Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: m8euO7vzZqEyGcCyD2lOv2bWS6lqJtlHtGTvXLo73k8=
Subject key identifier: FE:33:71:31:D6:55:B8:BA:E4:A7:38:FF:FB:39:F6:4B:47:2F:8F:EB
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 019D37894D693D554F2D80BD56340A0517F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 09D3
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: T-RVDwu2R5GREmXjp9oK0pO-emk.roa (hash: NLaXBrxUU7l8TdptUYXzcoGWDubvJljOT1d1MNSpjzA=)
2: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: aA419ZiYX5kX3+wUxwgtRuEMqFEkOTovzfgBE3zEV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4d:69:3d:55:4f:2d:80:bd:56:34:0a:05:17:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=fe337131d655b8bae4a738fffb39f64b472f8feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:06:f0:6c:bd:4a:0a:38:a5:c2:6b:0b:4e:
68:2d:e5:68:67:72:a1:ba:08:e5:a0:b2:bd:96:c5:
61:e2:a3:1b:53:1b:c3:b1:ae:ce:83:0d:ce:c0:d0:
b8:fb:c5:04:1c:7d:13:bf:f9:0c:3f:c4:05:49:0e:
73:7c:d1:5e:cf:ee:e1:b5:5d:cd:f5:f7:64:80:a1:
c9:db:7f:a3:4c:31:de:61:41:1e:6e:89:92:29:a1:
d4:4c:db:22:a8:87:06:04:8d:4a:2e:8f:91:f5:38:
48:aa:ab:41:c6:0c:04:81:ca:14:59:64:e1:bf:88:
82:f2:73:af:54:c1:5e:1b:de:17:35:40:5e:9f:99:
3b:29:32:97:cc:99:f2:69:3e:95:e2:21:34:24:e8:
89:da:25:6f:30:57:0a:dc:87:49:af:65:f5:8a:9e:
76:3f:3c:a1:c9:e2:e6:2e:75:b0:86:4d:dc:f2:19:
71:f3:01:57:47:a3:28:22:5a:24:61:d7:b3:ab:c8:
99:11:22:9d:85:eb:8e:54:90:12:e0:8a:78:d4:63:
33:97:0b:03:a4:ed:1b:5e:c4:cd:6b:66:1f:f5:68:
ad:69:19:6c:ec:d6:2f:82:f3:e7:a9:87:fb:28:06:
d6:ac:d1:a0:4b:6e:65:73:76:7d:76:bd:fd:f5:2a:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:71:31:D6:55:B8:BA:E4:A7:38:FF:FB:39:F6:4B:47:2F:8F:EB
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:04:aa:ea:59:3e:36:2c:ab:5f:54:2b:d2:0c:96:ef:99:49:
fa:b4:29:56:77:1b:00:f3:a7:ba:77:7d:34:ae:a1:67:d0:92:
d5:d1:40:13:62:f4:74:59:f8:94:9c:3d:9f:47:03:27:c7:43:
c1:ad:eb:6f:ca:23:68:7a:d7:80:47:cb:91:5a:df:9b:b9:cf:
8c:34:d5:58:3f:26:b0:09:54:c2:d4:c2:fa:49:d6:94:77:03:
74:47:10:3b:ef:49:23:bb:c7:a7:85:c0:97:03:80:f8:08:a9:
1f:45:cb:a1:a6:f9:48:a9:4e:27:04:8b:5d:4d:94:ec:1a:3a:
cf:2c:48:e2:b1:e1:c0:09:1b:89:03:36:c2:b7:60:f7:25:8d:
29:2c:8d:7e:ac:84:3a:af:55:53:0c:20:4d:a8:65:49:14:9d:
13:81:b3:c8:c4:c4:a5:36:ae:da:4b:77:b3:15:22:fc:fb:be:
38:63:fa:f1:9b:96:9e:25:c3:f5:4e:d4:24:2a:c5:43:5e:9f:
91:15:82:29:3c:4e:92:8c:47:47:d9:54:fd:16:61:a6:47:21:
39:ce:db:c3:8c:6f:13:06:55:91:9a:d5:f6:0e:42:9a:e0:23:
a0:c1:2d:53:10:54:8d:2d:7f:35:2d:2a:01:af:cc:d2:48:25:
a7:21:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:38 2026 by rpki-client