Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: B0kCT9DPWs3Uh+d9g3L0m4FOFrK1AjpFttKMutEw7Pc=
Subject key identifier: 98:2D:8F:BE:4B:D5:88:25:8A:E3:9F:AC:7C:52:C8:38:4D:EF:C9:4B
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019F190CFEF3EA2C8AEDA8A42BBFFAE4F135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 174C
Signing time: Tue 30 Jun 2026 15:01:49 +0000
Manifest this update: Tue 30 Jun 2026 15:01:49 +0000
Manifest next update: Wed 01 Jul 2026 15:01:49 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: qlmEzySqYa1YEfcg4UXQ5ir6VepG27iFt8TxuZLcMYQ=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:fe:f3:ea:2c:8a:ed:a8:a4:2b:bf:fa:e4:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jun 30 15:01:49 2026 GMT
Not After : Jul 1 15:01:49 2026 GMT
Subject: CN=982d8fbe4bd588258ae39fac7c52c8384defc94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:d7:f9:92:10:b3:3c:03:33:93:45:00:2a:
a9:3b:15:7f:db:39:4d:d2:61:1e:5d:94:c3:ae:5e:
b8:f6:32:d5:d7:93:e5:dc:eb:5b:60:1e:38:cc:db:
ac:30:61:f8:4e:20:b8:51:aa:aa:99:32:2c:e6:d6:
3c:c1:38:22:97:06:18:0c:20:1e:52:17:8d:60:49:
1f:dd:7b:1a:94:81:48:80:c0:22:48:f6:6e:2e:1d:
ce:7b:79:a0:14:f8:3b:90:48:c0:56:27:c4:1e:87:
1c:ca:81:0a:a6:47:4a:7c:f3:31:39:89:2b:1b:b3:
48:a4:60:14:6c:4f:ba:3b:41:76:58:4c:8e:b6:b3:
b8:86:35:c2:46:e1:f8:88:d5:77:56:5e:2c:b2:a7:
e3:8f:36:24:4b:46:28:37:45:58:e8:13:df:dc:83:
7c:7b:ee:4b:0f:d8:87:bc:07:28:73:37:98:fa:7c:
14:d4:43:32:60:60:e0:c4:42:bb:f8:aa:c9:3e:25:
79:14:b4:17:6b:95:1c:d2:6b:d2:37:e6:c6:47:f6:
be:db:a5:b0:5a:62:0b:3f:78:1c:5c:2f:40:9e:a2:
7e:c6:0a:b9:09:f7:4b:7e:88:17:a8:fb:6d:07:69:
47:54:dd:25:a4:f7:25:19:f5:63:97:f0:bf:55:18:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:8F:BE:4B:D5:88:25:8A:E3:9F:AC:7C:52:C8:38:4D:EF:C9:4B
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:04:73:74:ad:be:b3:0c:8f:47:5e:9e:6f:14:f7:54:f6:a9:
54:09:12:8d:dd:80:af:4b:bf:1a:86:19:b7:26:95:4c:13:c8:
59:1f:40:07:7a:39:18:bb:91:1a:3f:18:56:88:9c:2b:14:55:
2c:0b:df:5e:c1:bc:31:e3:b6:70:3e:7b:18:b1:b3:f0:02:75:
cd:e2:2d:ac:a6:87:d3:0e:d3:e0:e0:a0:45:32:4f:7d:09:cd:
2f:ca:7b:45:ef:07:6e:b1:ce:63:22:49:5e:6f:c6:15:7c:c3:
54:b5:77:1b:31:de:16:4b:e0:67:65:ca:08:be:c5:1b:48:c6:
aa:70:1c:f6:4a:88:1f:94:81:e0:3c:89:7d:fb:0f:18:8a:fe:
ca:78:36:e9:18:ab:fe:ed:d6:38:f2:09:c1:8d:23:d4:f7:32:
78:a1:21:fb:67:80:ac:ed:31:45:dd:21:a6:28:c9:73:db:a5:
a9:8b:8a:27:f0:51:14:28:e1:ad:5c:9d:08:ef:f6:42:e7:c7:
96:a5:dd:f9:5d:c3:99:cc:4f:72:12:02:d1:63:a7:44:88:56:
cf:21:d8:e1:83:74:56:40:c1:2f:b2:65:de:ed:1d:bc:28:80:
68:39:2d:67:de:3f:f2:02:94:c6:ce:0c:d4:3e:64:09:b9:a3:
a1:9f:fa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:11 2026 by rpki-client