Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: YQhlJI9ayEn4nIXMGwVyODh84IS99KULZIjRDHuSFzk=
Subject key identifier: 0B:25:85:C4:A5:74:AA:2D:59:28:60:45:4D:6A:08:62:F6:83:DB:1D
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019E1C0FF6938201364A7895E52EB40E3977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 16C9
Signing time: Tue 12 May 2026 12:01:08 +0000
Manifest this update: Tue 12 May 2026 12:01:08 +0000
Manifest next update: Wed 13 May 2026 12:01:08 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: 6DSm7eAmn5iH7A3TxmITYYJiSZls0Ax3Eof/cmTE8hc=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:f6:93:82:01:36:4a:78:95:e5:2e:b4:0e:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: May 12 12:01:08 2026 GMT
Not After : May 13 12:01:08 2026 GMT
Subject: CN=0b2585c4a574aa2d592860454d6a0862f683db1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:cd:2e:3b:b5:e7:e6:04:8f:a3:7b:21:f7:
6e:f2:22:85:6e:f7:85:90:83:39:33:31:d8:d8:fd:
9f:eb:aa:df:60:8f:3f:2d:3f:01:37:ea:05:77:af:
1d:a9:72:88:9d:82:dc:28:af:22:01:17:12:ce:f0:
fd:af:67:6a:be:e7:97:dd:dd:e3:a2:1f:83:85:63:
46:78:a7:6a:98:bb:bb:90:b3:a6:a2:65:79:34:4b:
58:40:88:d4:94:1d:0a:bb:65:d7:da:d6:be:7d:b6:
b6:8e:7a:1a:fc:39:5e:a9:c7:cd:32:77:73:ef:30:
1f:31:3a:32:4a:e5:c7:c2:93:18:5d:3f:6c:fe:e2:
23:76:98:24:c9:b9:7f:b9:d9:80:80:60:a7:3f:b7:
c4:b0:f0:c2:4b:df:a3:38:04:5b:0b:19:5d:8b:41:
cc:61:d8:61:b1:7f:cf:3e:6f:0f:6d:ca:8d:5c:af:
6a:76:71:99:0c:ff:d0:81:97:ad:54:2f:d6:5b:37:
41:bf:c2:ad:f8:e0:dc:ca:d9:75:7d:fc:90:da:f4:
bd:30:d5:2c:0a:23:53:59:da:cc:0d:cf:a5:04:b2:
b1:d3:20:c3:4b:94:31:76:94:43:a7:e0:b0:73:7e:
d1:0b:84:49:cb:0a:81:ca:ef:9f:b8:9f:f6:3c:b1:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:25:85:C4:A5:74:AA:2D:59:28:60:45:4D:6A:08:62:F6:83:DB:1D
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:96:65:c7:0b:6f:54:9d:a8:b0:5a:c4:b8:63:ec:a3:e6:31:
ab:63:59:35:86:1e:18:f9:75:bd:8e:36:05:75:e5:7a:65:63:
99:88:cb:c5:73:4f:2f:a8:8b:11:4b:68:c4:d5:2e:25:74:b0:
88:c8:c4:94:1e:4e:48:24:db:43:c9:ed:1b:62:47:b6:16:9a:
e9:c1:34:6c:0d:6b:fd:51:d5:88:f7:75:68:ac:d3:bc:48:16:
99:87:8d:d9:d8:f0:cb:56:e1:3e:82:4a:0f:40:32:13:c8:3a:
60:32:ce:6c:cb:f5:51:22:83:96:ed:67:2f:e9:6b:64:91:ad:
3a:50:c1:c3:02:5b:dd:cb:01:01:91:6a:80:35:65:99:e3:d3:
c7:67:ed:66:ee:fa:cd:e5:56:e9:47:f5:80:6e:f7:8a:ad:e3:
7c:70:d7:78:e4:f2:43:cd:bf:83:2e:71:27:83:df:71:f4:71:
b5:4b:73:7b:a0:73:d4:ba:70:26:82:0f:72:1c:86:89:85:e4:
b1:c0:13:82:60:64:cf:ac:ff:70:19:7d:50:8e:ca:b2:7e:85:
98:5d:b0:1e:11:64:51:15:ae:d7:ae:b4:2e:99:87:4a:4d:f3:
38:10:f6:fe:96:d3:8e:0e:fa:3a:81:04:0f:fc:a1:e8:8f:65:
f7:8a:66:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD/aTggE2SniV5S60Djl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmI2MzI3Y2RmYTE2NTI0ZGM3ZDAzMzcxMzhhZjMyNWZi
NWUyZDkwHhcNMjYwNTEyMTIwMTA4WhcNMjYwNTEzMTIwMTA4WjAzMTEwLwYDVQQD
EygwYjI1ODVjNGE1NzRhYTJkNTkyODYwNDU0ZDZhMDg2MmY2ODNkYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaPNLju15+YEj6N7Ifdu8iKFbveF
kIM5MzHY2P2f66rfYI8/LT8BN+oFd68dqXKInYLcKK8iARcSzvD9r2dqvueX3d3j
oh+DhWNGeKdqmLu7kLOmomV5NEtYQIjUlB0Ku2XX2ta+fba2jnoa/DleqcfNMndz
7zAfMToySuXHwpMYXT9s/uIjdpgkybl/udmAgGCnP7fEsPDCS9+jOARbCxldi0HM
YdhhsX/PPm8PbcqNXK9qdnGZDP/QgZetVC/WWzdBv8Kt+ODcytl1ffyQ2vS9MNUs
CiNTWdrMDc+lBLKx0yDDS5QxdpRDp+Cwc37RC4RJywqByu+fuJ/2PLG0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAslhcSldKotWShgRU1qCGL2g9sdMB8GA1UdIwQY
MBaAFAm7YyfN+hZSTcfQM3E4rzJfteLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzIt
ZTczNjAzMjMzMDNjLzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzItZTczNjAzMjMzMDNj
LzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJZlxwtv
VJ2osFrEuGPso+Yxq2NZNYYeGPl1vY42BXXlemVjmYjLxXNPL6iLEUtoxNUuJXSw
iMjElB5OSCTbQ8ntG2JHthaa6cE0bA1r/VHViPd1aKzTvEgWmYeN2djwy1bhPoJK
D0AyE8g6YDLObMv1USKDlu1nL+lrZJGtOlDBwwJb3csBAZFqgDVlmePTx2ftZu76
zeVW6Uf1gG73iq3jfHDXeOTyQ82/gy5xJ4PfcfRxtUtze6Bz1LpwJoIPchyGiYXk
scATgmBkz6z/cBl9UI7Ksn6FmF2wHhFkURWu1660LpmHSk3zOBD2/pbTjg76OoEE
D/yh6I9l94pmlw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:05 2026 by rpki-client