Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: 6a9RtiYvN52wal65LGvm8+jYWx2dEio8kYk2e+nsfsc=
Subject key identifier: 82:36:46:B1:D9:AF:12:8F:95:46:17:70:DA:11:7B:53:E2:E6:A0:61
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019F8F7DE766C388F0550A5C23AD1981031E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 06BB
Signing time: Thu 23 Jul 2026 15:00:20 +0000
Manifest this update: Thu 23 Jul 2026 15:00:20 +0000
Manifest next update: Fri 24 Jul 2026 15:00:20 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: pTw3FnFo8Dw+Y9Rp7mJCkdYTtuUD13b9sWQGgC35ass=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e7:66:c3:88:f0:55:0a:5c:23:ad:19:81:03:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jul 23 15:00:20 2026 GMT
Not After : Jul 24 15:00:20 2026 GMT
Subject: CN=823646b1d9af128f95461770da117b53e2e6a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:8c:1e:a5:76:3b:aa:cb:95:c7:2f:4a:38:
ea:c6:97:f8:63:b8:e1:7d:8f:66:3a:16:dd:71:dc:
fe:78:17:9c:df:48:7b:b0:83:87:8d:a2:9b:04:b0:
07:b1:56:d9:71:c2:6b:72:71:6e:13:fa:f5:bb:7d:
91:3d:71:43:26:3a:49:5b:30:9a:5f:1f:dc:a6:24:
b4:18:38:3b:b5:82:1b:35:6f:d6:1c:30:76:1a:42:
94:b0:97:fc:46:7d:1f:b9:1d:08:81:8e:86:64:ac:
30:d4:84:1a:f2:08:13:dc:19:c2:cd:6e:36:a0:0c:
77:8b:45:8a:53:ee:e9:e1:b1:c3:91:19:00:e4:9a:
33:0d:d8:b7:de:27:cd:37:37:a4:1c:69:d0:6c:58:
17:a9:d1:33:f4:23:63:55:de:81:ff:d3:b3:d8:d7:
74:7a:a1:7c:b6:a3:d3:d1:40:6e:2f:04:1d:4e:bf:
b0:2e:68:1b:1a:a9:5c:92:de:b3:21:4d:64:0e:27:
ed:c4:7a:63:91:e2:9e:c6:93:73:ba:ea:c6:3c:e2:
b1:32:dd:c3:b8:8f:ec:d1:ff:fd:21:50:a7:de:20:
7d:45:56:95:7a:4e:bd:c8:a8:25:ea:09:62:f0:70:
9c:db:3a:1a:34:a5:ac:53:0d:d9:8e:72:fd:34:46:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:46:B1:D9:AF:12:8F:95:46:17:70:DA:11:7B:53:E2:E6:A0:61
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:f2:bf:bc:b4:e1:8c:79:af:7b:5d:ba:1b:39:05:4c:09:
0c:ed:82:57:bd:28:da:e5:a6:f6:cf:ce:fc:7c:f9:7d:ab:3d:
2a:32:4e:30:8c:bb:0d:1a:92:29:12:fc:3d:d4:de:95:90:16:
73:22:47:c0:55:88:59:a8:82:9f:93:a3:30:e6:14:86:af:f7:
ea:5c:9e:89:cf:64:6e:34:76:55:2d:7a:9a:53:ea:5a:45:98:
e8:6c:de:10:3d:3f:f6:b6:78:35:17:b5:f0:21:c3:0d:9e:28:
39:22:f9:59:8a:04:ad:73:18:2f:40:f9:72:e5:00:3f:1e:e8:
21:09:0e:1f:9f:df:fb:02:89:08:f7:54:86:30:cf:e4:af:3b:
4a:c7:76:ab:03:18:97:f9:0b:b7:61:19:eb:52:2c:31:e9:6d:
59:bf:91:ec:8a:e5:73:c3:0b:e7:90:60:cc:15:a6:e6:dc:aa:
ec:a4:a2:bf:20:91:0f:5b:4f:88:28:3d:d2:f4:2f:c3:07:c6:
91:81:59:f1:e7:ac:a5:6e:49:6e:e4:c1:aa:c6:e5:3c:1c:45:
3b:7b:fd:0d:fa:5a:34:c0:96:d1:09:41:2e:cd:75:8e:8b:9d:
54:05:3d:a6:ad:ca:98:9c:90:10:e6:91:08:ec:80:a7:73:e6:
d4:2b:41:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfedmw4jwVQpcI60ZgQMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjhmYjkyMjgwYWIwNWI0NDMyZTQzYjk1NDUwZTczYjI3
NzNkNWIwHhcNMjYwNzIzMTUwMDIwWhcNMjYwNzI0MTUwMDIwWjAzMTEwLwYDVQQD
Eyg4MjM2NDZiMWQ5YWYxMjhmOTU0NjE3NzBkYTExN2I1M2UyZTZhMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YeMHqV2O6rLlccvSjjqxpf4Y7jh
fY9mOhbdcdz+eBec30h7sIOHjaKbBLAHsVbZccJrcnFuE/r1u32RPXFDJjpJWzCa
Xx/cpiS0GDg7tYIbNW/WHDB2GkKUsJf8Rn0fuR0IgY6GZKww1IQa8ggT3BnCzW42
oAx3i0WKU+7p4bHDkRkA5JozDdi33ifNNzekHGnQbFgXqdEz9CNjVd6B/9Oz2Nd0
eqF8tqPT0UBuLwQdTr+wLmgbGqlckt6zIU1kDiftxHpjkeKexpNzuurGPOKxMt3D
uI/s0f/9IVCn3iB9RVaVek69yKgl6gli8HCc2zoaNKWsUw3ZjnL9NEYYCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII2RrHZrxKPlUYXcNoRe1Pi5qBhMB8GA1UdIwQY
MBaAFAm4+5IoCrBbRDLkO5VFDnOydz1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTkt
ZGE3Mzk4NTZjZmI4LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTktZGE3Mzk4NTZjZmI4
LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzDyv7y0
4Yx5r3tduhs5BUwJDO2CV70o2uWm9s/O/Hz5fas9KjJOMIy7DRqSKRL8PdTelZAW
cyJHwFWIWaiCn5OjMOYUhq/36lyeic9kbjR2VS16mlPqWkWY6GzeED0/9rZ4NRe1
8CHDDZ4oOSL5WYoErXMYL0D5cuUAPx7oIQkOH5/f+wKJCPdUhjDP5K87Ssd2qwMY
l/kLt2EZ61IsMeltWb+R7Irlc8ML55BgzBWm5tyq7KSivyCRD1tPiCg90vQvwwfG
kYFZ8eespW5JbuTBqsblPBxFO3v9DfpaNMCW0QlBLs11joudVAU9pq3KmJyQEOaR
COyAp3Pm1CtBQQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:59 2026 by rpki-client