Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: 3TpqujdrXgYQg78nyK7+1LmjT3lG56wW4hHKjAu0YDE=
Subject key identifier: B0:EF:88:61:97:A5:25:7C:18:F9:A3:BF:3E:DF:B3:74:1C:FB:1F:1C
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 01A14729A7FEF317BFF93A3D85B990E4BBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 00:01:14 +0000
Manifest this update: Sat 17 Oct 2026 00:01:14 +0000
Manifest next update: Sun 18 Oct 2026 00:01:14 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: ehqfqvwGBKYZKAaqESHNAWcOR84zzGdGCMRtbSjOrq8=)
2: TalsxsnLALDwzR9eYbJ5IPHvuw0.roa (hash: 5TrfT+iuoAx5Pp91gpenuYisGgHzZknoAb6QwNtFQgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:a7:fe:f3:17:bf:f9:3a:3d:85:b9:90:e4:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Oct 17 00:01:14 2026 GMT
Not After : Oct 18 00:01:14 2026 GMT
Subject: CN=b0ef886197a5257c18f9a3bf3edfb3741cfb1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:ae:8c:31:7a:97:f1:b7:54:36:31:59:25:
30:71:a6:d8:6e:37:1f:e3:73:fc:75:6d:e2:bb:01:
bf:45:1d:02:39:0f:d6:d8:4d:50:c2:39:b2:12:08:
61:f1:f8:1b:e5:ca:a7:db:a5:14:72:08:67:d0:77:
54:e7:44:09:ca:5e:47:13:58:05:fb:04:c1:85:c2:
1c:92:23:65:72:7c:38:bc:fb:c3:85:ac:dd:01:64:
7a:c8:60:55:9a:b6:74:45:d2:46:d3:5c:5a:92:df:
5a:68:7f:3f:ef:dd:ad:47:be:f5:be:88:17:f0:05:
12:54:77:b4:3e:67:30:3f:35:9c:ba:dc:84:1f:cc:
59:e2:0f:a1:65:a7:9c:a2:3e:b0:db:7c:2a:ce:11:
3b:95:3b:9f:2c:3f:32:95:b2:63:13:b2:10:71:cb:
34:d1:8b:f6:12:38:8e:22:f2:f2:6f:5e:30:0f:06:
8e:07:8c:82:5e:e4:ab:a4:24:40:c0:28:0d:9f:a7:
84:bc:22:d1:d1:b2:de:a5:87:02:fd:fd:a8:f8:26:
e6:17:84:24:7e:33:cc:5c:ae:27:99:51:1b:e7:4e:
c0:b9:d0:0d:b5:3b:06:d8:64:55:0c:f8:25:2e:9f:
66:d3:c2:17:97:c2:97:eb:33:80:64:0c:be:61:94:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:88:61:97:A5:25:7C:18:F9:A3:BF:3E:DF:B3:74:1C:FB:1F:1C
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:40:46:23:f0:2b:3f:fc:81:34:1c:16:d3:eb:d8:76:04:26:
1d:96:7d:0e:90:83:81:73:3c:cd:b5:8f:b2:61:58:e2:3c:48:
34:5e:1d:66:90:f5:ae:39:e7:df:d6:ee:35:01:2f:8c:ad:a7:
62:65:72:7c:dc:b5:91:08:01:ec:40:60:63:06:23:3e:75:b0:
5b:38:7b:0f:8c:84:7a:b8:12:15:35:74:00:06:c9:14:50:ad:
29:2b:ea:1e:ec:d5:7e:ff:32:ac:b1:30:7a:40:ae:40:29:16:
85:01:60:de:35:43:ce:1e:a7:c0:77:67:aa:29:30:0b:83:1c:
c0:3d:81:a9:6e:ca:75:8b:3e:48:3d:45:d2:e9:d4:a9:65:82:
59:19:fa:2f:80:b1:22:f7:0f:97:47:5f:e4:10:89:ab:97:8c:
5f:05:75:20:78:f5:39:96:ec:eb:8a:c2:6f:9e:f6:43:08:ce:
53:38:30:ce:30:f5:b6:b7:23:d8:9c:33:b1:73:7e:4b:30:cc:
c4:9a:0b:53:99:b0:9a:11:f2:0c:3e:2b:02:18:f6:97:7f:53:
cb:56:a7:3f:b1:1b:8c:e4:23:69:b0:b9:db:d3:06:49:5e:30:
46:67:03:b5:a6:63:db:b7:24:33:84:ea:c1:be:7e:9d:e3:ba:
9e:91:f6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHKaf+8xe/+To9hbmQ5LuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjAxMTBhZTRiODE3OTRhNTA4ODMxZmNiNWVkY2M4ZDVm
ZDJmMWIwHhcNMjYxMDE3MDAwMTE0WhcNMjYxMDE4MDAwMTE0WjAzMTEwLwYDVQQD
EyhiMGVmODg2MTk3YTUyNTdjMThmOWEzYmYzZWRmYjM3NDFjZmIxZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql6ujDF6l/G3VDYxWSUwcabYbjcf
43P8dW3iuwG/RR0COQ/W2E1QwjmyEghh8fgb5cqn26UUcghn0HdU50QJyl5HE1gF
+wTBhcIckiNlcnw4vPvDhazdAWR6yGBVmrZ0RdJG01xakt9aaH8/792tR771vogX
8AUSVHe0PmcwPzWcutyEH8xZ4g+hZaecoj6w23wqzhE7lTufLD8ylbJjE7IQccs0
0Yv2EjiOIvLyb14wDwaOB4yCXuSrpCRAwCgNn6eEvCLR0bLepYcC/f2o+CbmF4Qk
fjPMXK4nmVEb507AudANtTsG2GRVDPglLp9m08IXl8KX6zOAZAy+YZSXiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDviGGXpSV8GPmjvz7fs3Qc+x8cMB8GA1UdIwQY
MBaAFAmwEQrkuBeUpQiDH8te3MjV/S8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAt
NmQyMGY1YzE5N2Y2LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAtNmQyMGY1YzE5N2Y2
LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0BGI/Ar
P/yBNBwW0+vYdgQmHZZ9DpCDgXM8zbWPsmFY4jxINF4dZpD1rjnn39buNQEvjK2n
YmVyfNy1kQgB7EBgYwYjPnWwWzh7D4yEergSFTV0AAbJFFCtKSvqHuzVfv8yrLEw
ekCuQCkWhQFg3jVDzh6nwHdnqikwC4McwD2BqW7KdYs+SD1F0unUqWWCWRn6L4Cx
IvcPl0df5BCJq5eMXwV1IHj1OZbs64rCb572QwjOUzgwzjD1trcj2JwzsXN+SzDM
xJoLU5mwmhHyDD4rAhj2l39Ty1anP7EbjOQjabC529MGSV4wRmcDtaZj27ckM4Tq
wb5+neO6npH2QA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:50:58 2026 by rpki-client