Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: fovTW3AK50JuCPhosTDr+6uflJalw4w/66j3PPhIXBU=
Subject key identifier: 10:AE:04:97:E5:EA:25:14:A5:DD:E7:10:7E:EB:1C:E6:76:DC:F1:74
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 01A0C933D3E87DAEC10263781320827AB40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 13:00:12 +0000
Manifest this update: Tue 22 Sep 2026 13:00:12 +0000
Manifest next update: Wed 23 Sep 2026 13:00:12 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: sMYF213BNDZ4CF7KADozRmy5PQVb6v6CV4R/nxXpQCc=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:d3:e8:7d:ae:c1:02:63:78:13:20:82:7a:b4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Sep 23 13:00:12 2026 GMT
Subject: CN=10ae0497e5ea2514a5dde7107eeb1ce676dcf174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:37:1c:9f:78:b4:75:aa:58:47:b9:bc:90:
a8:d1:40:0e:9b:97:1d:69:95:d7:86:98:5c:36:82:
63:3a:23:94:56:ce:a2:28:e1:3e:47:5f:09:56:ca:
cb:bb:2e:02:c6:02:05:3b:de:e4:ae:3a:ed:42:60:
15:57:0a:48:1a:8d:cc:7c:7f:05:cf:41:19:ae:0d:
63:e1:92:63:1a:89:9a:1e:89:ca:1b:0f:78:17:c8:
e0:06:67:92:b6:75:63:d9:0d:8b:05:34:8d:1b:8d:
2c:39:9d:93:50:a7:6f:f5:d3:b5:7b:8e:6d:75:db:
7d:45:3d:7b:44:36:a0:f9:77:b8:52:d0:27:95:90:
ae:b5:77:df:fa:b5:6d:5b:b2:1a:42:4f:b7:a6:ba:
e3:ff:4d:ec:41:51:d2:cb:5a:0a:d1:dd:7f:d8:b0:
ac:63:b6:cf:ef:4a:5e:bf:b4:86:3f:48:59:83:58:
85:cc:92:e2:af:54:77:eb:93:42:cd:8d:55:85:1d:
da:a8:0a:c1:a1:be:9f:fd:83:92:9a:7e:d4:66:cf:
12:0b:ca:ea:19:b5:39:09:63:fc:1f:b0:1e:02:02:
bf:8d:32:3e:52:4b:95:07:9b:cb:15:4c:80:f0:5f:
16:be:a5:9b:95:a6:f8:cf:28:f3:31:85:7c:61:5d:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:04:97:E5:EA:25:14:A5:DD:E7:10:7E:EB:1C:E6:76:DC:F1:74
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:37:3f:b2:57:09:81:e2:2f:63:29:5a:58:52:62:9e:9b:
77:8a:18:a1:6b:b6:a9:af:4d:b0:08:8c:5a:02:d9:a9:5f:61:
e9:e2:90:c0:45:9b:d5:27:96:86:b5:8f:dd:8f:a9:66:b2:b5:
9b:38:30:65:50:dc:50:6c:74:70:6b:2c:b9:d6:1a:6f:02:ba:
82:b3:a7:eb:b1:a3:4e:b7:87:f4:01:89:64:ad:ca:a0:1c:58:
d2:1f:cd:eb:28:59:c0:a9:a9:43:e9:2b:1e:e6:01:11:c9:11:
a0:02:56:a3:51:41:3a:0e:7d:89:c6:5d:cd:72:5b:86:41:e2:
be:25:c1:37:41:f2:dd:5f:ea:ba:12:0a:b8:b2:5a:64:16:87:
d4:7c:33:bb:a3:eb:c0:50:92:1e:f0:5e:1e:58:18:d3:d1:b2:
42:2c:eb:20:88:7d:40:1f:68:2a:25:f5:f1:3c:e8:80:57:8c:
2b:7b:43:79:6b:b1:fc:67:14:9b:f3:f2:8b:ea:3f:a3:6a:fa:
bf:c0:d6:56:aa:1a:66:1c:8f:61:5c:2a:34:43:59:1a:22:12:
92:5b:d6:90:99:6f:a4:0f:cc:6a:2e:9e:ff:d9:26:fc:fb:50:
a1:7e:ea:56:09:c6:cb:20:3d:c3:81:b8:75:ab:17:67:5d:f6:
28:54:aa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:44 2026 by rpki-client