Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: yujYSMH0Kh2tEEFmo4OLGjheMuuPL3yJlwlqqZrNLME=
Subject key identifier: 77:34:E8:01:66:8E:F0:12:E5:E3:0F:ED:CB:85:D4:56:68:5F:FB:7F
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019D37BFF63367757EA4766EC5848C39AA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: ZB9prpO9SoZDLI2oj3mSgxrZwUEIbSIoG7gEyc8VusA=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f6:33:67:75:7e:a4:76:6e:c5:84:8c:39:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=7734e801668ef012e5e30fedcb85d456685ffb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:eb:63:4b:f9:2d:85:4d:8b:cc:7b:87:77:
7b:f1:23:02:2b:e0:e6:55:2d:63:12:3e:45:b1:0b:
f5:32:20:71:ca:53:f1:73:a4:af:79:93:35:7b:4c:
6c:7c:ee:25:5d:a9:d1:f2:ef:b2:77:44:fd:f5:8b:
11:b9:ea:9b:4f:c1:23:75:09:10:35:93:b8:cb:97:
26:48:78:f8:71:ee:db:66:50:d9:c2:55:5a:8e:85:
cf:fa:14:4a:b7:2a:89:36:d1:00:01:5d:a9:f3:fc:
8b:a4:c1:7e:03:3e:38:df:8c:29:56:eb:d8:89:a7:
1f:c3:0f:b9:f3:07:a9:8a:6a:d2:f0:b7:44:03:31:
05:2e:85:7f:af:48:fb:da:06:3c:4d:36:2d:a5:ef:
10:8f:1b:ca:60:cb:18:bb:48:1d:ac:b3:cc:f4:7c:
b8:c5:bf:39:dd:b6:26:a5:23:75:aa:5f:96:f1:1c:
2e:e0:d3:0d:97:d8:be:f0:6a:cf:25:b9:a9:17:5e:
6a:5a:96:1e:56:41:67:00:fe:ce:11:af:ad:70:96:
5b:c8:b1:1a:ea:ef:80:7a:0f:53:97:38:e8:6f:93:
c3:29:4f:4d:b9:b0:7a:48:ba:93:25:96:3d:14:b3:
49:b1:9c:bb:3d:c2:04:f6:28:75:68:85:06:3a:e0:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:34:E8:01:66:8E:F0:12:E5:E3:0F:ED:CB:85:D4:56:68:5F:FB:7F
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:50:62:5f:65:51:71:64:8c:55:72:c8:cb:ad:a3:9b:00:e6:
2a:b8:12:e6:3a:d3:42:19:e8:40:0b:c5:a0:ec:21:92:61:3c:
99:fa:c5:9a:c0:67:b7:d4:15:c8:24:ec:26:0a:f5:f0:9d:7c:
a0:89:79:51:14:41:e2:b6:60:b6:62:64:48:57:be:c3:fa:9a:
38:db:80:36:58:d5:9c:59:98:9f:07:d6:3d:3b:0d:f2:8d:86:
d9:fa:ea:0d:55:d0:91:3c:51:69:d8:d5:26:e5:a2:73:df:d6:
9b:3a:f7:54:c5:59:4e:de:e2:da:ff:cc:5f:4b:e9:a4:5c:73:
f6:77:05:57:89:3f:e5:31:41:eb:7c:74:94:04:b5:b2:15:e3:
a6:03:65:cd:ce:a2:51:30:4d:1c:67:f8:90:e3:4b:f0:8e:79:
f7:6c:60:2a:aa:7a:8c:7e:97:40:86:0c:a4:09:4b:83:0b:28:
08:75:a1:a9:ee:77:66:55:3f:9d:97:81:08:f7:04:05:bd:f7:
b1:b4:ea:e2:35:b7:dd:70:1e:16:5c:1d:69:59:80:00:70:90:
aa:71:f6:86:9a:9d:f8:9d:55:28:1d:72:6c:f4:56:3f:bb:a3:
5c:4e:13:5e:bd:31:c3:38:e3:fe:0c:32:af:1a:18:af:0d:d2:
f7:88:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:47 2026 by rpki-client