Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: AABMWRDIoDm1qNK7oAfSgAaHybWjDrfPyYaKh0hdvSw=
Subject key identifier: 0D:4B:0B:20:DB:01:B8:4C:0D:2F:5A:CE:F2:E6:A8:88:35:0B:27:A4
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019CAAC6CA3A0AFCEE311C6E47142AD96E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: 3w//UR8K6Wg2gZyJWswQirL+1KBMxYBBjySQjvEBg2Q=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ca:3a:0a:fc:ee:31:1c:6e:47:14:2a:d9:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=0d4b0b20db01b84c0d2f5acef2e6a888350b27a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:aa:3a:ae:57:2e:06:d1:a0:c9:01:22:96:
39:dd:23:bf:b7:02:41:bc:3f:57:ef:ab:f2:8e:be:
e9:91:5e:97:3b:56:b8:1b:26:a1:37:15:35:eb:01:
dc:57:cf:25:8d:53:8e:ff:da:a3:b7:43:62:b5:19:
af:6d:7a:d8:83:bd:5c:62:e1:26:04:2e:72:09:9f:
e3:13:9c:5b:45:57:b0:c1:c5:0c:d3:89:77:64:af:
b7:dd:43:53:9d:01:4c:cf:20:c1:f9:6d:b5:3c:a2:
0d:77:6e:e3:e0:81:df:e1:9f:1a:4f:e4:cb:9d:6b:
63:49:21:4f:b5:d5:79:aa:41:63:43:6e:a2:cd:ee:
53:40:d9:3f:97:6e:5f:5a:e6:b7:68:22:6b:e8:4d:
76:b4:94:a9:ae:9f:5e:0f:1a:b3:27:c9:8d:67:0c:
a2:0e:6b:b4:79:71:24:9b:81:51:ec:28:80:df:dd:
83:ff:2d:1a:33:df:03:61:20:33:9c:eb:3b:6b:71:
db:f9:4e:06:a4:91:8e:d2:66:bb:d0:93:0c:82:9e:
f2:8e:80:88:df:89:b9:b2:f6:32:a5:36:95:55:b2:
0f:84:5f:fd:ca:0d:9b:bb:18:0a:b9:9d:b8:61:b7:
2f:24:29:20:e9:6d:35:f7:19:bd:92:4f:6c:84:31:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4B:0B:20:DB:01:B8:4C:0D:2F:5A:CE:F2:E6:A8:88:35:0B:27:A4
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:63:60:a1:11:72:c8:38:d2:58:67:6b:1b:af:34:86:26:0b:
eb:ec:8a:c0:34:04:a9:12:90:06:eb:94:a4:9a:db:aa:ae:8d:
64:a7:dd:b0:3d:f7:97:d6:65:22:e4:d8:d0:0a:83:97:5c:d9:
4e:f5:f7:34:a4:27:6a:91:a7:49:94:64:cc:70:ed:96:fb:b2:
0a:42:b3:75:8f:05:d7:bd:f8:53:7d:6e:79:05:04:e1:3e:31:
7e:89:84:2d:21:69:2c:02:40:0d:e5:f6:dd:15:7c:77:bc:d5:
20:ad:89:2d:43:f7:94:d1:dd:5f:3c:b5:69:b8:44:ae:7b:80:
90:46:0c:3c:99:cd:2e:04:61:3d:63:16:f8:8e:b4:69:d9:be:
de:2a:ff:59:95:d5:bb:30:c0:ce:30:e8:8c:96:38:7a:51:46:
41:ce:a2:8b:ad:25:df:39:cf:50:57:a8:7d:04:4b:2c:47:27:
fc:9f:c1:a0:28:1e:fb:3a:37:93:a8:44:81:1b:5b:98:f0:a0:
fa:c9:f6:bb:2a:cc:3b:43:f8:b3:77:89:df:73:e6:ed:05:09:
ba:93:d1:28:b4:e3:ad:c3:cf:ff:3d:5a:21:b4:78:56:8f:e6:
32:56:ed:b5:a0:11:cf:51:b7:19:a9:34:b7:16:53:fa:d1:36:
22:29:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:59 2026 by rpki-client