Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: NuhD8Xyg0ePakmeqU4y/bdj9geatxBPVRJXqodW0fj0=
Subject key identifier: AC:0C:D2:10:17:84:F9:13:9B:16:FE:49:80:64:85:B4:99:52:8D:F6
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019D99D0CD5139F44F32DD15411BB0583840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 0947
Signing time: Fri 17 Apr 2026 05:01:31 +0000
Manifest this update: Fri 17 Apr 2026 05:01:31 +0000
Manifest next update: Sat 18 Apr 2026 05:01:31 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: /WnISaye5PtfB1kuqGpCUaR6hzwRXwwy+ZaRu/bWhx4=)
2: kfnmSPKrH-6BqSjW12refMM0IqY.roa (hash: y3GnA/PSIzdl79UwPAzwe/9AX+kGDMEKsM5rTgc0El0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:cd:51:39:f4:4f:32:dd:15:41:1b:b0:58:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Apr 17 05:01:31 2026 GMT
Not After : Apr 18 05:01:31 2026 GMT
Subject: CN=ac0cd2101784f9139b16fe49806485b499528df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:d9:da:c4:d6:0d:b9:b3:ed:cd:21:13:c3:
7d:ea:36:ff:3e:37:94:ec:e9:c4:3e:65:65:a9:d4:
66:fc:21:57:da:d7:93:57:0e:7b:c3:b8:83:d9:65:
61:ce:ff:4a:2d:be:b8:cf:65:e5:87:3c:ea:07:c8:
b2:67:75:85:57:ce:88:07:9a:33:81:4a:a0:51:19:
cc:8c:7a:62:66:5d:83:fe:c4:e9:35:0b:19:a1:8f:
d0:a9:10:ab:87:24:fa:26:70:3d:22:61:83:e4:0f:
52:79:85:6e:d3:8f:46:34:36:53:7f:1a:75:97:e5:
65:16:4e:68:b0:63:38:27:b6:7f:45:f3:f5:2a:f6:
88:de:ee:d5:fa:2e:48:1c:cb:7b:90:dd:85:fe:de:
eb:50:2e:40:8f:4c:c3:fd:2b:8e:75:8e:5b:d0:60:
54:e1:c3:96:2d:b9:77:d6:e0:ba:85:a3:2b:cd:a9:
ff:4f:f0:a2:ef:e2:d9:1e:d7:83:46:4e:06:c3:4e:
dc:26:a2:1e:af:d4:2f:d5:2b:df:0f:f9:16:e9:60:
a7:8a:3f:bb:68:e9:7a:aa:62:3b:26:97:ac:22:d1:
1d:61:fb:f4:6f:a0:88:6c:98:5b:db:0d:a4:18:d0:
c5:bd:f5:41:d1:a5:a5:de:44:57:7e:30:6f:f9:fb:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:D2:10:17:84:F9:13:9B:16:FE:49:80:64:85:B4:99:52:8D:F6
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1a:0c:02:c4:42:b3:e0:86:27:80:0d:e9:bf:ed:c0:e8:e0:
45:a7:0b:5e:6c:d1:ae:64:46:38:88:8e:d1:b9:21:47:29:ca:
f5:b0:9a:7b:13:a0:e9:17:a1:23:eb:14:4b:f7:35:1c:fd:e0:
60:e1:6c:a0:36:01:1a:3d:44:16:2a:62:c2:12:e4:53:d4:3d:
f2:a2:3f:24:8e:99:ae:a7:d6:62:e8:8f:55:9b:9a:b4:2f:0f:
6a:37:d5:fb:7b:44:1c:6a:6a:65:f9:e6:f7:e3:f6:0c:c9:3d:
c4:a6:7f:a5:9f:5b:3b:82:d0:06:1b:2a:02:94:ef:ec:58:d5:
22:79:78:1c:68:55:c8:6c:fd:4b:e0:97:95:8f:65:39:bf:93:
84:dc:46:7d:6e:4b:7a:65:64:e0:de:ab:5b:7c:eb:41:fb:bd:
0d:95:42:ad:90:a7:f0:81:14:cf:ae:d2:89:46:f5:13:40:43:
71:c1:9d:db:6e:06:4a:a8:64:59:a2:e9:8f:de:34:4d:b1:58:
bf:85:2b:09:67:77:4c:02:bd:0b:53:c3:6d:f1:3c:5d:f6:ed:
f8:32:6c:0c:2b:09:4c:07:c9:ac:ab:8f:e7:ee:86:37:94:25:
06:a3:a3:9b:38:45:84:19:f4:74:8b:0e:7a:ab:dc:50:26:7f:
31:e7:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:53 2026 by rpki-client