Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: OlFHpfcJSQD18+zahAKiQbdO2QVMGIf0BkkPSD32WU4=
Subject key identifier: 84:1A:CE:50:4B:72:01:AD:EF:93:98:50:62:F7:87:4D:05:F2:77:57
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019D3940BBFE236B05B94D627F7278DFF097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 0915
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: EHsCL4YZAzpX2g+T/kSWGVhwBKXroL1DyyZkel/+xnE=)
2: kfnmSPKrH-6BqSjW12refMM0IqY.roa (hash: y3GnA/PSIzdl79UwPAzwe/9AX+kGDMEKsM5rTgc0El0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bb:fe:23:6b:05:b9:4d:62:7f:72:78:df:f0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=841ace504b7201adef93985062f7874d05f27757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:23:6f:9b:10:c6:cb:ce:c9:77:07:ce:f7:
f3:f1:cd:8f:8a:6b:1f:2a:7c:12:70:75:cc:18:9e:
05:43:ab:84:52:05:10:89:35:66:01:17:6b:63:e6:
de:fe:b0:be:f3:2a:de:26:c9:7f:38:74:c0:99:7c:
3a:91:09:86:51:ac:e7:92:9a:7f:42:26:8b:ef:d8:
72:bc:fa:1a:21:a4:de:f3:97:9d:3d:3f:72:21:9b:
46:7e:41:b7:6f:9b:31:44:ec:60:03:0c:5e:9a:c0:
43:22:c2:13:a0:65:94:16:1b:67:02:4e:60:e0:30:
f8:ac:eb:3f:a1:5f:27:23:0c:ad:1c:c6:51:3a:bf:
2c:a6:0f:5c:c7:17:fa:ac:8e:4d:f7:26:6d:9f:39:
2a:47:40:ca:ac:b3:15:cd:16:aa:38:fb:a6:31:99:
57:e8:a8:41:57:83:23:11:d8:c7:f7:5c:0f:c0:e3:
a2:87:a7:f7:78:37:b1:89:f7:d3:b6:b8:22:53:1d:
79:ef:61:42:02:d4:0f:65:fa:5f:cf:ac:ed:22:02:
f0:39:b3:f9:f7:2f:11:6c:2f:a0:dd:18:f7:75:64:
28:44:6a:55:71:6c:c9:f8:4e:a5:06:b0:4c:6b:a5:
dc:2c:2e:1b:cc:e2:5d:b3:5b:5c:61:1c:d8:40:1a:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:CE:50:4B:72:01:AD:EF:93:98:50:62:F7:87:4D:05:F2:77:57
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:af:40:eb:f9:b7:dc:d1:9c:36:b8:ff:87:20:01:ef:7b:9b:
68:7d:ee:d4:6a:e9:c8:80:71:c2:32:27:7d:74:18:3c:5d:66:
0b:51:98:68:d9:15:1c:95:ca:2b:4e:33:b6:3b:bd:b3:de:ac:
f1:a0:40:8e:c4:dd:c5:89:2d:c1:00:1a:c1:45:dc:0b:0e:a9:
30:24:13:c9:f3:9f:3b:70:01:6f:1f:5b:92:26:10:47:b4:63:
39:fa:fe:85:d9:bc:b3:f0:88:f0:aa:9c:7a:33:20:95:56:3a:
85:7b:d9:32:6d:6c:13:8a:7f:43:42:32:cc:27:85:2f:54:41:
05:d3:ca:0f:c7:bf:78:f4:b3:c3:db:e5:9f:06:2f:ef:14:02:
f6:0e:7b:c3:8f:70:d8:1c:f4:fe:fa:6d:98:20:d7:a6:f6:15:
3e:87:1a:27:b0:05:31:df:46:2c:fe:fb:21:47:75:e1:da:5a:
a5:ab:6e:df:43:37:d8:92:8c:a8:a2:34:30:70:32:df:08:ef:
c1:6f:8e:02:bc:48:4f:f1:ef:ba:60:a4:06:47:27:d3:d6:cf:
b3:ff:64:d5:b5:16:38:58:36:06:b6:75:0f:f8:e1:53:5d:7c:
93:b3:b2:23:40:ac:be:b3:08:c8:20:53:c2:68:26:59:ae:bf:
f0:90:ab:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QLv+I2sFuU1if3J43/CXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjZkMGUwMDcyZDBjYWIyOWJmYTg3MzdkZTJhNTNlNTE0
MTgyNzYwHhcNMjYwMzI5MTEwMDM2WhcNMjYwMzMwMTEwMDM2WjAzMTEwLwYDVQQD
Eyg4NDFhY2U1MDRiNzIwMWFkZWY5Mzk4NTA2MmY3ODc0ZDA1ZjI3NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruUjb5sQxsvOyXcHzvfz8c2Pimsf
KnwScHXMGJ4FQ6uEUgUQiTVmARdrY+be/rC+8yreJsl/OHTAmXw6kQmGUaznkpp/
QiaL79hyvPoaIaTe85edPT9yIZtGfkG3b5sxROxgAwxemsBDIsIToGWUFhtnAk5g
4DD4rOs/oV8nIwytHMZROr8spg9cxxf6rI5N9yZtnzkqR0DKrLMVzRaqOPumMZlX
6KhBV4MjEdjH91wPwOOih6f3eDexiffTtrgiUx1572FCAtQPZfpfz6ztIgLwObP5
9y8RbC+g3Rj3dWQoRGpVcWzJ+E6lBrBMa6XcLC4bzOJds1tcYRzYQBqZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQazlBLcgGt75OYUGL3h00F8ndXMB8GA1UdIwQY
MBaAFHG20OAHLQyrKb+oc33ipT5RQYJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYt
YjFmY2YzODk2OTk5LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYtYjFmY2YzODk2OTk5
LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATq9A6/m3
3NGcNrj/hyAB73ubaH3u1GrpyIBxwjInfXQYPF1mC1GYaNkVHJXKK04ztju9s96s
8aBAjsTdxYktwQAawUXcCw6pMCQTyfOfO3ABbx9bkiYQR7RjOfr+hdm8s/CI8Kqc
ejMglVY6hXvZMm1sE4p/Q0IyzCeFL1RBBdPKD8e/ePSzw9vlnwYv7xQC9g57w49w
2Bz0/vptmCDXpvYVPocaJ7AFMd9GLP77IUd14dpapatu30M32JKMqKI0MHAy3wjv
wW+OArxIT/HvumCkBkcn09bPs/9k1bUWOFg2BrZ1D/jhU118k7OyI0CsvrMIyCBT
wmgmWa6/8JCr8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:24 2026 by rpki-client