Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: cH9pluYu0pVjPESBZ+b5wTAwGz5KF1+OCCztjzHt8Ug=
Subject key identifier: B9:FA:AE:B8:6B:93:0A:67:37:E2:29:17:80:BD:25:B2:76:55:35:BF
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01A0C5C50A5671A2AD0BCC9FC7B1DA96BC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 182A
Signing time: Mon 21 Sep 2026 21:00:19 +0000
Manifest this update: Mon 21 Sep 2026 21:00:19 +0000
Manifest next update: Tue 22 Sep 2026 21:00:19 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: YR16VOVT1/Wa0558N6zbQgB3KgAmkRc/Td9dmudkOWg=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:0a:56:71:a2:ad:0b:cc:9f:c7:b1:da:96:bc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Sep 21 21:00:19 2026 GMT
Not After : Sep 22 21:00:19 2026 GMT
Subject: CN=b9faaeb86b930a6737e2291780bd25b2765535bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:b9:6d:96:6b:f5:be:26:97:c3:b0:92:a6:
0b:a1:e4:ef:c6:c9:33:f8:7f:d5:c4:62:8a:98:39:
de:b4:58:af:88:8f:12:2f:c2:55:f0:2c:33:6d:b9:
d7:6e:63:43:70:7a:cd:9e:32:75:68:d7:ba:28:b9:
05:1b:d2:33:20:b9:27:b2:75:b9:b6:35:43:fa:27:
ee:b7:07:20:24:7f:77:f5:61:11:ee:bf:05:9d:53:
6b:0f:32:dd:7e:ac:82:20:42:ae:9f:71:ee:54:c6:
26:c8:45:93:f6:15:84:ad:00:3f:0f:64:81:f7:b2:
8b:ec:38:4f:a3:be:93:50:ef:16:86:18:91:03:26:
f8:25:4a:a4:e3:a5:e1:47:d8:bd:13:55:9a:b5:79:
d9:8d:9f:24:8e:2f:78:62:41:11:70:7b:7e:11:1f:
6e:53:cd:b1:f3:e8:8c:70:15:a7:09:2a:59:c5:e0:
a6:8e:f1:82:20:47:b1:f7:bb:7c:ed:23:a2:1b:d6:
63:c0:12:08:ad:d1:34:86:62:1c:d0:cf:de:01:79:
1f:38:0c:71:d7:cd:13:6e:df:88:3f:14:56:ef:ff:
39:45:1c:96:48:f0:d3:25:06:76:c2:00:88:fb:ce:
d6:b1:d2:bd:26:7e:ea:27:0b:d0:03:41:c0:64:55:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:AE:B8:6B:93:0A:67:37:E2:29:17:80:BD:25:B2:76:55:35:BF
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:63:29:b1:55:bc:b5:46:c4:33:05:4e:ed:ad:a3:43:b4:33:
ed:93:0d:ac:2f:ba:a8:f8:ab:24:1e:73:45:74:13:a5:c5:7e:
c9:59:ec:5a:27:44:8f:a4:e9:15:f4:6e:d4:e0:82:82:27:19:
33:e7:49:4c:26:12:bb:16:0f:8f:0c:0c:e8:09:1e:1e:8c:d5:
63:2a:e1:31:aa:45:76:c2:4c:74:6c:52:9f:5b:5d:e1:f2:91:
db:be:38:65:af:42:85:c7:99:cb:de:cb:c5:9d:13:4c:5a:22:
db:b6:e3:72:48:99:7c:ae:fe:fa:c8:6d:c8:95:ea:3a:28:d5:
ca:cb:1e:d9:7e:6d:38:fd:87:26:c0:bb:b0:49:b7:fe:cb:6d:
7a:2e:d1:a4:85:13:0e:36:8a:55:01:ad:56:e6:90:cb:56:90:
c5:ec:30:e5:7a:54:39:1a:32:d4:7f:5b:e4:63:d1:f8:f8:18:
37:bc:a4:8c:fd:8d:e4:fd:f4:9f:40:cf:db:42:fe:13:3f:19:
9a:b0:a7:86:ee:aa:cc:5b:00:dd:01:6e:53:cf:57:d2:52:07:
5d:64:01:d5:2f:29:c4:e5:85:04:f3:16:e0:3b:d8:02:fa:24:
0d:b8:ca:85:8a:94:d2:f2:44:f5:5b:43:40:67:3f:2f:f2:5c:
a1:63:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:04:05 2026 by rpki-client