Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: n5PtkwB3tdKAX8xsFOjmQ6hsg22RdMrbNCxZDvl6R4k=
Subject key identifier: 39:9C:B6:F0:D9:5F:D8:B9:3B:D1:AE:AA:97:65:72:E3:09:9E:E8:38
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019F90C7C75332B3636AC7334996F2DC0C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 178A
Signing time: Thu 23 Jul 2026 21:00:39 +0000
Manifest this update: Thu 23 Jul 2026 21:00:39 +0000
Manifest next update: Fri 24 Jul 2026 21:00:39 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: oJk1POImiXIIsr72vjRmo5LN//hPn+O2iHp0/Uokmhk=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:c7:53:32:b3:63:6a:c7:33:49:96:f2:dc:0c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jul 23 21:00:39 2026 GMT
Not After : Jul 24 21:00:39 2026 GMT
Subject: CN=399cb6f0d95fd8b93bd1aeaa976572e3099ee838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:a9:1f:13:66:89:29:93:3b:e1:1b:85:8d:
73:c7:52:12:1b:ae:63:be:5b:5a:46:35:b6:c1:4d:
5b:99:d2:e3:3a:a1:66:21:e8:6e:45:64:6f:05:04:
f3:23:b4:5c:0e:91:dd:73:c9:a5:35:3a:53:7e:e4:
c0:22:bb:ad:47:1d:93:c7:ff:e6:b7:ac:75:c5:68:
84:39:f3:cf:c7:68:b3:da:42:04:db:29:6a:f6:a0:
15:ce:f3:0e:cb:9d:bf:4e:7c:12:70:66:a2:98:28:
4c:f7:32:0c:08:ae:3d:76:c1:e0:56:69:01:42:b1:
5e:f4:53:d7:83:d9:f0:b5:1f:91:67:68:95:40:3a:
9a:65:9f:23:cd:75:c8:14:78:dd:b3:ae:94:6c:16:
7b:18:54:0b:dd:ae:4e:28:23:6a:c2:0d:14:53:8c:
3b:44:88:2b:17:15:e2:fb:a6:7f:86:03:6c:ed:3e:
37:c3:96:c2:9d:79:90:1d:25:42:03:90:f7:f7:a6:
90:91:21:34:37:42:a8:41:45:98:47:d1:db:9e:03:
69:34:d4:89:72:60:9c:92:4e:b9:bc:33:07:fc:a1:
00:92:47:4c:da:bb:25:f2:11:1b:b4:d5:03:c9:1e:
a1:56:ea:48:a4:b1:41:76:fd:33:15:cb:98:4f:cb:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:B6:F0:D9:5F:D8:B9:3B:D1:AE:AA:97:65:72:E3:09:9E:E8:38
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:87:32:e7:9e:46:4c:2f:df:29:1b:20:b1:80:56:ce:50:
e6:6b:9c:7a:e0:67:c1:d2:1c:d5:f4:c4:aa:ed:52:3f:75:7d:
32:55:7a:7b:00:13:6c:86:a9:91:8f:99:c4:92:58:d9:81:17:
7c:13:91:a3:32:c5:1a:6c:b4:df:59:bd:45:6a:23:9b:b5:64:
bc:58:64:da:ad:c6:8f:15:dc:f5:b0:83:53:06:1f:7d:82:56:
db:6b:a6:38:94:a8:8f:b6:da:83:b7:8b:8e:bc:50:da:d4:f6:
3c:2d:26:19:f5:20:ad:38:fd:f1:02:72:97:73:57:a6:a9:db:
7e:ec:cd:30:f1:95:9b:02:ae:fa:b5:16:9e:7b:e9:f9:6c:ff:
3a:b7:85:15:31:e3:37:3a:3c:da:4b:f7:df:bb:94:d0:62:35:
16:fb:b7:89:e3:af:45:59:9c:6e:b5:5a:2a:5f:99:b0:d4:c2:
55:5a:a0:98:bb:2c:9f:a1:3c:28:ec:85:fc:a2:39:9b:93:97:
97:cd:c9:7e:f0:4a:a2:29:dd:3c:1b:e1:3e:41:0a:a9:b2:58:
a2:69:82:0a:d9:1c:f8:47:04:67:f9:70:c4:93:3c:9c:22:59:
6a:f4:2e:7b:ff:43:07:12:49:50:65:77:14:a1:09:2a:c9:e7:
b8:7d:e6:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx8dTMrNjasczSZby3AxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmI2MzI3Y2RmYTE2NTI0ZGM3ZDAzMzcxMzhhZjMyNWZi
NWUyZDkwHhcNMjYwNzIzMjEwMDM5WhcNMjYwNzI0MjEwMDM5WjAzMTEwLwYDVQQD
EygzOTljYjZmMGQ5NWZkOGI5M2JkMWFlYWE5NzY1NzJlMzA5OWVlODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n2pHxNmiSmTO+EbhY1zx1ISG65j
vltaRjW2wU1bmdLjOqFmIehuRWRvBQTzI7RcDpHdc8mlNTpTfuTAIrutRx2Tx//m
t6x1xWiEOfPPx2iz2kIE2ylq9qAVzvMOy52/TnwScGaimChM9zIMCK49dsHgVmkB
QrFe9FPXg9nwtR+RZ2iVQDqaZZ8jzXXIFHjds66UbBZ7GFQL3a5OKCNqwg0UU4w7
RIgrFxXi+6Z/hgNs7T43w5bCnXmQHSVCA5D396aQkSE0N0KoQUWYR9HbngNpNNSJ
cmCckk65vDMH/KEAkkdM2rsl8hEbtNUDyR6hVupIpLFBdv0zFcuYT8tqZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmctvDZX9i5O9GuqpdlcuMJnug4MB8GA1UdIwQY
MBaAFAm7YyfN+hZSTcfQM3E4rzJfteLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzIt
ZTczNjAzMjMzMDNjLzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzItZTczNjAzMjMzMDNj
LzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqyHMuee
Rkwv3ykbILGAVs5Q5muceuBnwdIc1fTEqu1SP3V9MlV6ewATbIapkY+ZxJJY2YEX
fBORozLFGmy031m9RWojm7VkvFhk2q3GjxXc9bCDUwYffYJW22umOJSoj7bag7eL
jrxQ2tT2PC0mGfUgrTj98QJyl3NXpqnbfuzNMPGVmwKu+rUWnnvp+Wz/OreFFTHj
Nzo82kv337uU0GI1Fvu3ieOvRVmcbrVaKl+ZsNTCVVqgmLssn6E8KOyF/KI5m5OX
l83JfvBKoindPBvhPkEKqbJYommCCtkc+EcEZ/lwxJM8nCJZavQue/9DBxJJUGV3
FKEJKsnnuH3mwA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:50 2026 by rpki-client