Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: 13dL3aeWW4E3N5DchVYSX+vmmxEMdKJ+6YLQ4kjZWzQ=
Subject key identifier: 1F:91:7C:1C:E5:6C:CF:8F:36:3D:15:3A:74:66:12:7F:5E:25:60:19
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019FA97568D70B2EA6638F5CE0111A465808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 16:01:11 +0000
Manifest this update: Tue 28 Jul 2026 16:01:11 +0000
Manifest next update: Wed 29 Jul 2026 16:01:11 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: b1Vqx3e0w306lsVQQImydZYRlNgLzSP0dIgDNkuFqvY=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:68:d7:0b:2e:a6:63:8f:5c:e0:11:1a:46:58:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Jul 28 16:01:11 2026 GMT
Not After : Jul 29 16:01:11 2026 GMT
Subject: CN=1f917c1ce56ccf8f363d153a7466127f5e256019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:ad:dc:05:2a:64:6e:f5:79:ca:a0:94:80:
69:c5:b3:ed:cd:66:d5:cd:82:56:b0:bb:f4:82:ef:
87:39:d3:95:fe:2c:3d:c9:d0:8b:e8:b5:06:92:a7:
99:e5:e9:df:66:74:d1:97:9a:98:4e:9c:dd:23:5c:
6d:f5:0f:6a:a8:f9:75:a2:ff:eb:d1:48:fe:d7:fa:
07:75:52:66:35:03:3b:3a:f5:86:9c:f9:1d:7f:f2:
ca:e7:33:c9:21:aa:08:fe:a9:a5:bd:11:2f:be:84:
5c:6e:2e:03:7d:d7:05:c6:70:5f:5b:22:6a:1b:cd:
f7:a8:98:7c:84:16:fe:9b:c4:24:3a:6b:51:c4:8a:
22:ce:5b:4d:02:96:eb:e0:ba:87:30:51:06:b0:8e:
75:3f:85:fa:10:b6:22:bc:43:db:fb:7a:bf:45:50:
d8:d2:d2:90:01:b2:bc:c6:5d:4b:f8:0a:0c:55:84:
58:f8:a6:ef:65:cd:a9:4b:33:cd:b5:d3:b1:77:78:
17:fa:bb:a7:e4:1a:0b:f0:64:71:70:a3:1f:f0:e8:
4d:4d:08:44:2a:3f:67:65:f3:89:06:b2:ce:93:68:
69:48:e9:3c:65:47:43:0f:7c:25:bb:b6:c5:74:cc:
42:dd:16:90:9f:07:12:4b:0f:e6:e1:6f:94:ce:42:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:91:7C:1C:E5:6C:CF:8F:36:3D:15:3A:74:66:12:7F:5E:25:60:19
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:89:4f:cc:3f:41:eb:cb:00:45:1b:96:f5:f3:e9:d3:d5:24:
6d:c6:2f:de:bf:5e:32:6b:d5:38:c1:c6:69:ff:f2:8a:e1:17:
c2:8c:6e:72:82:95:60:35:74:9c:be:37:78:6e:5b:3e:f1:32:
ef:44:7f:b2:54:70:64:c4:30:e0:32:6a:54:8e:bd:b7:3f:31:
34:62:8f:ff:c8:2e:a2:66:48:b9:74:ba:89:70:73:fb:d5:61:
0f:80:96:0b:90:bf:da:a8:7d:f8:71:29:20:b4:0c:fd:24:ff:
73:d1:e0:b0:90:62:79:b4:ae:06:d7:fa:8e:d5:96:1e:77:9b:
f2:8d:33:1b:8f:5a:5c:9c:0d:d8:20:50:e0:a0:05:38:52:b5:
de:36:98:70:76:c7:a4:44:88:12:39:d1:e2:dc:70:9a:80:ca:
16:7f:d9:6e:2c:a5:01:90:fe:4b:73:98:39:d4:b2:2d:76:6f:
57:f7:ab:70:76:8b:c6:3f:bc:7a:f7:dc:0c:44:d2:27:a5:ca:
ef:74:5d:71:4c:93:39:f0:e3:7a:f3:63:44:f5:0d:ed:aa:b7:
24:4b:ea:cb:d8:a0:97:a9:26:28:ef:5a:a6:75:a3:82:ff:27:
d6:63:2f:3a:ef:81:cd:03:2e:28:b9:03:aa:87:6d:3c:0c:25:
73:31:b0:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdWjXCy6mY49c4BEaRlgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjYwNzI4MTYwMTExWhcNMjYwNzI5MTYwMTExWjAzMTEwLwYDVQQD
EygxZjkxN2MxY2U1NmNjZjhmMzYzZDE1M2E3NDY2MTI3ZjVlMjU2MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwmt3AUqZG71ecqglIBpxbPtzWbV
zYJWsLv0gu+HOdOV/iw9ydCL6LUGkqeZ5enfZnTRl5qYTpzdI1xt9Q9qqPl1ov/r
0Uj+1/oHdVJmNQM7OvWGnPkdf/LK5zPJIaoI/qmlvREvvoRcbi4DfdcFxnBfWyJq
G833qJh8hBb+m8QkOmtRxIoizltNApbr4LqHMFEGsI51P4X6ELYivEPb+3q/RVDY
0tKQAbK8xl1L+AoMVYRY+KbvZc2pSzPNtdOxd3gX+run5BoL8GRxcKMf8OhNTQhE
Kj9nZfOJBrLOk2hpSOk8ZUdDD3wlu7bFdMxC3RaQnwcSSw/m4W+UzkLujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+RfBzlbM+PNj0VOnRmEn9eJWAZMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4lPzD9B
68sARRuW9fPp09UkbcYv3r9eMmvVOMHGaf/yiuEXwoxucoKVYDV0nL43eG5bPvEy
70R/slRwZMQw4DJqVI69tz8xNGKP/8guomZIuXS6iXBz+9VhD4CWC5C/2qh9+HEp
ILQM/ST/c9HgsJBiebSuBtf6jtWWHneb8o0zG49aXJwN2CBQ4KAFOFK13jaYcHbH
pESIEjnR4txwmoDKFn/ZbiylAZD+S3OYOdSyLXZvV/ercHaLxj+8evfcDETSJ6XK
73RdcUyTOfDjevNjRPUN7aq3JEvqy9igl6kmKO9apnWjgv8n1mMvOu+BzQMuKLkD
qodtPAwlczGwyg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:46 2026 by rpki-client