Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: iVCtRXRSGUjwxF3uaOImb7fk3Ks/rWdxxD6eId/bjpU=
Subject key identifier: 71:AC:45:07:4D:BA:FE:6F:4A:D7:D3:3E:29:7B:3A:F1:88:07:FF:96
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01A0CD7EEA3BC5D6DB9EB39A159C17442D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 182E
Signing time: Wed 23 Sep 2026 09:00:41 +0000
Manifest this update: Wed 23 Sep 2026 09:00:41 +0000
Manifest next update: Thu 24 Sep 2026 09:00:41 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: FDD3OrzpVdrLwYpaP/R95+GJuvY1KyVh+6dslF4/REg=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:ea:3b:c5:d6:db:9e:b3:9a:15:9c:17:44:2d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Sep 23 09:00:41 2026 GMT
Not After : Sep 24 09:00:41 2026 GMT
Subject: CN=71ac45074dbafe6f4ad7d33e297b3af18807ff96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:09:e8:6b:9d:7a:f3:76:27:06:9e:df:cd:
b1:9e:d5:07:45:db:65:13:5b:d7:ae:3f:ed:a3:e5:
01:22:7f:63:51:b9:3d:57:a6:fb:da:68:e5:85:ba:
3c:17:f2:8e:0f:32:15:d1:30:4e:d6:db:c9:f4:2b:
0c:b8:f7:16:d9:8b:79:6b:45:0e:92:a4:5e:3c:b7:
15:58:3d:97:c8:9e:fc:16:e9:84:61:cf:9c:c3:46:
b5:d9:f1:55:4c:c4:96:00:89:04:13:53:d8:a8:21:
b1:2b:13:27:8f:4a:8e:54:8a:3f:1b:cc:49:af:10:
b3:ba:5b:3e:40:27:33:4f:a3:e4:21:26:39:10:8a:
b5:77:4e:66:55:95:83:1b:26:3e:ec:43:3e:dc:ba:
30:e6:7a:9d:49:6a:04:2d:16:d6:fb:eb:d8:dd:29:
43:1c:93:52:2c:01:d9:96:2b:31:a2:88:00:30:b1:
b2:af:96:8e:05:b4:74:c8:bd:1b:e4:01:e1:98:3a:
c8:88:d8:7e:6d:86:cf:37:6a:cb:4b:bc:de:fe:ff:
a1:3d:1f:43:02:7c:34:dc:94:7a:07:9c:17:21:87:
22:9a:aa:57:79:76:9d:3c:2a:44:4c:65:b7:ea:f2:
b1:44:c5:ec:2b:43:d1:e0:5c:ae:06:61:82:69:db:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:45:07:4D:BA:FE:6F:4A:D7:D3:3E:29:7B:3A:F1:88:07:FF:96
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9e:4e:9d:73:8b:f8:f7:d7:bf:fe:d9:05:8b:20:d6:a5:24:
8b:ff:5a:38:e9:d1:20:fc:c1:c3:d7:d7:e3:95:a1:4b:72:5c:
ad:07:cb:a1:4c:44:86:6f:1c:40:e3:bf:1e:b6:95:95:8c:58:
cc:8a:f0:d0:32:4a:e2:ba:5e:a9:28:41:ef:52:ee:9a:1a:77:
67:6c:f6:86:ec:22:7b:aa:7d:27:9c:5e:89:e7:1a:04:1e:39:
46:d0:29:11:49:3c:f0:17:bd:87:2f:c6:15:2c:61:3f:b4:a5:
f9:26:c2:e2:a6:90:de:c4:f6:d5:3d:c5:b0:94:56:dd:f9:03:
66:bc:c4:18:ec:17:99:0d:f5:fa:e2:0d:ac:cb:8e:dd:04:62:
a0:4b:62:0f:a1:92:13:da:1c:7c:ce:70:1e:46:b0:7c:62:6e:
5a:dd:e8:73:53:f6:72:92:c6:c6:8e:05:10:05:8f:20:40:64:
98:d1:8b:e4:6e:30:8e:b9:82:1c:6e:a5:b7:0f:10:12:c7:34:
a8:83:12:7b:75:c9:20:e7:89:ca:ff:e7:ae:83:8b:49:17:a3:
24:1e:10:4c:2f:6c:3f:09:86:53:f9:ca:6c:57:55:8e:c3:de:
27:e7:8a:3a:e9:ae:04:92:f8:bd:95:09:40:38:26:b5:9f:7c:
61:da:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:13 2026 by rpki-client