Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: GjDF1K/16ee5kZpawpGyyVQaOKkG4zqQYUNSlwZ+Ahw=
Subject key identifier: A2:E5:41:D5:DF:E3:78:40:43:0C:C1:9A:74:25:9E:31:86:C1:16:20
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 01A0C28E43F510D3330AC966D0BC4BBB330D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 075A
Signing time: Mon 21 Sep 2026 06:01:38 +0000
Manifest this update: Mon 21 Sep 2026 06:01:38 +0000
Manifest next update: Tue 22 Sep 2026 06:01:38 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: 1om5HeztIccEzuxtrBLMvBlsc6xgbuz4UwlfvDnfJio=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:43:f5:10:d3:33:0a:c9:66:d0:bc:4b:bb:33:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Sep 21 06:01:38 2026 GMT
Not After : Sep 22 06:01:38 2026 GMT
Subject: CN=a2e541d5dfe37840430cc19a74259e3186c11620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:15:bd:6c:52:37:e5:89:d1:53:bc:90:cc:
3e:4e:28:77:4b:f7:2d:22:19:88:c5:7d:18:d4:41:
d0:b7:d9:ef:7a:86:91:58:b7:7f:fe:ff:b0:e2:95:
fe:1b:aa:d8:01:f4:ed:71:9b:70:bc:dc:47:e5:dd:
34:ad:ab:9f:87:14:aa:6c:b2:a0:a4:73:be:94:8b:
68:7e:58:74:ee:c4:85:36:44:4f:6f:f7:42:1b:1e:
c0:fc:5e:34:90:d2:9f:d7:de:8f:46:32:8a:cd:d7:
e7:1a:83:97:d8:26:08:76:3b:8f:af:2b:29:03:e6:
df:d1:bf:2a:29:73:00:56:22:be:ea:93:e3:fb:a5:
2b:d1:fb:5b:18:be:79:e1:1d:88:9f:ec:18:14:ee:
70:05:86:8c:69:e9:29:82:91:6b:b6:3d:2f:fb:75:
b4:66:71:2b:89:47:f4:0f:7b:b9:f8:95:a9:be:5e:
2f:cb:46:a7:14:fc:b7:10:82:a7:c1:49:8d:02:41:
a0:07:51:eb:6b:9e:4f:66:d4:be:ee:76:3d:3f:29:
96:1f:6c:64:e1:4b:11:31:cc:52:2d:4b:4a:85:71:
be:a3:bf:e6:64:69:02:87:11:79:2d:ef:45:62:36:
44:87:38:6c:ee:7a:9f:f5:92:6b:60:bb:e0:43:63:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E5:41:D5:DF:E3:78:40:43:0C:C1:9A:74:25:9E:31:86:C1:16:20
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9a:47:f2:8c:0e:8e:38:ba:e9:bc:dc:4b:71:9a:9b:92:bc:
4a:5a:4e:e7:13:fc:3a:a1:1d:18:6d:6f:d9:a0:a4:58:93:ae:
43:bb:1c:ed:10:e4:60:03:4d:f8:a5:01:56:54:7c:cc:78:7c:
e4:bf:d1:21:6a:ca:83:5e:c0:36:24:0f:d1:ac:91:8f:a9:e4:
09:79:94:d8:0c:6a:1d:1d:e2:8f:3b:5a:08:9a:8b:58:68:53:
7f:d2:c7:23:17:10:35:9d:1a:cf:23:98:d8:11:ca:9b:87:13:
5d:cc:cd:f0:66:93:51:b4:44:95:74:65:6c:24:2e:76:e9:60:
8d:f4:31:3f:df:24:6f:8b:bf:35:6d:1c:0c:15:54:82:08:7f:
8c:2d:9e:3f:6f:31:db:b1:bf:40:aa:ef:c1:29:b0:be:cf:24:
1e:66:c9:1e:50:83:23:12:43:df:2b:b9:f4:88:33:5c:f8:e6:
d1:68:65:f2:f3:7d:76:4b:92:86:b7:61:68:e4:ef:8e:3d:e9:
7d:a2:02:68:2a:a3:18:da:a1:7c:5a:c2:2a:0f:46:c9:4d:96:
0f:c3:7e:b7:26:2c:e4:92:07:44:ec:f1:17:06:31:f1:3b:35:
d8:ef:e2:05:5f:a8:e3:65:61:ba:3d:53:b9:71:9c:af:2f:98:
07:60:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:56 2026 by rpki-client