Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
File: CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft (raw, json)
Hash identifier: mBpnQFOkYJIXbFaTl57qhvAFVV/wPl6i+GRRGE+o1sc=
Subject key identifier: AB:5F:16:9D:C5:77:73:25:D2:BD:59:5E:F7:53:7A:24:FC:95:51:76
Authority key identifier: 08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
Certificate issuer: /CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Certificate serial: 019FAC3F5547BDB2ECCCB94340C8AE0056C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
Manifest number: 96
Signing time: Wed 29 Jul 2026 05:00:59 +0000
Manifest this update: Wed 29 Jul 2026 05:00:59 +0000
Manifest next update: Thu 30 Jul 2026 05:00:59 +0000
Files and hashes: 1: CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl (hash: 8nIwUpSSl+x6dVRDrcJptyTTPoABPvDi1jWoCqMwX48=)
2: hR2Y21D7bGLkXBKfLZ5CaTvZjkk.roa (hash: YlH5pSNmOHP/rxbn9aW9AqtUI/I4F8K3HIAacFaEpNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:55:47:bd:b2:ec:cc:b9:43:40:c8:ae:00:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Validity
Not Before: Jul 29 05:00:59 2026 GMT
Not After : Jul 30 05:00:59 2026 GMT
Subject: CN=ab5f169dc5777325d2bd595ef7537a24fc955176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:60:c4:52:cd:96:ce:d0:21:8e:be:0f:f1:
65:34:22:e9:21:1d:30:7e:92:a0:11:d6:c7:51:d3:
79:4e:b5:01:2f:6f:8c:ca:8a:cf:eb:e9:63:4f:99:
4a:7b:25:48:ef:3f:0e:ba:33:d0:b1:98:ab:c5:18:
56:d0:0b:71:ce:35:4f:0d:2e:1c:9e:04:98:76:82:
d3:88:93:60:11:e0:ee:7b:b7:7a:b4:16:4c:3a:32:
fb:1f:eb:46:5c:a6:6e:ce:bd:82:eb:aa:ef:9a:16:
54:fb:68:4f:74:56:94:07:a5:dc:02:18:c3:dc:2c:
fe:e7:02:fc:ed:1c:4e:3f:2c:0e:1b:41:d7:36:00:
2b:e4:c4:67:e3:ee:05:c6:a5:dc:66:53:47:61:1c:
3f:0a:0f:38:1d:d3:8a:79:c0:b3:6e:3f:4f:6d:19:
0c:fa:4e:c1:b3:ad:99:77:02:ce:d4:58:74:27:7f:
e1:8e:b8:83:2b:6f:76:63:00:05:7e:de:51:de:c3:
7b:54:6a:3d:b5:f0:c8:66:9e:74:0b:aa:74:76:2d:
17:9d:99:11:c5:fd:4d:10:17:e0:9c:40:75:0e:f6:
3d:e7:e6:bc:87:14:0e:a8:25:84:d1:1c:e7:f0:ae:
41:6b:49:b3:e7:24:53:f9:5c:51:1f:1c:aa:55:fb:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:16:9D:C5:77:73:25:D2:BD:59:5E:F7:53:7A:24:FC:95:51:76
X509v3 Authority Key Identifier:
keyid:08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1a:15:eb:5d:89:d9:7e:dc:dc:5f:75:22:ac:b0:1a:26:d2:
a2:5f:46:f3:55:e8:ce:54:f8:6f:2c:9d:61:ae:32:aa:0d:cf:
