Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: sESCURqWm8kHc5KfrczmGfD9+2ItuMga3YWQZ4TkCl0=
Subject key identifier: 4C:08:FD:66:C0:3D:22:02:5A:3C:D6:77:EB:86:63:A8:AF:31:27:F6
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019FA899202F93D4B226FC8B8BD1B94C22BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 06C8
Signing time: Tue 28 Jul 2026 12:00:35 +0000
Manifest this update: Tue 28 Jul 2026 12:00:35 +0000
Manifest next update: Wed 29 Jul 2026 12:00:35 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: rg0gJKJ5pgtXrXIlwlM14XDqDHvuHwMgZ8NYHpnaJiE=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:20:2f:93:d4:b2:26:fc:8b:8b:d1:b9:4c:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jul 28 12:00:35 2026 GMT
Not After : Jul 29 12:00:35 2026 GMT
Subject: CN=4c08fd66c03d22025a3cd677eb8663a8af3127f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:5b:14:e6:c6:f5:b9:68:2c:f0:2c:c9:f1:
24:48:2a:dc:e3:6d:ea:8e:39:18:fd:dc:62:b4:f2:
7b:04:d4:f3:b5:76:9d:70:66:f6:97:c9:41:49:7c:
29:4c:70:9b:c4:e2:54:19:6e:4a:36:ad:45:94:77:
92:9d:bf:0a:81:57:4a:3b:4d:45:73:e4:7c:32:35:
ca:18:07:31:66:b7:e2:d1:9a:b7:da:d4:b8:e1:c5:
63:f2:03:fe:cb:94:33:b5:a5:b1:ec:54:8b:d0:5c:
1d:9c:4a:aa:9f:b9:ad:5f:44:1c:cb:0c:ed:64:58:
94:aa:6b:87:ee:0a:a9:e5:88:c5:a6:10:d1:70:14:
0d:cc:63:3f:e0:ac:75:b8:ac:07:26:7b:ae:8a:47:
f4:37:73:10:08:66:95:43:17:58:b8:46:10:e5:f5:
30:ce:ce:3c:37:53:06:c3:11:1b:81:f2:cc:36:19:
ac:8b:45:00:bd:21:63:4d:e7:c2:2a:d5:f9:29:77:
bc:df:19:f9:f1:f5:d4:39:41:09:40:2c:b3:b8:ba:
91:4a:b7:65:eb:6c:38:40:77:06:4f:71:88:2a:0b:
af:fa:69:31:f4:81:3d:92:7d:d8:07:e0:ef:d8:a9:
c9:b1:1c:46:47:24:fa:1c:07:97:1a:b4:ca:7c:a4:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:FD:66:C0:3D:22:02:5A:3C:D6:77:EB:86:63:A8:AF:31:27:F6
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:ac:4b:ac:b1:56:47:b1:ec:02:42:47:08:a6:d5:d1:db:
84:b1:68:9c:a9:90:45:50:04:f0:1e:59:df:fb:8f:b5:70:02:
78:68:3e:21:8f:4d:c3:3d:fb:e1:cc:3e:72:c2:57:d2:56:a4:
ca:10:04:20:18:6e:e6:66:a4:71:64:60:8c:9a:81:d5:2a:9f:
22:eb:0c:d7:49:09:3a:13:96:d3:55:3e:69:fe:69:dd:7f:bb:
86:e9:8d:d1:23:06:db:cd:3c:58:2d:40:b7:6e:0e:25:a6:ef:
d0:6c:a8:20:7c:de:40:ad:22:73:8c:d9:53:48:c9:66:11:ee:
0b:54:16:71:77:42:42:53:28:fa:8d:af:1b:c2:df:9b:7d:4b:
47:da:1a:e0:65:79:40:34:4e:64:62:1d:cd:58:fe:72:c4:a3:
56:79:6f:5f:3c:5e:5e:9a:c6:f3:8f:a3:76:b6:52:95:0b:cd:
8a:fb:b4:80:78:6b:e7:37:62:0f:45:80:28:18:ba:b7:0f:f6:
bf:eb:1e:ea:68:e9:d7:28:c7:d2:99:b3:5a:32:20:cc:b3:b0:
2d:05:bb:19:e7:5e:e3:d8:99:8d:eb:ee:6b:b7:5b:35:c5:b8:
53:0b:57:3c:7c:87:8e:63:1a:db:3a:3b:ad:eb:17:35:c2:ee:
af:6a:6e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:26 2026 by rpki-client