Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: iz1Hj08WChQif38M7opmvR34o0MyZze9toh87WIqOpM=
Subject key identifier: F8:B2:04:9D:54:4D:4A:90:F4:C5:9C:F4:81:F8:1C:70:C3:A1:04:BE
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019D27E04B43118A273916525BCD231993FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 090C
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: F4iuh1vlpv4Goz2iIRn4GpBGEtzkJ4F+gsXd6JPiW1E=)
2: kfnmSPKrH-6BqSjW12refMM0IqY.roa (hash: y3GnA/PSIzdl79UwPAzwe/9AX+kGDMEKsM5rTgc0El0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4b:43:11:8a:27:39:16:52:5b:cd:23:19:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=f8b2049d544d4a90f4c59cf481f81c70c3a104be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:35:20:be:20:c1:3f:00:32:67:33:74:48:
74:9b:0b:c4:0d:27:6a:f3:ad:00:0a:2f:6a:e6:de:
aa:39:f6:0f:9e:06:4d:ac:ba:c4:bf:5f:d3:5a:d7:
e8:14:7f:a7:68:6a:cc:66:73:07:97:0c:b0:e6:d7:
63:f2:ad:4b:6a:6b:07:fe:26:8e:8e:af:83:37:e5:
aa:90:8e:f0:b0:71:ed:ed:7a:17:b3:d3:00:66:c2:
50:3b:69:af:cc:cf:19:fa:3f:13:25:93:89:9c:84:
4f:8a:fc:35:92:1a:89:95:85:7e:93:e7:3f:38:51:
a2:17:ee:2b:9e:3a:58:e8:6c:af:e2:70:b8:09:26:
bb:e0:80:75:f1:b3:09:37:3e:7a:83:00:42:45:0e:
6f:91:4b:8a:a9:6e:ea:12:cc:05:11:22:e2:b5:33:
b1:ee:1e:b9:5f:2b:16:81:f9:87:f7:3a:21:db:26:
b1:6b:fd:0c:db:26:d6:a4:92:da:c0:e4:25:84:a3:
8c:cd:45:8b:aa:99:05:f1:74:fd:9b:34:2d:21:97:
10:92:eb:25:54:f9:0f:83:7f:e3:47:df:65:f1:a4:
77:65:b3:33:75:53:0d:a0:62:65:e6:16:59:97:f6:
d9:bf:60:a2:77:a0:ff:af:8a:3c:4c:5e:0e:7c:f9:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:04:9D:54:4D:4A:90:F4:C5:9C:F4:81:F8:1C:70:C3:A1:04:BE
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:ba:03:0a:4f:3e:9f:2d:94:10:a9:c1:df:87:d7:e0:b1:
34:ab:d2:e9:d5:dc:98:2e:63:5c:06:84:c8:7d:66:1f:05:b4:
f3:c5:3b:ae:9a:96:b0:ac:23:b6:ff:38:40:d0:7f:af:53:a7:
12:6e:4d:e6:39:24:f3:ab:ba:78:41:c7:04:55:97:37:d4:47:
00:3c:7f:ff:29:7c:33:6d:bb:43:27:f7:42:15:5e:bc:39:15:
5b:5f:50:79:2d:ef:73:f5:3c:40:0c:21:a8:2e:ea:3f:12:f8:
0c:19:d0:a6:71:df:59:98:2a:48:9f:7a:43:72:c1:c4:82:8e:
c5:49:a3:fd:2d:a4:eb:ef:01:67:e8:35:17:e6:03:59:ac:10:
0f:7e:71:52:4f:d4:0f:02:9b:65:c4:03:7f:ef:95:7e:1d:23:
0e:23:dc:14:71:aa:97:2f:0e:85:30:ff:93:df:75:44:67:b7:
51:f0:17:2c:08:69:f1:8f:0d:57:2e:e1:d5:71:1c:31:a2:e8:
02:73:32:d8:09:ed:77:61:e1:c1:12:5c:01:35:bb:c8:11:e2:
b2:0e:83:12:2f:ea:5d:bf:0f:c8:80:2d:18:dd:00:80:4f:9b:
87:6d:95:f5:68:fa:df:c6:1e:e0:a5:7e:97:fc:eb:e5:39:67:
fe:f0:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:26 2026 by rpki-client