
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: pQfxZDuIeC6f11/PsiL0IFZ7CVWdXwBd535O4Pty5XQ=
Subject key identifier: 7E:6A:AF:FD:4B:1F:C2:92:5E:7D:D7:3C:8B:46:BD:16:AA:0B:EE:E1
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 01A0E43E3D8E219B1832C23DA15E0130636B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 19:01:19 +0000
Manifest this update: Sun 27 Sep 2026 19:01:19 +0000
Manifest next update: Mon 28 Sep 2026 19:01:19 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: RJ/PLmUGsjrJnDN5qNuMqrWv0U16kSCCpFo/ua9PZ2U=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:3d:8e:21:9b:18:32:c2:3d:a1:5e:01:30:63:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Sep 27 19:01:19 2026 GMT
Not After : Sep 28 19:01:19 2026 GMT
Subject: CN=7e6aaffd4b1fc2925e7dd73c8b46bd16aa0beee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:70:74:61:d0:ef:85:fb:3f:18:0e:5c:a1:
bb:e9:14:a4:d7:f0:ad:23:a8:3d:2c:1a:b2:65:b2:
74:18:1f:2c:4f:07:1f:54:60:6e:64:85:67:31:3f:
f9:82:7d:73:37:02:be:b4:e7:05:f8:f4:cc:32:40:
a7:b9:ba:d3:13:ba:d2:5a:d4:f8:f8:6d:83:13:dc:
23:56:7e:d0:8d:45:ea:40:93:68:ab:ae:cd:a8:05:
f3:c5:3a:44:06:14:cb:ad:28:c3:02:1f:29:32:5b:
d9:fc:da:e4:c7:ae:a5:0e:37:42:0f:9c:77:4c:4e:
93:b8:f7:f0:8f:86:fd:01:10:82:e2:f1:43:fe:68:
6a:3f:2f:43:cb:e1:2f:1e:f2:86:e4:68:c2:7d:08:
c0:9d:53:64:5b:46:2d:77:41:c7:1c:42:a8:1c:3f:
c4:c5:f6:9b:f4:5d:f2:cd:c7:e7:cb:e4:95:8d:64:
84:5e:8c:fd:ac:50:ab:fa:d7:a8:63:f8:da:d2:2e:
fe:a0:b3:df:da:c3:e8:a8:09:b6:09:88:03:5b:4e:
cc:25:d4:68:b6:e2:20:74:1d:f4:a0:e2:ce:26:a7:
88:47:2b:bf:22:78:66:a3:31:4e:47:ed:9a:64:cb:
0e:40:3d:03:44:a4:4b:b1:5b:b3:0c:f0:f8:2f:83:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6A:AF:FD:4B:1F:C2:92:5E:7D:D7:3C:8B:46:BD:16:AA:0B:EE:E1
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a1:38:dc:db:64:a3:bc:e3:96:83:79:44:b6:09:be:03:89:
c0:7f:11:a1:be:cc:f9:1a:8b:1f:2b:d7:96:b6:3a:cd:31:a7:
5c:cb:e3:ea:87:87:12:0f:95:35:7b:eb:f6:a7:7a:a0:4b:18:
0f:06:ee:ce:a8:bf:3d:b2:8a:f6:9e:65:8f:0a:42:cc:bd:da:
1e:14:a4:3c:f8:18:c2:96:02:44:44:21:77:d0:5d:9a:a7:18:
6e:93:3a:d8:91:71:61:ea:9d:52:11:89:e9:d0:87:89:c2:5b:
40:22:bd:81:5a:74:de:88:fa:5b:c7:6f:22:7c:3c:bf:ad:17:
6c:5a:59:e0:75:2d:85:aa:6e:5c:54:2f:99:c2:e6:9a:a4:b4:
02:c1:cd:44:ae:81:19:1b:d7:88:79:d5:ec:ee:95:f9:1c:e9:
da:49:90:48:3b:56:74:03:a9:ad:0b:17:3d:65:e8:57:55:20:
5f:89:b0:75:7f:3e:83:38:64:fb:ff:7a:65:ca:db:90:b1:96:
92:65:3b:6a:d4:c4:f8:ca:68:17:44:58:64:d6:8d:47:91:e0:
dc:ad:c3:28:82:72:95:47:70:a5:67:7d:5e:83:d5:28:a4:0b:
32:33:dd:ff:a2:7c:c9:b4:2c:34:0a:e5:c8:94:ad:31:74:c2:
5e:62:87:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPj2OIZsYMsI9oV4BMGNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjYwOTI3MTkwMTE5WhcNMjYwOTI4MTkwMTE5WjAzMTEwLwYDVQQD
Eyg3ZTZhYWZmZDRiMWZjMjkyNWU3ZGQ3M2M4YjQ2YmQxNmFhMGJlZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYtwdGHQ74X7PxgOXKG76RSk1/Ct
I6g9LBqyZbJ0GB8sTwcfVGBuZIVnMT/5gn1zNwK+tOcF+PTMMkCnubrTE7rSWtT4
+G2DE9wjVn7QjUXqQJNoq67NqAXzxTpEBhTLrSjDAh8pMlvZ/Nrkx66lDjdCD5x3
TE6TuPfwj4b9ARCC4vFD/mhqPy9Dy+EvHvKG5GjCfQjAnVNkW0Ytd0HHHEKoHD/E
xfab9F3yzcfny+SVjWSEXoz9rFCr+teoY/ja0i7+oLPf2sPoqAm2CYgDW07MJdRo
tuIgdB30oOLOJqeIRyu/InhmozFOR+2aZMsOQD0DRKRLsVuzDPD4L4OwtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5qr/1LH8KSXn3XPItGvRaqC+7hMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqE43Ntk
o7zjloN5RLYJvgOJwH8Rob7M+RqLHyvXlrY6zTGnXMvj6oeHEg+VNXvr9qd6oEsY
Dwbuzqi/PbKK9p5ljwpCzL3aHhSkPPgYwpYCREQhd9BdmqcYbpM62JFxYeqdUhGJ
6dCHicJbQCK9gVp03oj6W8dvInw8v60XbFpZ4HUthapuXFQvmcLmmqS0AsHNRK6B
GRvXiHnV7O6V+Rzp2kmQSDtWdAOprQsXPWXoV1UgX4mwdX8+gzhk+/96ZcrbkLGW
kmU7atTE+MpoF0RYZNaNR5Hg3K3DKIJylUdwpWd9XoPVKKQLMjPd/6J8ybQsNArl
yJStMXTCXmKHTA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:47:40 2026 by rpki-client