Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: isvbv5HlkA/nCgRQrWQ1iS1IKUbqxvCU+TrgzfKemno=
Subject key identifier: 21:DC:54:D8:73:E5:A8:30:09:F9:31:C5:FD:57:03:5F:82:51:B2:CD
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019DA3E61A24D8983BC9DC9273A4A34F9C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 04:00:59 +0000
Manifest this update: Sun 19 Apr 2026 04:00:59 +0000
Manifest next update: Mon 20 Apr 2026 04:00:59 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: r7HanIglqGvZ2icXHeyYPQ0mcz/4gyQQXzOC/51vdw4=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:1a:24:d8:98:3b:c9:dc:92:73:a4:a3:4f:9c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Apr 19 04:00:59 2026 GMT
Not After : Apr 20 04:00:59 2026 GMT
Subject: CN=21dc54d873e5a83009f931c5fd57035f8251b2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:d1:79:90:e1:bf:74:c0:58:e3:95:1b:1a:
87:ea:5d:66:3d:44:d4:c8:c3:b7:bc:0a:88:1b:23:
c1:ca:98:54:c5:3f:e2:1f:6b:5c:5f:0f:31:db:38:
53:fb:1a:4d:81:7f:78:0c:d9:e2:f0:4f:f1:07:ed:
31:10:11:a9:a6:6a:cc:4d:bd:48:33:fa:e1:01:f8:
ff:83:35:69:55:48:3a:39:99:3b:a7:8f:f0:a5:75:
a0:30:11:e7:b9:22:8f:e5:3f:cc:ec:4c:fa:79:8a:
73:50:14:ee:50:07:79:a8:ea:72:68:7f:8f:5f:f5:
0c:91:59:21:eb:c1:1d:08:8f:53:5a:10:45:eb:56:
52:3b:6c:b5:68:bc:6c:f4:60:4c:7e:3d:03:e5:76:
c5:3e:01:1c:99:4a:7e:f1:24:66:57:40:f3:55:39:
b7:f9:ff:71:76:af:69:aa:ac:4f:6a:c5:fe:36:96:
56:73:c5:8e:cd:12:5c:ab:fa:18:2b:85:d6:a4:d5:
11:63:07:c2:b0:17:da:d9:dc:7d:a6:bb:cd:39:79:
8b:18:3b:53:b3:e8:f0:2b:95:21:f5:b2:c1:f1:f9:
1b:f9:5d:dd:a7:ab:ed:1f:d4:80:c3:82:cf:c3:04:
ee:a5:69:a3:f7:15:ad:5d:4b:72:e8:24:9d:2a:4f:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:54:D8:73:E5:A8:30:09:F9:31:C5:FD:57:03:5F:82:51:B2:CD
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:d5:66:fd:d8:ef:82:a3:9b:72:6d:ea:0d:03:6d:86:d7:
44:87:e7:fb:55:13:59:8c:31:00:fd:5d:44:a2:f9:d9:95:9f:
ea:c2:08:0e:98:6f:b7:44:fd:25:52:9c:6e:b0:42:4b:5e:e1:
b2:be:f7:1b:a0:de:90:bd:31:61:bc:c9:c4:41:19:ae:be:6e:
1d:17:9d:00:c3:99:02:9c:41:58:c8:3a:88:f5:9e:49:d0:c2:
c3:c7:c4:43:91:cc:75:37:bc:9b:8d:65:76:fe:e6:38:cc:7a:
56:f3:42:79:a5:f0:de:32:74:f2:7d:7a:5b:2b:38:15:75:60:
10:b4:c2:d1:bc:96:38:e4:2f:a8:ed:08:ac:f7:83:3a:bd:d9:
b5:4b:cc:44:ea:e4:f9:5b:17:07:cb:9c:37:39:62:c2:2e:43:
66:4c:41:74:a6:37:34:e0:85:d0:f8:26:33:11:bd:8f:65:8a:
8b:4f:57:9c:a3:d3:6b:b7:fa:05:35:5e:a8:fd:c5:7e:9e:6d:
66:b5:9d:11:b0:ed:f7:e2:20:97:38:cc:f3:68:d8:5a:bb:25:
82:c0:6b:9b:eb:d1:6c:34:f7:f4:68:e2:d2:44:39:f2:35:4f:
84:13:fc:5c:6d:eb:40:79:3f:7a:da:67:0f:af:5c:d2:5c:dd:
e1:9f:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:45 2026 by rpki-client