Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: QinbdhjBJWht54paSrPC99DhywtoUfWhCqARXLoCey0=
Subject key identifier: 4B:0C:CB:2E:9F:9E:DA:80:7E:D3:FE:59:82:24:D5:BD:2E:2B:AC:28
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019D27723BB23DDF5186A7722C3756C9EBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 057C
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: X67edqvoeAEsybfljlqgjGEc8n+07pBEc53HI1tOOqk=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3b:b2:3d:df:51:86:a7:72:2c:37:56:c9:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=4b0ccb2e9f9eda807ed3fe598224d5bd2e2bac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:b6:97:c0:aa:7a:bd:42:5d:c3:27:55:1a:
58:ab:d3:a7:b2:0b:bf:ad:a3:fe:d6:b1:19:50:82:
ce:5b:6a:39:65:97:2a:39:c1:a8:ce:39:b6:73:67:
b2:ab:a3:58:43:59:5f:1c:90:4d:cf:85:0e:b7:b6:
76:0d:1f:10:f4:ee:0f:a0:03:1d:5f:d7:7e:32:4a:
11:07:64:9a:4b:28:b3:40:94:4c:bc:b7:5c:7b:37:
4c:98:cc:29:c2:91:5d:05:a5:3c:f1:7c:b9:b0:c4:
27:12:96:70:35:a6:34:57:b0:d6:98:37:7c:f8:84:
9c:ae:1d:93:78:9f:e5:4d:f9:b2:49:84:1e:91:8d:
e4:bd:00:70:a6:ba:91:90:c0:5b:fa:83:94:32:f5:
d2:64:7d:d1:2e:50:49:81:40:3c:fc:f8:11:14:6d:
f6:f4:8c:ac:f1:71:f2:dd:75:80:9f:0f:90:77:f7:
a3:f0:c6:32:4e:99:33:f8:9f:2a:b1:50:02:0c:f1:
4e:dc:07:44:78:7d:8b:8e:03:d0:a6:df:6b:0e:69:
b6:8f:7b:94:75:2b:87:5b:8c:6c:80:ba:57:d1:27:
00:50:5f:0e:42:16:42:7a:52:a6:77:49:0f:0d:a6:
60:2f:60:25:d2:1e:1e:de:48:c3:5a:68:de:8c:20:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:CB:2E:9F:9E:DA:80:7E:D3:FE:59:82:24:D5:BD:2E:2B:AC:28
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:98:d7:a9:9e:a6:0b:33:53:18:dc:9c:ce:0c:cb:21:f4:1f:
b5:df:69:0e:40:f5:84:75:0d:9c:de:1b:21:25:46:8a:47:c0:
90:29:da:1b:21:42:d1:c6:9f:6d:66:b7:3e:ca:45:a4:02:3d:
ef:a2:f3:92:e5:6b:23:3b:a5:48:58:c6:9d:d4:59:dd:a3:d7:
58:3f:65:0e:26:2a:03:44:c8:9a:6b:5a:10:15:05:78:5e:ce:
00:1a:b4:54:a1:34:14:84:94:31:fb:4f:78:fa:4a:36:77:1f:
24:fb:1e:13:42:f8:a0:14:aa:4f:f3:71:e8:09:4e:4e:d1:87:
70:56:8f:13:64:8c:32:7c:fb:a3:21:7c:2a:ac:04:a7:0f:0e:
4b:ae:4e:de:cb:da:9b:95:c9:38:e8:8b:7d:b0:70:02:be:17:
75:02:6d:c1:aa:9f:19:a6:99:4f:3d:13:3b:cb:5d:6f:82:00:
e0:cb:b5:ee:9b:d8:56:d2:ad:f8:e8:56:77:0a:88:a9:47:20:
75:d3:04:7f:f2:48:87:8e:2e:df:b1:8c:81:9d:7e:6a:93:50:
8d:c2:b9:a9:bb:85:92:3c:d8:1a:ed:12:60:f1:75:2d:f6:69:
31:31:77:75:b7:0a:ff:c2:44:07:8a:39:f5:2f:bd:f7:f8:a3:
bc:cc:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:23 2026 by rpki-client