Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: 3kNE56KJiEzuPqjCK+vtVw5JikvvXqn+OBkBYWeEoZE=
Subject key identifier: 78:31:87:36:BD:25:A0:D6:9A:1E:3C:AB:68:27:5A:C1:C3:48:61:33
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019D28BB19B32DC8CDD5A8B71A54CAE126A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 164B
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: sHmBXePschKI0an6FWLkXtkRDJwjYmZcyyDEAvAT4LY=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:19:b3:2d:c8:cd:d5:a8:b7:1a:54:ca:e1:26:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=78318736bd25a0d69a1e3cab68275ac1c3486133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:9a:79:ca:60:43:2a:95:d9:5c:76:53:32:
35:d6:19:6f:81:cf:ab:94:16:d0:a7:d0:4f:e9:48:
05:32:7f:a6:fb:3e:a9:66:02:26:ab:4a:9e:80:25:
fe:41:ff:ad:79:10:5c:b8:73:29:aa:ef:ad:db:d0:
ef:5b:93:7a:3a:2b:74:1d:7d:20:e9:fd:5a:e1:f9:
42:4a:7e:81:2c:5d:f2:a2:99:3e:4d:c3:54:3f:75:
ee:09:b9:c2:e3:76:be:44:ad:86:70:2b:f9:55:0e:
2f:b5:27:5d:4a:3b:43:19:ff:79:24:03:fc:9d:a4:
d3:d2:fb:23:27:e5:e5:a2:f1:00:6d:d9:29:a6:91:
81:5b:1e:82:a5:76:4e:bc:77:62:13:16:c2:9b:7b:
60:0a:b3:15:c6:97:f0:53:46:7d:2c:23:96:af:53:
65:70:bd:e5:61:89:02:50:9b:70:8c:bf:cf:97:2c:
74:f4:87:ca:16:3b:1f:c5:de:9f:72:c7:2f:8c:fb:
e4:fb:f2:cc:4c:a5:f9:69:2c:a1:6d:75:7e:35:72:
a7:36:d1:e3:ae:00:ab:a4:28:3f:96:b2:fe:cc:f7:
cc:85:43:1e:6f:9e:17:9e:c8:0d:1e:44:dc:6e:31:
e3:02:4a:44:c1:d8:1f:43:fe:cc:25:73:7d:32:13:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:87:36:BD:25:A0:D6:9A:1E:3C:AB:68:27:5A:C1:C3:48:61:33
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:82:bd:74:5d:64:b3:45:65:97:64:a2:41:f0:b2:25:a7:f9:
0f:39:aa:87:31:cf:39:53:93:89:2b:ef:e1:92:c1:ac:46:77:
c6:05:ad:f6:b3:0b:ce:27:47:85:d6:fe:96:eb:3b:49:d4:93:
ce:18:1e:d2:be:c6:92:79:ac:31:f6:18:f5:c0:cc:7f:c6:58:
6d:f9:d6:fe:84:9c:e7:23:c9:c5:7c:aa:55:72:5c:34:2b:61:
c5:5f:b0:69:24:ce:9f:a5:e2:f7:fb:36:49:ef:db:26:c7:c0:
7a:98:35:a5:58:cc:73:4b:81:3b:b2:df:ee:b3:a9:e2:03:46:
9d:db:c2:21:9e:a3:ab:a1:dc:e6:89:b9:ab:70:da:f0:78:ea:
6f:a0:fa:f5:5c:f0:d4:44:8b:11:c8:eb:ae:7a:d7:68:e7:96:
43:87:9e:c2:5c:1b:6b:e6:a9:0b:a9:c8:8d:6b:70:64:c0:34:
50:85:84:df:24:a0:de:d9:cf:bc:96:1e:21:7b:c8:0b:e7:b5:
8c:7a:74:70:0f:3f:a8:ce:2e:1b:e0:5e:b9:7c:47:82:e1:1a:
26:95:e0:cf:fc:4b:d1:2f:f9:68:3f:42:a4:86:be:29:c2:6c:
1d:63:e0:3e:7c:cf:09:f3:d0:59:0f:d4:55:38:50:d9:f9:fd:
98:93:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:59 2026 by rpki-client