Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: zb4lqMQyWg9VkifQss53XhKGsQhjAxb84lUmZpQ2oug=
Subject key identifier: D6:6B:A8:D7:8A:A5:E1:70:65:52:58:21:1C:F6:33:1D:44:4D:92:3A
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019DA4F89A50AF5013AB284A72972E05E430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 05BD
Signing time: Sun 19 Apr 2026 09:00:48 +0000
Manifest this update: Sun 19 Apr 2026 09:00:48 +0000
Manifest next update: Mon 20 Apr 2026 09:00:48 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: HzwjJJgItL9nw6F54z78yyMEWBSLzzqcDRsRf5PgttA=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:9a:50:af:50:13:ab:28:4a:72:97:2e:05:e4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Apr 19 09:00:48 2026 GMT
Not After : Apr 20 09:00:48 2026 GMT
Subject: CN=d66ba8d78aa5e170655258211cf6331d444d923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:c7:0d:73:b9:1d:00:1a:36:03:35:7c:9f:
b5:d3:b4:0e:1b:3d:0f:ae:24:b5:dd:5c:c1:4a:d7:
a8:12:8f:90:4c:fc:6a:25:fb:bd:ad:71:88:da:2a:
6b:70:11:ab:a7:9a:6d:e2:84:c1:ce:1a:8f:94:9f:
84:ae:e6:01:de:d9:5a:25:f2:3e:e5:e8:56:05:b3:
a2:9b:d9:c1:45:80:fe:1b:81:41:f0:af:d1:b3:f3:
3a:2f:fc:7f:04:df:b6:78:e7:7e:b9:71:bc:3a:a6:
4b:6f:b1:5b:a2:6d:de:ea:f3:7e:fb:ed:38:1c:90:
9d:55:74:5b:e9:09:0c:af:5f:f4:77:11:4e:50:0d:
7f:6c:ef:dd:2b:99:7b:4d:8a:46:80:40:48:88:e3:
56:e4:a6:5e:34:6e:97:f2:6d:b5:54:a5:c4:b4:f1:
dd:45:08:aa:1b:c9:15:79:4c:cf:31:89:25:90:f3:
d1:0e:0f:d3:a5:bd:a5:32:6c:1e:dc:4d:be:86:8f:
09:a5:6d:c7:47:71:19:45:8c:02:7f:cb:1e:3e:cd:
31:2c:32:bb:b8:fb:a8:06:e8:5d:b0:50:f3:74:4f:
23:c5:d8:86:bf:91:46:9a:55:31:54:9f:14:78:d5:
bb:0b:3e:38:3d:70:5a:ac:10:74:ea:76:81:64:e2:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:A8:D7:8A:A5:E1:70:65:52:58:21:1C:F6:33:1D:44:4D:92:3A
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:22:29:b4:83:d0:66:ad:78:2e:91:62:3c:2a:d7:e7:12:2f:
76:6b:d5:5f:76:5c:5b:54:b6:72:f1:99:26:89:80:fd:33:04:
ca:82:48:9f:f1:e7:41:63:b1:d6:53:b6:18:7e:59:f4:1e:d9:
ee:65:2f:a8:6d:86:97:a5:ab:b2:b7:a0:94:19:23:82:fd:46:
37:0d:bb:6c:6b:72:fd:94:75:a9:8b:c7:8c:81:f6:89:71:1f:
e5:b5:b0:66:d4:3a:e4:8c:af:87:5d:41:7a:7a:23:33:dd:e6:
60:9f:75:d0:b9:bf:d1:ea:d5:93:9c:07:ae:43:2a:89:cf:ba:
25:be:95:b8:f0:ae:21:c3:1a:30:e3:06:fa:e8:4f:bb:9b:81:
c5:56:4c:9a:90:12:dc:8a:29:d3:23:96:df:db:02:74:58:13:
70:5a:ae:4e:a7:2e:8c:d4:ad:3e:79:d9:ba:f0:34:55:18:6f:
14:7e:5e:f0:9c:da:2c:45:ca:cc:09:1e:af:1b:99:db:00:70:
28:c2:e8:f0:a3:9c:72:5c:24:97:c7:38:22:ab:8c:fe:ee:cb:
da:85:b6:44:cd:9d:56:f1:9d:7f:e1:18:a0:04:5b:d9:73:a6:
b7:8e:14:18:84:83:f2:a6:58:d7:e4:90:d5:d0:82:a6:55:ad:
1d:71:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:53:08 2026 by rpki-client