Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: foEL6aVFUW73WFBzTlGjzcSG4TN4kpyFDN2V/Mpr3Rw=
Subject key identifier: 2F:CE:DD:B2:8E:4A:C4:E7:AA:D9:6E:0E:C1:3C:43:33:3F:81:25:7F
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019F189E4D1D0967E6874EE4CBF29E239D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 13:00:55 +0000
Manifest this update: Tue 30 Jun 2026 13:00:55 +0000
Manifest next update: Wed 01 Jul 2026 13:00:55 +0000
Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: GXTlXiXiRIQDKLDBY9PVCij2okb4IVFyWbUAlo7DVMw=)
2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:4d:1d:09:67:e6:87:4e:e4:cb:f2:9e:23:9d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Jun 30 13:00:55 2026 GMT
Not After : Jul 1 13:00:55 2026 GMT
Subject: CN=2fceddb28e4ac4e7aad96e0ec13c43333f81257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:22:c5:fd:3f:9a:56:98:08:9a:32:12:d5:
5b:78:42:90:1d:20:60:5b:39:eb:02:e7:ce:d9:0a:
2f:6c:4e:bf:d8:13:03:0a:8c:c3:05:87:90:4a:37:
b1:eb:11:3b:3c:3f:13:31:40:64:9e:1e:45:c3:d0:
cc:c3:76:33:00:7f:23:e9:00:2c:46:31:56:ea:2f:
3d:83:f5:f9:c8:c5:bd:ac:c7:82:39:c5:ca:12:2a:
cb:dc:16:37:67:d0:fe:71:c3:03:d9:26:cd:da:cd:
e7:d7:ad:de:f9:16:9b:56:ad:db:e6:62:d0:06:bc:
24:eb:90:bd:14:f8:ba:ce:4d:c4:f3:53:90:ac:dc:
bb:65:28:ac:80:ee:90:08:21:65:33:df:e2:59:f7:
61:df:d2:46:bf:5a:e1:37:04:5c:7c:63:1e:de:de:
19:87:bb:ea:11:8d:13:f3:b3:a5:33:f8:0b:4e:34:
59:0b:fb:72:a3:7e:b6:a2:61:a3:f1:56:81:4f:93:
85:14:15:c6:da:01:53:4f:fc:e9:14:f7:3d:ec:83:
63:b9:5b:c4:81:d7:54:a9:82:b3:90:1d:3f:be:e6:
9b:38:b4:d9:4e:6a:06:f4:04:a0:a6:8c:9b:19:25:
14:66:f7:3a:3d:52:f3:04:fb:f7:25:d7:44:67:06:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:DD:B2:8E:4A:C4:E7:AA:D9:6E:0E:C1:3C:43:33:3F:81:25:7F
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e3:15:57:5d:86:2f:cf:92:8e:b5:bf:d5:b6:fc:e6:3c:be:
c5:7b:19:99:bb:04:05:aa:51:85:98:bf:76:55:9a:08:f9:2d:
0e:24:cc:0c:0a:1c:99:fe:41:da:cb:f4:d0:b3:14:f9:1e:7a:
bb:61:f4:59:b0:c4:5a:22:8d:34:3a:4c:06:d4:19:77:60:76:
ce:ed:53:60:4f:7b:b2:0c:8b:5b:9d:6b:52:32:3a:75:02:28:
a0:1f:8b:aa:37:ad:0d:36:67:77:e1:c2:bf:f6:2d:48:53:33:
8a:89:24:e9:42:ad:c8:09:8d:3a:70:38:7b:ea:06:fd:e5:ac:
07:58:4c:51:e1:4b:4b:f7:58:c0:82:5d:06:70:d3:6d:a4:22:
6a:cb:b2:ab:83:9c:54:dd:ac:f5:40:f8:f1:5e:74:de:4b:87:
70:e4:83:d2:01:bd:36:d1:a4:77:76:f0:a6:df:26:ba:b1:5d:
35:d3:72:b0:ff:d4:13:87:c5:ae:ac:8e:1b:08:25:4d:a1:97:
ef:40:99:9d:76:fa:26:2c:00:1b:9e:15:dd:fb:cf:7e:13:4c:
91:97:4d:78:89:9a:04:06:45:3c:e9:37:a0:2c:b4:f5:49:59:
6c:1f:03:31:99:49:c3:98:d4:45:2d:e2:9a:98:f3:42:8b:37:
b8:e9:23:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:42 2026 by rpki-client