84:5c:fc:16:85:8f:c3:76:95:01:c7:d7:50:40:4a:76:76:cd:
ea:30:8f:8c:eb:ac:92:52:7c:d1:a9:13:8a:fd:4a:8d:41:ae:
cf:17:2f:af:4c:09:5c:69:ea:94:f0:c5:cf:d8:47:e8:3f:af:
80:04:7d:12:5a:34:cc:3f:61:ec:41:5b:af:dd:67:29:22:6a:
ab:21:8c:e8:7b:51:53:d7:7d:f9:bd:52:77:85:2b:5e:19:04:
96:f4:b4:f5:51:cf:89:74:13:82:94:36:5f:e8:5f:05:f2:9b:
7c:53:36:d6:32:47:07:60:56:82:ff:c9:6c:cc:06:3e:af:bc:
16:65:82:b2:aa:b2:09:b4:8e:40:99:00:dc:8c:f8:45:a4:77:
33:12:2a:dd:7a:ae:a8:72:41:26:ab:3b:d6:a2:0a:46:89:20:
e9:7e:cc:7c:90:96:a8:dd:38:a1:57:27:cb:b4:db:ab:76:f0:
2b:ca:97:02:f0:82:f3:3b:33:9c:76:b5:c5:b4:35:59:bb:39:
0b:5c:b2:c5:fc:f2:44:91:23:ed:7d:86:c4:12:10:75:17:15:
09:a1:90:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sP1VHvbLszLlDQMiuAFbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWUwYzU0NDI1YmYxODA5YjZjZDljYTkwMzM1NWI2ZjYw
MzcwY2MwHhcNMjYwNzI5MDUwMDU5WhcNMjYwNzMwMDUwMDU5WjAzMTEwLwYDVQQD
EyhhYjVmMTY5ZGM1Nzc3MzI1ZDJiZDU5NWVmNzUzN2EyNGZjOTU1MTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniRgxFLNls7QIY6+D/FlNCLpIR0w
fpKgEdbHUdN5TrUBL2+MyorP6+ljT5lKeyVI7z8OujPQsZirxRhW0AtxzjVPDS4c
ngSYdoLTiJNgEeDue7d6tBZMOjL7H+tGXKZuzr2C66rvmhZU+2hPdFaUB6XcAhjD
3Cz+5wL87RxOPywOG0HXNgAr5MRn4+4FxqXcZlNHYRw/Cg84HdOKecCzbj9PbRkM
+k7Bs62ZdwLO1Fh0J3/hjriDK292YwAFft5R3sN7VGo9tfDIZp50C6p0di0XnZkR
xf1NEBfgnEB1DvY95+a8hxQOqCWE0Rzn8K5Ba0mz5yRT+VxRHxyqVfvDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtfFp3Fd3Ml0r1ZXvdTeiT8lVF2MB8GA1UdIwQY
MBaAFAgeDFRCW/GAm2zZypAzVbb2A3DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0I0TVZFSmI4WUNiYk5uS2tETlZ0dllEY013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOWMzNmQtZTUyNi00MjhjLTllZDct
M2ExNzc1NGM4YmMwLzEvQ0I0TVZFSmI4WUNiYk5uS2tETlZ0dllEY013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOWMzNmQtZTUyNi00MjhjLTllZDctM2ExNzc1NGM4YmMw
LzEvQ0I0TVZFSmI4WUNiYk5uS2tETlZ0dllEY013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRoV612J
2X7c3F91IqywGibSol9G81XozlT4byydYa4yqg3PhFz8FoWPw3aVAcfXUEBKdnbN
6jCPjOusklJ80akTiv1KjUGuzxcvr0wJXGnqlPDFz9hH6D+vgAR9Elo0zD9h7EFb
r91nKSJqqyGM6HtRU9d9+b1Sd4UrXhkElvS09VHPiXQTgpQ2X+hfBfKbfFM21jJH
B2BWgv/JbMwGPq+8FmWCsqqyCbSOQJkA3Iz4RaR3MxIq3XquqHJBJqs71qIKRokg
6X7MfJCWqN04oVcny7Tbq3bwK8qXAvCC8zsznHa1xbQ1Wbs5C1yyxfzyRJEj7X2G
xBIQdRcVCaGQzQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:44 2026 by rpki-client