Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: AmUxZhv42mu/gSAIhkPynF59gEi7t/pk4RPmE7Dr4bU=
Subject key identifier: 14:9F:C1:C1:14:02:7B:A4:6E:C4:A6:EA:4E:2A:E3:D8:80:34:89:4E
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01A13F6FF1F5C244472D34C91148C33D88B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 1869
Signing time: Thu 15 Oct 2026 12:01:03 +0000
Manifest this update: Thu 15 Oct 2026 12:01:03 +0000
Manifest next update: Fri 16 Oct 2026 12:01:03 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: va/qMFZ6dvHN+ryvxM2/EqzVGxFoZT5OVprnsGQLlEY=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:f1:f5:c2:44:47:2d:34:c9:11:48:c3:3d:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Oct 15 12:01:03 2026 GMT
Not After : Oct 16 12:01:03 2026 GMT
Subject: CN=149fc1c114027ba46ec4a6ea4e2ae3d88034894e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:4c:f8:48:92:00:b1:1b:89:f8:c7:88:0f:
7b:a0:ae:c4:11:cc:32:c8:34:ca:61:11:57:2d:b2:
d9:21:89:da:9d:f5:1d:ec:06:ab:1d:15:df:35:d1:
96:08:07:aa:14:fb:25:26:c0:16:48:51:82:c0:9e:
69:ee:bb:01:a4:53:bd:2c:1b:d5:95:3a:64:68:69:
7b:ab:23:5b:06:27:b1:bc:02:9f:84:6b:b8:15:ba:
4e:c6:6d:b9:7c:72:4b:52:07:bd:2a:96:28:f4:77:
4d:16:9e:17:eb:6c:42:ab:b5:aa:7b:49:3a:53:92:
69:f5:ce:e1:17:aa:cd:73:5e:f6:9c:00:59:2f:8b:
ce:0f:6a:27:0e:b1:c1:43:f1:b7:dd:94:39:e4:c7:
82:f1:44:58:50:29:e2:19:72:4c:f9:59:6c:71:94:
d4:1e:de:c9:2a:dd:70:f2:a1:60:11:a7:8f:f3:32:
a6:14:e7:06:bf:26:bb:a5:39:8e:f5:98:44:a9:71:
e9:4c:d9:fd:25:42:05:b5:54:45:3c:49:2e:6c:41:
e8:10:bc:55:47:b2:2d:87:9b:ff:4d:55:5f:a4:b4:
a9:2f:f4:92:75:f2:4b:93:b6:ce:2b:cd:cd:50:61:
cf:f8:e7:31:d3:91:25:5b:49:a1:fc:6e:20:c0:02:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9F:C1:C1:14:02:7B:A4:6E:C4:A6:EA:4E:2A:E3:D8:80:34:89:4E
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:b7:f6:e1:44:ea:f0:99:56:13:1f:e4:9d:15:25:8f:5d:
e4:ac:35:be:f4:0d:16:76:3e:26:11:f5:0e:08:fc:51:10:ec:
5b:6d:21:ad:ce:8d:bc:19:af:4e:be:b0:a8:f3:62:06:e5:14:
68:ed:07:b5:14:63:18:04:33:ef:ce:40:22:fd:59:00:f1:d2:
7b:83:82:94:3c:24:74:2f:27:ca:ee:24:10:61:d7:f4:6c:3a:
9c:12:74:2f:65:0a:f8:13:04:c3:2a:ca:79:e7:84:f6:33:83:
18:69:a8:8f:ec:23:4e:e1:f7:78:28:ea:14:ab:14:00:f2:11:
dd:03:55:15:cc:52:28:e9:ca:ff:8a:f3:c7:9d:ad:23:17:1f:
e0:f5:48:7a:f2:be:8d:fc:96:8a:57:3b:d3:69:45:cf:18:3a:
df:00:5f:0f:fe:2d:95:71:88:ff:34:38:39:8f:f7:19:28:74:
09:f0:e0:e2:83:26:4c:f1:31:c0:2e:a6:7e:ae:b9:9c:e4:1e:
75:9c:4d:b0:78:00:c1:10:38:65:97:46:88:f0:81:c2:ff:cd:
b7:ae:a1:cf:bb:6c:68:fd:6e:54:d2:d0:e1:c4:97:70:2f:9c:
c0:70:43:08:15:67:f1:de:8c:7d:c8:d7:83:38:81:13:73:5e:
3f:74:0c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/b/H1wkRHLTTJEUjDPYi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmI2MzI3Y2RmYTE2NTI0ZGM3ZDAzMzcxMzhhZjMyNWZi
NWUyZDkwHhcNMjYxMDE1MTIwMTAzWhcNMjYxMDE2MTIwMTAzWjAzMTEwLwYDVQQD
EygxNDlmYzFjMTE0MDI3YmE0NmVjNGE2ZWE0ZTJhZTNkODgwMzQ4OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMlM+EiSALEbifjHiA97oK7EEcwy
yDTKYRFXLbLZIYnanfUd7AarHRXfNdGWCAeqFPslJsAWSFGCwJ5p7rsBpFO9LBvV
lTpkaGl7qyNbBiexvAKfhGu4FbpOxm25fHJLUge9KpYo9HdNFp4X62xCq7Wqe0k6
U5Jp9c7hF6rNc172nABZL4vOD2onDrHBQ/G33ZQ55MeC8URYUCniGXJM+VlscZTU
Ht7JKt1w8qFgEaeP8zKmFOcGvya7pTmO9ZhEqXHpTNn9JUIFtVRFPEkubEHoELxV
R7Ith5v/TVVfpLSpL/SSdfJLk7bOK83NUGHP+Ocx05ElW0mh/G4gwALtzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSfwcEUAnukbsSm6k4q49iANIlOMB8GA1UdIwQY
MBaAFAm7YyfN+hZSTcfQM3E4rzJfteLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzIt
ZTczNjAzMjMzMDNjLzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzItZTczNjAzMjMzMDNj
LzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw+39uFE
6vCZVhMf5J0VJY9d5Kw1vvQNFnY+JhH1Dgj8URDsW20hrc6NvBmvTr6wqPNiBuUU
aO0HtRRjGAQz785AIv1ZAPHSe4OClDwkdC8nyu4kEGHX9Gw6nBJ0L2UK+BMEwyrK
eeeE9jODGGmoj+wjTuH3eCjqFKsUAPIR3QNVFcxSKOnK/4rzx52tIxcf4PVIevK+
jfyWilc702lFzxg63wBfD/4tlXGI/zQ4OY/3GSh0CfDg4oMmTPExwC6mfq65nOQe
dZxNsHgAwRA4ZZdGiPCBwv/Nt66hz7tsaP1uVNLQ4cSXcC+cwHBDCBVn8d6MfcjX
gziBE3NeP3QMSQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:42 2026 by rpki-client