Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: FLvrR7f6fdi4/OaYihxhDXtT6tbnSTG2RvqIILtXtnQ=
Subject key identifier: 4F:E6:A4:2C:32:46:E7:23:6B:B4:D8:C8:B2:AF:F3:7E:3C:8B:F8:B9
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01A1DDCBA7862AE4CD6ACED2C9EBB0201FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 18BB
Signing time: Sun 15 Nov 2026 06:01:13 +0000
Manifest this update: Sun 15 Nov 2026 06:01:13 +0000
Manifest next update: Mon 16 Nov 2026 06:01:13 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: dMR7/+ziCOOL8PiusTsJfKXdT2t6oAYn+gvxGnEj89Y=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:a7:86:2a:e4:cd:6a:ce:d2:c9:eb:b0:20:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Nov 15 06:01:13 2026 GMT
Not After : Nov 16 06:01:13 2026 GMT
Subject: CN=4fe6a42c3246e7236bb4d8c8b2aff37e3c8bf8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:3d:0f:6b:a7:29:a7:12:63:75:3f:88:63:
07:4f:ce:30:61:7d:e7:09:63:13:2e:72:61:1a:3c:
f6:fb:d3:e3:d7:8c:0e:0f:e0:4b:ba:a3:e3:26:1f:
2f:dd:74:ea:00:7e:3e:49:a6:ed:8d:e7:21:bc:35:
4a:cb:76:dc:dc:a9:9e:e3:f6:cb:d5:7d:6f:9d:dc:
ab:35:07:dd:07:b0:d5:a6:e5:4f:b8:57:b5:b0:e8:
fc:cc:d9:53:e0:5b:09:be:5b:1e:63:de:04:4d:ae:
88:36:a4:66:b6:88:b3:7f:a4:40:18:8b:a3:c2:a6:
9c:5b:e9:10:78:d3:05:c4:2a:b5:f6:3c:63:46:79:
1a:a0:2d:44:31:f6:ca:a3:39:d6:0f:0e:89:e7:25:
0a:ef:ee:3d:48:ef:01:28:86:4d:0b:58:00:8e:40:
72:54:da:7d:f8:e0:c2:02:e0:d1:5a:49:7d:d8:94:
ca:7b:58:99:2d:6b:c6:9f:56:3e:7b:f8:50:da:f9:
01:15:7f:8a:81:77:7d:6a:61:4a:63:66:ea:32:8e:
26:a6:b5:84:9d:b5:cd:4b:73:ef:b6:bb:37:51:99:
53:4b:62:67:20:cf:3b:68:36:63:c4:37:c6:6e:7b:
96:38:d6:12:e3:31:17:24:b6:4b:5a:02:f6:41:0f:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E6:A4:2C:32:46:E7:23:6B:B4:D8:C8:B2:AF:F3:7E:3C:8B:F8:B9
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5f:d2:9d:b3:7c:62:bb:32:e6:b5:b0:b7:3b:05:8f:83:13:
0f:df:91:da:b0:e8:c7:29:2a:79:55:46:3d:10:3d:4d:1b:c3:
37:c1:69:0e:44:c1:f7:b9:95:a0:13:c7:12:d3:42:72:6a:03:
f3:da:a0:10:bb:b4:08:b0:91:4d:b1:48:d2:37:0e:0e:5a:64:
4c:42:92:12:97:9f:93:76:49:fb:2a:3e:65:05:a2:d6:7b:cf:
46:3b:e1:61:db:4b:4b:fa:7a:a6:63:25:7e:45:b0:80:93:59:
4d:f3:10:50:20:c3:c8:13:5f:1e:a8:c2:52:7c:d9:0f:54:41:
e5:17:eb:91:0f:53:3d:3a:86:43:3b:0a:6b:2b:46:1c:ef:d0:
6f:39:01:35:7e:44:2f:63:6b:0c:c0:55:b5:c6:d5:37:01:ae:
83:e7:3e:cb:43:3c:fd:7e:5b:2d:c7:b2:2d:66:57:61:6a:ad:
11:cc:ae:eb:93:c1:99:d2:25:8c:25:d2:cc:06:d9:90:34:89:
70:cc:d1:58:03:f2:c1:0f:24:f5:cc:ea:02:60:6a:71:37:4e:
14:9f:5e:7c:42:9f:55:2a:25:25:8f:03:1f:3a:ae:f7:55:54:
07:2f:b1:4d:6c:f8:4d:96:fe:68:df:47:8b:d1:de:f6:53:81:
85:61:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:56:44 2026 by rpki-client