Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: 1Om5sKl9j7dqrcsIo9fWLg1exZcnok47BLjapOHw8O0=
Subject key identifier: 6D:48:A7:2D:C3:EE:55:2F:D8:95:28:C0:64:A6:66:78:1A:FA:76:13
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019FA9E2F48634615EC89D45B759B755140A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 1797
Signing time: Tue 28 Jul 2026 18:00:50 +0000
Manifest this update: Tue 28 Jul 2026 18:00:50 +0000
Manifest next update: Wed 29 Jul 2026 18:00:50 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: 0lPVZsErm3j8zWZZHDqqga6j2JX8yBxRHC7jStbKFPE=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:f4:86:34:61:5e:c8:9d:45:b7:59:b7:55:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jul 28 18:00:50 2026 GMT
Not After : Jul 29 18:00:50 2026 GMT
Subject: CN=6d48a72dc3ee552fd89528c064a666781afa7613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:9f:d8:68:69:b5:64:a6:17:8a:06:63:f4:
9c:71:31:9b:d2:01:39:cb:fe:0a:86:c5:be:50:f6:
d4:4f:8d:26:eb:ea:b2:0a:21:5d:41:50:89:fb:f2:
9d:d0:ec:6e:0f:25:5e:4d:43:95:81:c3:80:ab:95:
49:6c:ff:a9:2f:f3:2e:a6:68:fc:2a:8b:50:17:e9:
0f:8d:eb:c4:fe:43:43:9c:75:3e:ce:5f:ba:44:b8:
5a:3c:c3:07:c7:01:03:a7:44:c6:97:16:b7:49:86:
c9:15:ad:6b:25:c5:1b:3c:a4:28:d2:e5:2c:f8:06:
4c:a9:36:29:38:78:46:ba:4f:8e:27:86:1d:ce:f5:
34:32:cf:ed:27:4c:11:60:e6:5e:d0:b0:7d:17:e6:
58:3c:b4:67:aa:68:33:ac:64:be:33:78:62:0e:19:
2f:e1:37:e4:f4:ae:9b:32:5e:43:66:ad:7e:e7:89:
e4:68:05:00:a8:4d:2d:f5:46:38:89:48:e7:9d:e2:
c4:bd:fd:34:b1:87:d7:44:4d:30:d4:5f:f2:ca:49:
2e:91:f9:ee:bb:d2:4e:ca:94:1d:8a:69:8a:bf:2d:
d5:0b:be:c6:49:cf:d7:9f:76:7d:61:5a:7e:3b:94:
6f:cb:a7:a9:a2:6a:bf:44:57:e4:5c:34:f0:05:5b:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:A7:2D:C3:EE:55:2F:D8:95:28:C0:64:A6:66:78:1A:FA:76:13
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ca:48:a3:0d:35:e1:05:bd:76:49:3a:4f:7d:3f:e4:1b:de:
85:43:e6:50:a8:6e:d0:04:eb:8b:33:37:55:90:a4:b4:81:d3:
30:d3:4d:ea:30:07:4a:b6:d3:f8:5e:a4:9d:c9:b0:88:72:22:
76:cf:31:88:e9:48:e2:f0:88:20:02:b6:62:f4:17:e0:a1:ff:
f3:f1:72:a0:1a:40:12:ce:ae:c0:1a:76:4e:da:a2:56:5a:29:
b6:5e:d5:b9:db:94:19:56:1d:28:5a:ea:3c:09:38:00:a5:db:
49:cc:19:15:70:3c:4d:8c:e2:61:fd:6d:58:57:60:48:e6:5a:
e0:ed:05:99:0c:f8:ca:33:c4:f3:e8:d8:79:57:8f:e4:00:9b:
fe:f3:6e:01:4f:77:97:88:79:d2:7e:57:db:24:de:e3:96:8a:
9d:18:5a:7c:d8:4e:3b:73:11:8b:aa:61:2b:78:df:23:a9:5b:
09:fc:9c:ae:20:e6:f1:f9:2c:bd:d4:71:fa:71:fb:12:fc:54:
c0:95:4d:c1:be:73:d3:63:27:c7:4b:06:7f:0a:7f:5c:22:0a:
21:8b:2e:e2:dd:44:e3:64:5d:08:f2:47:34:d9:fe:12:4e:ea:
53:19:27:03:7b:40:fb:34:29:42:e5:4d:fd:ed:95:c7:a0:0b:
15:2c:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:24 2026 by rpki-client