Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: UBxIivcOiVhWB2JDd+qoKDUzKGQe8fxYpweLaAnkj1o=
Subject key identifier: 49:5F:DA:01:EE:A0:2D:B5:A2:41:59:DD:CB:34:3D:AD:7B:BD:50:C3
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 019E1C46CD06A31E095C100FE5609A63B9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 1369
Signing time: Tue 12 May 2026 13:01:02 +0000
Manifest this update: Tue 12 May 2026 13:01:02 +0000
Manifest next update: Wed 13 May 2026 13:01:02 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: 43GcEwJYqSfqzrKMQ2k0tqsen/poVPyI65yvDZeZIvk=)
2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:cd:06:a3:1e:09:5c:10:0f:e5:60:9a:63:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: May 12 13:01:02 2026 GMT
Not After : May 13 13:01:02 2026 GMT
Subject: CN=495fda01eea02db5a24159ddcb343dad7bbd50c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:b5:91:42:c4:75:39:df:9b:39:a0:dc:64:
bd:bb:1d:ac:97:77:dc:a6:a3:4f:83:82:19:c0:05:
cf:7f:5b:9a:df:5e:63:67:95:d0:7b:5f:4d:d0:c1:
13:34:f3:41:7f:58:ae:87:66:bd:2f:79:0f:28:a9:
82:68:cb:45:2f:0f:e0:53:25:b6:4f:5e:31:cf:33:
f4:02:4e:ea:72:0d:9e:ad:13:24:d5:59:34:d8:b7:
60:ad:c2:f8:e6:d4:48:af:02:16:5f:41:60:59:79:
e3:2d:d1:51:c4:17:ba:a6:3a:68:04:8c:60:6f:8e:
e5:17:51:ce:c7:0a:70:8d:e3:60:24:93:f5:cd:66:
30:10:07:a6:28:33:c3:40:2a:49:cb:0c:fb:77:6c:
95:2b:11:b4:88:2d:60:ac:1e:e3:90:d0:52:3b:3c:
63:ef:06:bc:d4:dc:64:6e:14:be:b1:ac:83:c8:17:
4a:2c:7b:00:06:93:73:03:24:04:f7:77:7e:3e:a4:
4f:4f:88:a3:df:32:53:0d:e0:66:04:13:2c:cb:d5:
1d:c2:cb:f8:06:ca:4c:11:43:53:77:f4:7e:7f:f2:
2c:24:06:d6:b7:22:13:69:f2:64:c2:a2:33:be:ef:
35:80:06:d6:aa:d8:2d:6c:3e:72:c3:1d:a7:c2:d5:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:DA:01:EE:A0:2D:B5:A2:41:59:DD:CB:34:3D:AD:7B:BD:50:C3
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:d3:e6:0d:2c:4a:ba:ee:ef:5b:ea:59:40:b8:b4:c6:9c:
8d:cc:01:8a:74:cd:28:5e:be:03:8f:b8:01:34:35:a9:50:51:
b7:ec:7d:74:5f:92:ba:4a:cf:c9:a7:81:0c:49:3b:1b:16:31:
67:12:f2:0b:6b:70:43:bd:f4:6e:2f:ea:08:8a:03:7e:89:59:
79:6f:54:16:1a:b2:fc:67:00:07:e8:54:d2:38:b7:3b:d1:12:
c6:dc:4c:d0:b2:2b:f2:49:f3:fc:5b:96:5b:12:73:37:7f:a2:
08:4b:c2:81:14:89:bd:ef:e9:01:5a:d3:64:77:2c:75:2d:15:
64:2c:df:b9:86:67:fe:92:70:19:7d:a1:68:5d:9c:e5:40:f4:
33:d7:4d:7a:f2:7b:18:94:0f:f8:51:da:01:6a:5c:a3:f1:dd:
7a:54:27:06:d0:4b:fb:c2:c9:67:a3:cf:e2:c3:2c:18:91:d1:
ec:39:46:f7:46:69:ad:4e:3f:2f:2b:5f:38:4e:b8:bd:a8:68:
ec:28:3c:ea:3f:c0:0a:f0:d4:0d:7c:99:a5:f0:f8:57:18:fa:
be:18:03:ec:95:34:a6:22:59:8e:e2:a3:2f:9a:2a:33:f0:a6:
a5:9d:6f:51:20:3e:f6:95:b2:e3:2b:2b:b5:a4:6b:1f:ea:45:
18:11:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:44 2026 by rpki-client