Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: sLj5tGfNUh5SHgSjXmxMmW+g0JyoJHEbwK32kq2dxvY=
Subject key identifier: 21:ED:8C:C4:2B:4B:3F:E5:A4:8C:1F:63:4A:65:04:8D:19:EB:B7:25
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 019D2704067B4F394027F7DEDC066A4584ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 12EA
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: LDYz2s1zV9c/mW/Ah0D4tyF5+jnJr7TzFt8gva3r8jg=)
2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:06:7b:4f:39:40:27:f7:de:dc:06:6a:45:84:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=21ed8cc42b4b3fe5a48c1f634a65048d19ebb725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:32:88:58:20:0b:c8:3a:c7:d7:d2:db:b7:
ac:5d:e5:49:99:81:62:a6:d0:e0:7f:af:dc:4e:a4:
e4:6a:a7:83:d2:29:d4:ae:14:0b:cb:bb:d0:f3:7f:
59:73:fe:04:42:44:82:df:ad:77:91:c4:b9:ca:6b:
0b:3e:e9:da:a2:7d:a4:0c:9d:d9:fc:2b:27:d3:f5:
53:30:25:b1:fa:29:39:61:eb:ff:65:c6:bf:63:1e:
cd:a7:39:61:f1:62:e4:43:46:9b:4e:41:45:60:e4:
7c:70:de:03:89:5f:b5:f2:53:1c:30:27:63:46:15:
cb:9b:2d:f4:0e:dd:a7:a7:a0:de:9a:5e:d0:e2:40:
c6:9f:4e:48:6a:ec:63:3a:b0:17:a5:70:a2:b1:5e:
ed:6e:e9:6b:15:4e:18:fc:87:32:af:92:65:10:4a:
95:3b:55:a8:7d:bd:5b:23:7c:8a:49:d2:32:10:ef:
02:17:d2:3f:9b:64:87:02:8c:24:d0:f9:2f:09:d3:
ab:35:08:1d:7f:3d:4b:49:e8:59:94:7a:16:e1:a3:
b6:ea:4c:69:31:91:38:cf:dc:e4:82:81:9a:83:78:
62:44:18:78:07:66:83:1f:c5:45:25:2e:31:cb:67:
b4:ab:fb:2f:a8:3c:af:dd:e7:e0:51:a7:9e:87:1a:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:ED:8C:C4:2B:4B:3F:E5:A4:8C:1F:63:4A:65:04:8D:19:EB:B7:25
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ee:f5:70:58:b6:dd:ce:fe:e6:83:11:90:6b:16:c7:37:25:
85:49:41:83:15:da:d3:28:55:6c:69:c6:93:f0:ef:5f:d3:a1:
1b:b3:ce:e9:d2:02:b2:ec:ff:1a:a7:a5:64:d5:02:05:01:ae:
f7:56:04:d1:97:0b:44:c0:d3:50:fd:2d:00:47:ee:bb:71:24:
ed:d2:e7:57:69:10:87:07:b7:28:ae:73:67:65:2f:6d:1e:41:
e6:99:6d:6b:33:a3:10:d2:34:c1:83:58:64:1c:06:49:f1:2a:
de:6f:3e:2d:b4:62:f4:58:46:64:1b:a4:fd:e9:73:df:89:71:
0f:51:f1:53:af:59:05:09:c2:e7:df:9c:d7:4e:62:cb:12:47:
e6:68:52:87:7e:3a:f4:b3:ba:00:0e:45:cb:fd:6b:ca:b3:88:
2f:61:ff:ef:03:3d:de:5c:54:c9:b2:76:6e:5e:e2:05:6b:85:
0b:c0:f5:56:7c:5d:0b:76:f5:85:8f:17:2d:dd:e4:f1:e1:71:
75:21:c0:89:4f:bd:35:b7:f5:c7:54:72:0c:05:03:e2:3f:5a:
f9:c3:d4:2c:41:a8:06:40:2e:5b:1d:e8:4a:ec:dd:34:01:c7:
78:32:92:75:fe:a3:3a:56:a1:c6:72:81:55:11:08:10:f7:7a:
33:08:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:47 2026 by rpki-client