Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: 5s1uQl3cg5Kcv5wDzGt5RuL1xLB/GQYxXgyV4sxaJk4=
Subject key identifier: 55:A7:37:FE:3D:32:BB:20:D9:7F:7A:F3:8B:51:15:F2:34:56:A1:C0
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 019D26286AE9CC7FAC31092E6F3957AE9A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 09CA
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: T-RVDwu2R5GREmXjp9oK0pO-emk.roa (hash: NLaXBrxUU7l8TdptUYXzcoGWDubvJljOT1d1MNSpjzA=)
2: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: 4QwF+QR/5He3bC8YPK26Mp30QohRox77tkp4C1AlCPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6a:e9:cc:7f:ac:31:09:2e:6f:39:57:ae:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=55a737fe3d32bb20d97f7af38b5115f23456a1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:40:49:b2:ff:9b:83:ff:c2:de:5f:78:31:
ee:65:19:0f:e5:b2:d2:89:12:fc:db:19:b2:11:93:
a0:16:55:9d:b2:94:fd:aa:a3:ff:87:bb:b3:a9:5d:
6f:cf:24:f1:e3:0e:8b:de:58:90:14:fd:53:2b:fc:
f5:f2:cd:6a:69:0b:7a:bb:33:cc:96:5e:54:6f:b2:
26:1e:0a:fb:39:c5:27:8e:db:03:81:e6:68:06:aa:
1a:dc:47:03:bd:a1:44:1c:62:64:1e:7b:c5:fb:08:
2c:be:76:56:6d:4f:1c:77:ca:1e:5c:3c:35:a6:47:
c5:b7:ab:5c:26:a5:32:c1:ef:d6:6d:d0:07:a0:56:
c7:5c:aa:96:a5:57:d0:4a:88:28:5e:c2:ce:67:b5:
7a:bb:5b:af:00:89:82:ef:20:5b:6a:7e:26:fe:83:
f2:72:65:b4:41:dc:a3:be:0f:42:c4:b1:dd:36:d0:
42:40:1f:00:44:e8:8f:f5:08:61:28:33:dd:55:ed:
af:f2:71:6c:fb:4b:35:c0:d8:37:85:0f:ac:8d:e1:
b7:59:eb:e7:60:47:37:d1:4b:bf:31:9e:de:0b:b5:
25:3e:16:8a:40:fb:e8:6d:66:fe:a2:d8:6d:3f:16:
26:00:94:a1:67:99:79:b7:fb:b8:c5:3c:94:59:c0:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A7:37:FE:3D:32:BB:20:D9:7F:7A:F3:8B:51:15:F2:34:56:A1:C0
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dd:0a:c6:35:01:aa:70:ba:bf:18:fb:41:c6:0f:ba:50:d0:
69:b9:c5:fb:56:1f:58:d7:95:5f:9c:df:a3:60:77:e9:19:b0:
4b:db:27:77:09:ae:3e:15:3d:90:53:c2:58:00:c5:d8:ad:b1:
7a:9e:e6:8d:76:62:cb:72:e4:a6:d8:e2:26:49:b4:58:2c:fe:
30:5f:cd:40:65:12:ea:63:22:e5:05:21:39:d3:b7:5b:d2:74:
32:07:7a:fa:74:13:0a:31:2c:7c:7d:0e:a5:2f:4a:dd:6d:1b:
da:71:27:1a:be:63:8f:f3:b3:c1:41:f1:22:dc:21:b6:69:dc:
d6:b1:72:e5:91:36:d4:2e:35:de:38:83:0c:c3:80:50:bc:1e:
f2:14:d0:6f:bd:33:67:52:04:e0:f5:e6:07:37:1a:89:85:8b:
72:ae:1f:97:2a:d2:49:bf:5e:a5:13:c4:fc:5a:73:ac:11:5c:
29:2a:ce:55:ab:b2:90:59:f8:47:17:e1:06:4d:36:70:02:62:
f4:70:ef:cd:86:a6:00:1a:93:52:f7:f4:ca:05:8f:05:84:08:
eb:6d:db:31:92:8a:cc:87:9a:a8:ab:65:e3:39:8c:23:ce:1d:
8f:cb:6f:5b:33:6b:94:c5:5f:a3:22:bb:a1:c6:77:5a:f7:a1:
73:aa:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:24 2026 by rpki-client