Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: oy5p7kifjJLVMOIMMew5aGRrVgWsIfYK6RD6eMO9xqk=
Subject key identifier: 35:8F:62:E3:B4:70:21:CE:F4:19:09:C9:B4:4D:4C:86:A2:67:19:DA
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019CAC4724C395528E9F7F640F039428E741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 08CC
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: L773B0ymzK4lztWLgQTGZMXB4zGVehP/8neq+JmgGb0=)
2: kfnmSPKrH-6BqSjW12refMM0IqY.roa (hash: y3GnA/PSIzdl79UwPAzwe/9AX+kGDMEKsM5rTgc0El0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:24:c3:95:52:8e:9f:7f:64:0f:03:94:28:e7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=358f62e3b47021cef41909c9b44d4c86a26719da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:f3:28:db:c1:4a:9d:e1:41:7a:0f:02:a2:
b1:29:9c:30:85:32:16:05:6f:0a:4b:e3:5f:0b:78:
ae:d4:cc:95:02:7b:1e:fe:69:03:92:ec:4c:63:42:
04:10:f9:4e:62:75:09:04:e5:b8:f2:3d:23:a4:5a:
42:3f:4c:6f:84:b8:32:10:93:f6:6b:53:ce:34:ed:
b3:18:e8:a7:32:d3:14:8a:dd:21:e1:9d:bb:46:3f:
69:fa:a8:72:4c:cc:eb:7d:cf:31:f8:dd:d3:4a:12:
ff:f4:ce:dd:f2:29:14:30:39:22:71:7a:76:ae:95:
eb:d4:46:7c:7d:fd:fb:df:94:86:99:cb:0c:ba:ac:
c3:db:ad:d9:ce:ad:8d:00:a4:c0:ad:2e:f5:12:89:
ed:18:12:28:16:8d:73:50:92:f5:2e:a5:17:d6:2a:
05:66:bc:77:eb:01:05:33:58:79:f9:3d:b0:69:8b:
b4:d1:0b:1a:66:3c:08:ae:5a:86:69:12:73:08:8b:
d0:89:da:4f:1f:47:42:0f:04:bb:0a:d3:4a:0b:53:
d6:aa:0e:d7:3b:bc:61:01:23:14:09:30:df:f2:3f:
de:79:09:cc:61:5a:05:b0:14:7a:31:63:e4:72:e4:
11:79:51:ad:a8:02:7e:63:bb:7a:89:fd:f1:20:2a:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:62:E3:B4:70:21:CE:F4:19:09:C9:B4:4D:4C:86:A2:67:19:DA
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:ba:55:68:8e:57:4c:2b:6f:85:fc:51:e5:1a:e5:45:a1:
ed:df:b6:e1:39:b6:05:77:d4:7d:be:12:67:d9:6d:45:a7:5c:
96:a1:78:c1:48:71:f2:7d:cf:98:71:57:a9:a9:9a:87:29:99:
2d:8f:9e:6c:5e:9e:1d:fa:13:5a:19:9a:ea:88:db:eb:e4:68:
92:53:19:e7:7c:1e:63:96:b8:5d:ab:5d:33:d0:e0:35:59:8a:
ad:dd:e1:1f:5e:73:ed:37:b7:d3:6d:58:15:37:f3:0f:70:c1:
ae:c6:27:3f:6a:4c:50:4a:0f:c1:4b:6e:9f:eb:66:65:f2:ae:
cf:af:a4:99:c3:c8:44:37:78:bb:4b:a3:89:48:55:75:fa:53:
ff:c4:1e:e4:5a:f7:ec:4e:5f:76:a5:27:94:19:b4:56:4d:06:
20:ec:69:5f:84:fe:bd:2e:09:b9:2a:ec:cb:45:27:17:d6:29:
2d:cf:38:1c:a6:22:40:9c:c6:c1:aa:b6:8b:b7:30:23:61:f7:
bd:d2:e4:52:bd:f4:ff:55:55:9f:6e:7b:9f:76:ba:3b:00:fc:
b8:ab:3e:be:f6:25:9d:f8:80:9f:b7:72:8c:44:35:ec:25:1e:
1c:b7:52:12:b8:49:17:a7:c4:39:95:e9:2e:f5:2d:de:c5:bf:
94:6d:18:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRyTDlVKOn39kDwOUKOdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjZkMGUwMDcyZDBjYWIyOWJmYTg3MzdkZTJhNTNlNTE0
MTgyNzYwHhcNMjYwMzAyMDIwMTA5WhcNMjYwMzAzMDIwMTA5WjAzMTEwLwYDVQQD
EygzNThmNjJlM2I0NzAyMWNlZjQxOTA5YzliNDRkNGM4NmEyNjcxOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDDzKNvBSp3hQXoPAqKxKZwwhTIW
BW8KS+NfC3iu1MyVAnse/mkDkuxMY0IEEPlOYnUJBOW48j0jpFpCP0xvhLgyEJP2
a1PONO2zGOinMtMUit0h4Z27Rj9p+qhyTMzrfc8x+N3TShL/9M7d8ikUMDkicXp2
rpXr1EZ8ff3735SGmcsMuqzD263Zzq2NAKTArS71EontGBIoFo1zUJL1LqUX1ioF
Zrx36wEFM1h5+T2waYu00QsaZjwIrlqGaRJzCIvQidpPH0dCDwS7CtNKC1PWqg7X
O7xhASMUCTDf8j/eeQnMYVoFsBR6MWPkcuQReVGtqAJ+Y7t6if3xICqskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWPYuO0cCHO9BkJybRNTIaiZxnaMB8GA1UdIwQY
MBaAFHG20OAHLQyrKb+oc33ipT5RQYJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYt
YjFmY2YzODk2OTk5LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYtYjFmY2YzODk2OTk5
LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3a6VWiO
V0wrb4X8UeUa5UWh7d+24Tm2BXfUfb4SZ9ltRadclqF4wUhx8n3PmHFXqamahymZ
LY+ebF6eHfoTWhma6ojb6+RoklMZ53weY5a4XatdM9DgNVmKrd3hH15z7Te3021Y
FTfzD3DBrsYnP2pMUEoPwUtun+tmZfKuz6+kmcPIRDd4u0ujiUhVdfpT/8Qe5Fr3
7E5fdqUnlBm0Vk0GIOxpX4T+vS4JuSrsy0UnF9YpLc84HKYiQJzGwaq2i7cwI2H3
vdLkUr30/1VVn257n3a6OwD8uKs+vvYlnfiAn7dyjEQ17CUeHLdSErhJF6fEOZXp
LvUt3sW/lG0YBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:29 2026 by rpki-client