Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: 04HEqp8a29Csy7WFgJMqKqPxSfo+0w7xDeSl/ddvuos=
Subject key identifier: FC:2F:6A:C8:90:90:C9:5A:02:1E:27:AF:E1:06:70:28:03:34:C1:D4
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 01A0CE24029FE27F3C9397035B99575E8047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0760
Signing time: Wed 23 Sep 2026 12:01:01 +0000
Manifest this update: Wed 23 Sep 2026 12:01:01 +0000
Manifest next update: Thu 24 Sep 2026 12:01:01 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: IlEy2JG8XAaAXKhxltyKL6dyFlBRK5iSBuTsGxaOqOc=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:02:9f:e2:7f:3c:93:97:03:5b:99:57:5e:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Sep 23 12:01:01 2026 GMT
Not After : Sep 24 12:01:01 2026 GMT
Subject: CN=fc2f6ac89090c95a021e27afe10670280334c1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:d9:d4:9d:aa:7b:fa:70:25:54:1f:53:35:
fc:e9:9b:97:b3:49:7d:51:df:16:17:4f:34:e5:d9:
06:c4:bc:48:53:9a:87:07:f8:91:13:f4:83:5d:68:
c2:9c:47:e8:7b:08:83:e7:81:3a:cc:30:cb:e7:17:
89:d5:b2:ea:37:51:b4:74:f8:cd:67:fa:40:0f:57:
03:74:04:cc:ac:ad:98:e7:b4:14:c9:68:0b:d8:2d:
48:f2:51:62:7c:a9:f5:67:e9:14:37:c9:97:a1:96:
25:f8:34:62:97:e9:61:3c:e2:40:92:c7:1b:43:ad:
08:cf:08:25:13:20:cf:de:7a:d2:0c:0e:9f:75:cb:
38:94:26:f0:64:98:78:31:6a:96:f9:87:7f:3d:f9:
a1:86:8f:6a:e9:ee:77:58:34:91:b4:70:a1:c6:8b:
11:78:0d:09:d5:34:fe:e8:2d:a1:33:64:1c:6c:45:
9e:16:8a:ea:56:96:ba:c5:f3:47:c2:fa:06:65:a9:
e3:61:51:3f:fc:b2:e0:7e:fb:1c:cf:0c:15:a2:95:
c1:c9:f7:65:0e:5f:fe:05:62:41:02:68:1f:73:e5:
1b:08:15:c7:4f:2a:2c:ec:2f:e2:2a:96:8f:70:4e:
8c:04:b7:69:65:4d:b0:1c:a2:90:ae:41:43:75:42:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2F:6A:C8:90:90:C9:5A:02:1E:27:AF:E1:06:70:28:03:34:C1:D4
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fb:a2:f2:16:8b:0c:c0:8c:3b:ce:c9:e1:90:00:dc:c4:3e:
55:e2:bb:14:5a:0b:24:5a:ff:0d:09:9a:8b:a4:5e:46:3c:e5:
3f:7c:c0:f1:a5:d6:83:7f:8b:36:75:b6:1a:04:d8:9f:3d:58:
57:48:fa:c8:16:7c:13:77:4e:00:48:74:a4:dc:5d:c6:eb:cf:
19:22:d1:84:6c:71:d8:8b:f8:98:61:98:19:87:97:a2:cd:04:
50:9c:ba:d7:57:07:2d:fe:e7:a5:a9:fb:b5:ca:6a:b4:b4:65:
a6:e2:88:04:e2:70:07:73:07:bf:bf:11:27:d1:91:78:85:82:
43:aa:01:18:cb:bb:4e:8c:b6:66:3b:f5:83:d8:06:55:02:7f:
2a:2d:c0:86:e5:26:f5:3c:b6:8c:6f:58:b3:06:11:2a:e5:4b:
60:0a:03:3b:51:15:76:f4:6c:71:bb:9b:c1:03:a4:7f:03:65:
af:a5:a8:6f:af:69:1e:6c:75:70:0a:c9:ff:6c:9b:bf:b5:a8:
91:96:9f:1c:f4:f7:85:1a:1b:58:5c:0a:8c:da:d3:e3:8d:1c:
ce:d2:fd:70:25:1c:aa:f4:dc:7b:3e:ef:ca:35:0e:ba:21:91:
43:0c:1f:ff:37:fd:96:d2:d6:16:17:98:ba:30:b5:72:4e:10:
e1:cf:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:40:51 2026 by rpki-client