Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: zQJ7YfRPBl05UtFGYBDeQ3QBBaCBOP8L5qKPxRKuKtA=
Subject key identifier: AC:A1:D0:C0:BF:71:65:48:4F:03:6C:AF:4A:09:8C:F8:47:17:07:1A
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 019F92B689AB5C1C59FF721CD0EAD11DFC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 06:01:03 +0000
Manifest this update: Fri 24 Jul 2026 06:01:03 +0000
Manifest next update: Sat 25 Jul 2026 06:01:03 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: 1liXmwu71/7jIZpgVvzWkUOn6sxibICJMx03P5hnaMo=)
2: TalsxsnLALDwzR9eYbJ5IPHvuw0.roa (hash: 5TrfT+iuoAx5Pp91gpenuYisGgHzZknoAb6QwNtFQgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:89:ab:5c:1c:59:ff:72:1c:d0:ea:d1:1d:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Jul 24 06:01:03 2026 GMT
Not After : Jul 25 06:01:03 2026 GMT
Subject: CN=aca1d0c0bf7165484f036caf4a098cf84717071a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:2a:01:13:95:66:c9:3b:31:a6:c5:a1:be:
ae:14:b3:83:88:a9:d1:1b:6d:52:8e:3c:7b:88:f4:
42:43:a2:7f:c4:86:28:23:69:eb:28:ec:53:ab:25:
ee:86:07:46:b2:b8:ab:23:f5:9f:32:92:32:2b:15:
61:42:05:0a:39:5d:3f:85:94:b7:0d:5e:b0:bd:30:
c0:de:e7:1c:a4:4d:d1:b3:fa:ab:ac:a6:be:18:1c:
ae:0d:fc:ee:95:77:1f:97:a5:10:11:3d:88:2d:be:
70:9d:b6:1e:a9:be:a0:91:5f:68:5a:ac:55:dc:56:
ad:ee:f1:09:d4:40:e0:b0:91:05:1d:c0:68:20:dd:
51:02:d6:02:67:db:64:9d:eb:7c:92:f0:5a:56:c2:
d3:10:a7:63:0a:53:92:e4:07:be:0e:8b:83:85:e2:
2b:18:be:a4:39:c1:78:7a:0a:c0:58:ed:b0:aa:c5:
f0:6d:b2:75:a3:d1:bb:fd:d3:61:a7:cb:68:d3:f7:
96:9f:ff:e7:45:b0:88:16:c2:69:a9:ff:4b:38:30:
2b:f5:f9:71:58:bb:e8:52:a1:d1:76:58:fc:54:b8:
f1:7d:35:f6:ec:6b:da:2a:16:5e:52:16:77:40:f9:
5d:75:ed:cc:1e:da:81:8f:74:13:05:c8:e3:3f:52:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:D0:C0:BF:71:65:48:4F:03:6C:AF:4A:09:8C:F8:47:17:07:1A
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:34:3c:82:e3:8d:c5:59:1b:97:f1:df:ec:a7:91:7d:93:bd:
b3:8d:cb:d1:85:df:9a:dc:3f:32:b5:be:df:fb:c0:27:4d:cc:
09:2a:93:9f:49:01:b7:5c:f3:33:c4:4c:65:91:64:95:5c:82:
ec:e7:51:81:d7:37:38:cd:f8:f6:2b:e8:89:b8:5f:68:6d:f7:
9d:3a:65:ae:59:35:8b:2a:eb:af:66:43:c4:47:1e:44:be:ea:
97:9b:22:74:63:7c:e9:bd:d5:c4:c4:ce:db:13:4e:24:54:f2:
21:b3:ee:73:6f:f8:0d:04:c1:b7:2f:6e:29:30:e2:7f:78:29:
d9:ea:8e:61:af:12:6e:f7:c9:6d:e5:1a:0e:8c:c5:0b:2b:05:
03:c3:bd:d3:55:3d:ae:1c:f0:a0:cb:a5:40:10:1d:38:54:4a:
de:69:7e:6b:f9:7e:07:07:8a:5d:a9:15:1c:33:36:26:7b:f9:
14:7b:9e:f5:02:15:7c:bc:f3:6a:fb:2a:6a:cf:ba:52:5d:c1:
95:6e:0a:96:c6:ec:2d:b1:90:c0:b1:82:d2:9b:18:81:87:50:
60:af:df:cb:4c:96:07:4c:6b:9e:03:0c:f2:2f:f1:77:9b:a1:
a1:12:cf:21:25:e1:f6:c1:44:03:5d:af:1b:48:8b:03:1c:ee:
d0:ca:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:46 2026 by rpki-client