:02 +0000
Files and hashes: 1: SNdVrzFoTGYFoAaQRYv8cJ6F2H0.roa (hash: MfCh5miyV4l1WaY/F5DKyibenGShF9S2TLmog0i5DGQ=)
2: cBKlLoiwGDLPDuN8zath3s59EsY.crl (hash: bNKszzS0Y+Rb3VaE9BWzfwGFLoYf+MB9Z4NSDFPnybY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:97:a7:18:ac:17:e0:1e:4a:50:68:3a:1d:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Validity
Not Before: Mar 26 03:01:02 2026 GMT
Not After : Mar 27 03:01:02 2026 GMT
Subject: CN=f0cda899197adc3fe752af1cb8e9478d1e933fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:36:03:40:1b:db:30:f0:bd:3e:7b:65:f9:
c7:96:ab:76:b8:43:29:89:4d:3c:19:39:6c:3b:e7:
95:09:9b:a9:26:3b:ea:5f:5d:20:1f:c8:bd:a5:e2:
9a:cb:a9:72:d1:8c:36:d9:83:a1:5c:16:65:f8:b4:
e0:34:bb:93:04:9e:25:27:69:56:f5:fa:21:1f:41:
d7:53:5f:ce:4d:e8:f1:c9:e2:89:01:ae:dd:1e:ed:
33:87:3b:85:b8:2a:93:39:82:22:3c:bb:b7:25:b2:
79:38:93:7c:15:74:08:b6:5c:44:7d:ea:e7:c7:06:
cb:bd:9d:f9:e9:4c:72:e0:6e:32:8c:78:30:50:e1:
14:48:ee:21:91:de:d6:58:1a:3a:a2:0a:ed:44:06:
2f:bb:0d:04:95:fc:52:af:9d:85:9a:e9:90:63:00:
9f:fe:ea:da:96:f6:27:be:a9:f6:8c:44:83:8e:8b:
54:2b:a7:71:78:0c:68:ef:29:dc:82:b6:9c:84:58:
5c:9e:93:4c:e8:28:1e:14:01:62:b3:ae:a0:ae:7e:
8d:9e:b9:17:63:4c:7a:66:31:e7:de:2b:2e:2e:aa:
da:91:61:15:e4:9a:60:2d:6b:5d:85:1c:c2:ce:16:
7c:0a:2d:18:6a:bf:d9:68:bf:f0:74:13:0f:ce:f9:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CD:A8:99:19:7A:DC:3F:E7:52:AF:1C:B8:E9:47:8D:1E:93:3F:E0
X509v3 Authority Key Identifier:
keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c1:4f:d2:55:78:d3:b1:9a:37:3e:d3:d7:66:79:1e:d9:c3:
5c:d6:00:db:9b:e4:63:ee:c8:d3:1e:1b:2c:23:bf:e1:78:f0:
fd:4c:ee:e5:98:a6:5d:d6:2c:8f:35:99:1b:3b:16:40:51:e8:
08:5a:02:e9:41:42:19:40:da:eb:67:f8:01:38:16:ab:6a:cd:
c5:94:d4:44:c9:45:91:55:b0:0d:8e:15:58:c8:9c:2b:38:1a:
39:99:06:0d:d8:18:a7:65:0e:6c:69:e8:18:28:02:be:82:a4:
53:c8:32:79:46:51:10:17:c0:09:fe:0c:f3:d1:b8:f3:4e:88:
b5:be:4a:31:25:16:2b:1a:b8:0c:6a:c6:71:b6:5a:63:5a:19:
c8:4f:90:2b:05:3b:d0:87:a9:17:b1:11:19:e2:f4:71:ed:98:
de:7d:df:e0:52:87:83:53:2b:3c:09:6b:94:fe:ef:6b:b2:cc:
6b:6a:6a:f9:13:32:76:0c:71:f2:cb:5d:48:19:41:46:39:ae:
0d:8f:dc:2c:a0:62:50:0c:4d:15:cf:f1:dd:cc:db:96:0f:e5:
71:40:06:49:6d:a6:9b:fa:65:c2:95:e2:34:eb:0e:40:6a:ce:
3e:ea:ba:68:11:37:76:5c:e4:ce:1d:72:f0:ff:c9:49:3b:f2:
79:5f:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:34 2026 by rpki-client