Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: BK4il/Iq0nqSCyiZZM7UG/0sAhiQOSc3JYfGHnjkjUY=
Subject key identifier: 2E:1D:E7:19:71:E0:A4:42:BD:8B:2C:D8:86:74:D4:D1:39:AF:96:C3
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01A000CA576D5ACB4E217DA6EB691D4F22D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 17C4
Signing time: Fri 14 Aug 2026 15:00:55 +0000
Manifest this update: Fri 14 Aug 2026 15:00:55 +0000
Manifest next update: Sat 15 Aug 2026 15:00:55 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: DAVsAAWW1hKm92DJr6/vYZPSlr9+0XS+Uh3Rk/mEasg=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:57:6d:5a:cb:4e:21:7d:a6:eb:69:1d:4f:22:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Aug 14 15:00:55 2026 GMT
Not After : Aug 15 15:00:55 2026 GMT
Subject: CN=2e1de71971e0a442bd8b2cd88674d4d139af96c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:f5:e0:69:4e:7c:6f:aa:d4:a4:0e:92:b2:
49:3f:60:b8:67:a0:19:92:2d:45:a6:0e:07:92:d3:
a0:b4:8e:44:46:03:58:e5:7c:6b:72:5b:7b:89:d7:
d2:0e:8f:15:bb:60:15:9c:f2:9d:86:4d:60:b3:d9:
43:0f:e9:27:1b:5f:07:04:f7:68:83:77:58:f9:f9:
6f:d6:6d:b1:b6:54:b3:36:c3:00:fd:b8:b6:e4:69:
c8:b5:6a:e1:b8:6b:4c:ff:8b:10:3d:a6:f5:c2:43:
00:9d:2e:6f:8c:6c:51:5c:57:3e:f2:ce:58:29:99:
95:9c:eb:43:1d:2f:83:39:bc:3a:32:84:fb:0b:d4:
a3:98:7e:3d:d5:aa:70:e6:b5:a4:27:eb:8e:3e:33:
5e:de:12:df:25:43:db:ca:9b:f0:2d:fe:c2:69:0a:
d0:ee:0b:5e:24:28:e1:ac:c6:6d:3a:b0:8f:0c:5b:
9b:ab:2d:5e:d3:ce:33:a8:54:c5:89:a5:71:5d:0d:
17:26:f8:d5:c6:af:7e:e4:8a:55:8f:24:70:c3:dd:
81:c3:81:e8:1b:2d:a2:aa:19:cc:03:ed:d2:d4:d0:
87:ce:d7:bc:3f:3d:6a:db:76:9b:c6:51:d6:ab:1e:
2c:ec:9e:13:38:a6:ab:b0:55:aa:68:7e:67:ec:44:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:E7:19:71:E0:A4:42:BD:8B:2C:D8:86:74:D4:D1:39:AF:96:C3
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b9:68:5e:fd:45:71:7f:e5:71:05:a9:e7:32:4b:99:b6:ce:
40:ba:b6:67:da:2d:1b:20:d9:cb:fa:90:6d:31:e6:68:e8:14:
11:9e:c5:a4:90:ef:e4:f5:3c:4e:2d:6e:e3:bd:de:e9:33:aa:
70:d8:17:38:66:ea:0b:44:9c:8e:52:71:ba:e3:5f:07:19:88:
a0:50:de:84:5c:f4:d2:c0:d9:db:12:ab:a5:70:32:d9:13:44:
b1:04:07:24:75:fe:61:0a:56:d6:dc:3d:3e:f0:ee:bc:bc:f5:
32:50:28:72:91:66:93:e6:15:0b:a4:ef:60:58:7d:48:70:5a:
80:b0:13:47:bd:46:f1:46:97:3e:bc:58:c7:60:e6:16:08:1f:
4a:75:4a:f1:53:e6:7c:18:ca:30:8c:5c:06:50:77:8c:56:d8:
4e:57:2f:cc:0b:10:c8:3c:46:f8:f3:80:7c:3f:37:62:11:09:
21:f1:45:24:6c:68:63:06:9b:12:de:bb:dc:85:91:67:fb:ea:
40:7f:a3:6a:38:e0:41:0e:93:d0:a7:89:9f:77:3a:67:ce:69:
37:04:7d:af:91:ee:90:71:20:3b:54:33:2a:fe:b9:0c:4a:a9:
c5:9f:b5:5b:d0:f0:4b:a4:b5:c0:dc:fe:12:5c:7e:9c:ba:8f:
8b:31:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:48 2026 by rpki-client