Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: fJhDUeNRSStRw9MxTDjsWEeofUaBxb9oksDUD7VPaYI=
Subject key identifier: C8:90:79:46:EC:97:7F:0D:FE:77:40:1F:A9:C8:00:6A:50:FD:11:48
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019D284D9794D6285DA208095824D880B4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: bkZEZjh5UuUeMUKzxJu6weWRwHXonDflMe089bhgZno=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:97:94:d6:28:5d:a2:08:09:58:24:d8:80:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=c8907946ec977f0dfe77401fa9c8006a50fd1148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:dc:5b:0c:16:1a:e3:c9:e0:ec:96:df:f6:
80:57:21:a9:d8:69:55:77:47:57:7a:cc:32:2e:a4:
e5:42:c4:c0:50:7a:0f:32:4f:c7:8e:76:43:c5:55:
3d:cc:29:a3:af:ff:a6:b1:00:a1:77:42:4c:87:f9:
11:bb:18:f5:95:01:13:c7:c3:e0:c7:d8:70:d1:9c:
d0:fb:e7:f7:f3:8a:c7:7c:c4:22:9c:5e:29:8c:2b:
f7:4e:d9:0e:91:e7:7d:d2:e0:bb:ce:26:97:d4:74:
16:4b:5f:c6:72:6a:0f:ee:d2:41:66:e4:87:da:5b:
96:46:d9:06:b7:4b:aa:1a:ae:89:1d:2b:b4:1d:3b:
e3:24:4b:59:7c:68:50:3a:84:42:d7:3e:c8:8a:d2:
d2:0e:39:ad:e1:6d:93:43:44:0a:0c:68:46:e0:bd:
29:e7:9c:f0:82:95:f7:65:57:dc:91:98:84:dc:c3:
ec:d7:39:f8:d9:42:df:1b:18:99:1f:a4:c9:bd:7e:
d8:19:84:6e:71:fb:3a:88:5a:6d:99:7d:47:67:87:
20:1b:2b:f4:06:9c:29:36:25:e5:d7:ac:90:5f:ad:
24:d5:82:10:7f:f1:0e:c8:ea:e7:fe:32:4a:75:f7:
11:0c:3b:c1:1c:e1:44:0a:f9:64:9a:eb:6d:a7:59:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:79:46:EC:97:7F:0D:FE:77:40:1F:A9:C8:00:6A:50:FD:11:48
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e2:79:fc:c8:c4:d3:75:1f:26:45:fd:27:9a:cf:f5:5b:e0:
9e:5c:26:66:60:e1:63:06:0f:6b:81:b6:b1:99:c6:b7:b2:a3:
5e:a7:f7:fc:87:86:22:38:05:80:4f:f7:da:14:48:5d:8f:97:
de:5a:6e:b0:94:4c:c7:44:fe:e1:08:89:ef:66:4e:77:d5:1d:
e7:43:17:0c:7d:24:e0:c3:01:75:0e:70:01:21:1d:2a:5e:31:
c4:63:ae:60:4d:fb:83:3b:c4:4c:ad:93:f5:a4:d2:2d:fe:2c:
91:c8:a2:bd:2f:d4:5f:df:03:92:e6:06:e2:c5:4c:f2:b0:ca:
63:30:d7:29:fa:5c:97:28:30:90:ac:1c:83:05:c5:17:a5:d7:
b1:63:d7:c2:c6:25:00:68:83:b8:60:83:11:b8:90:a8:ea:81:
26:d8:31:0d:a2:f0:1f:7b:09:34:72:c7:47:42:19:68:eb:5e:
b0:2f:2e:03:14:b5:b1:81:fb:5a:4c:3c:70:20:05:8d:6b:23:
fb:4b:c0:ce:0a:5e:07:ae:57:cc:bc:cd:96:9c:37:fa:b6:a3:
6d:b1:73:12:ef:84:57:a7:f9:ba:99:b4:e0:c1:8f:11:92:8e:
6d:ba:64:76:e8:b4:26:d9:aa:8e:e0:09:42:b1:22:7c:98:31:
c7:db:1f:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZeU1ihdoggJWCTYgLT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjYwMzI2MDQwMTA2WhcNMjYwMzI3MDQwMTA2WjAzMTEwLwYDVQQD
EyhjODkwNzk0NmVjOTc3ZjBkZmU3NzQwMWZhOWM4MDA2YTUwZmQxMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0bcWwwWGuPJ4OyW3/aAVyGp2GlV
d0dXeswyLqTlQsTAUHoPMk/HjnZDxVU9zCmjr/+msQChd0JMh/kRuxj1lQETx8Pg
x9hw0ZzQ++f384rHfMQinF4pjCv3TtkOked90uC7ziaX1HQWS1/GcmoP7tJBZuSH
2luWRtkGt0uqGq6JHSu0HTvjJEtZfGhQOoRC1z7IitLSDjmt4W2TQ0QKDGhG4L0p
55zwgpX3ZVfckZiE3MPs1zn42ULfGxiZH6TJvX7YGYRucfs6iFptmX1HZ4cgGyv0
BpwpNiXl16yQX60k1YIQf/EOyOrn/jJKdfcRDDvBHOFECvlkmuttp1ksVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiQeUbsl38N/ndAH6nIAGpQ/RFIMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOJ5/MjE
03UfJkX9J5rP9VvgnlwmZmDhYwYPa4G2sZnGt7KjXqf3/IeGIjgFgE/32hRIXY+X
3lpusJRMx0T+4QiJ72ZOd9Ud50MXDH0k4MMBdQ5wASEdKl4xxGOuYE37gzvETK2T
9aTSLf4skciivS/UX98DkuYG4sVM8rDKYzDXKfpclygwkKwcgwXFF6XXsWPXwsYl
AGiDuGCDEbiQqOqBJtgxDaLwH3sJNHLHR0IZaOtesC8uAxS1sYH7Wkw8cCAFjWsj
+0vAzgpeB65XzLzNlpw3+rajbbFzEu+EV6f5upm04MGPEZKObbpkdui0JtmqjuAJ
QrEifJgxx9sfRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:21 2026 by rpki-client