Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: mLD3+p5QLN+iMBZhG3jKBC5FMQyryjK+lgD1rOciaN0=
Subject key identifier: 34:22:26:00:BD:0D:F6:DA:83:88:34:3E:F6:A3:29:7B:A8:4C:2C:15
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019E2F5FFDFBBC3F333935010D5DE43A23F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 16D3
Signing time: Sat 16 May 2026 06:01:20 +0000
Manifest this update: Sat 16 May 2026 06:01:20 +0000
Manifest next update: Sun 17 May 2026 06:01:20 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: embWKv5cVZdMGVCMhRmLZjsT+kfMtsTzD9tHzifQo70=)
2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:fd:fb:bc:3f:33:39:35:01:0d:5d:e4:3a:23:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: May 16 06:01:20 2026 GMT
Not After : May 17 06:01:20 2026 GMT
Subject: CN=34222600bd0df6da8388343ef6a3297ba84c2c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:bf:2d:67:39:8a:15:87:1a:a3:42:93:de:
c6:3b:48:fe:ed:c1:2a:cf:3a:40:77:79:4a:88:7d:
a1:f8:22:ec:f4:b5:f0:3c:5c:34:b3:21:31:68:0b:
65:48:93:75:72:b7:93:ad:56:7a:d2:4e:bc:73:2a:
7a:51:19:3c:ef:dd:ff:f7:97:e8:25:45:88:31:b0:
54:95:f0:73:cb:f8:4b:70:06:14:a0:15:a3:56:16:
0a:8b:a0:e2:f0:b9:dd:c0:6a:e4:bd:85:7b:7d:d6:
a4:d6:23:79:b1:d8:76:61:6d:2e:4d:19:b5:13:d1:
66:7b:bc:5a:bc:e8:94:76:8f:47:9a:b1:59:6f:47:
41:1e:eb:ed:80:d1:00:d1:c4:a5:cc:65:f0:14:5c:
65:f7:c4:47:98:2f:72:9a:c4:a1:97:1d:49:00:a9:
fe:ae:21:ae:79:51:00:58:b7:bb:0f:e9:ee:d1:93:
e7:05:43:aa:00:d1:74:17:ec:48:6e:c0:a7:18:70:
96:75:4d:a8:97:07:d0:d8:94:9f:6a:9b:39:4b:03:
4f:86:99:72:a0:bc:14:49:f5:d3:2a:42:d5:c2:15:
ec:a8:8c:b5:5f:17:e3:0c:13:6a:98:c8:c3:67:67:
dc:b7:1e:04:bb:1e:bd:82:4a:f0:e0:df:67:e9:2c:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:26:00:BD:0D:F6:DA:83:88:34:3E:F6:A3:29:7B:A8:4C:2C:15
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d5:fe:2a:73:d7:89:e1:41:84:e1:04:b4:23:a0:5c:b7:19:
80:3d:f0:be:ab:7b:69:e7:3b:38:9d:c4:5d:9d:cb:d9:e0:a0:
7e:17:7e:6a:d9:1a:fb:b6:49:9a:47:19:fa:1f:42:b2:01:a1:
7d:e2:34:e8:1d:88:10:ec:d9:ea:6f:0d:bb:3f:82:62:b0:dc:
6f:74:70:24:d0:4c:c5:a7:51:69:c8:9d:cd:68:85:be:3d:7a:
5e:e2:fa:63:15:b0:cf:01:fd:4e:60:89:6b:4b:86:b9:2c:1f:
81:ec:70:79:d5:18:43:59:0b:57:f0:47:d0:fc:da:12:a3:f3:
7c:f4:6b:08:e7:82:5b:6e:bf:4e:c6:99:18:29:b0:42:ec:5d:
16:e1:5b:d2:3b:f8:50:7d:bb:79:70:e8:25:31:75:ae:ef:f5:
e3:51:d6:93:46:cd:10:67:e4:8b:ff:86:a0:a8:28:d0:92:85:
b4:64:2d:bb:af:30:c8:d1:c9:32:63:3c:ff:a3:57:7c:43:b1:
db:f6:5f:e5:f2:0c:57:24:5a:87:47:d9:76:9d:83:72:e5:56:
ea:74:c6:a4:24:75:9a:74:67:a0:d6:aa:69:e8:81:22:09:73:
fb:0b:f3:e9:e9:85:08:eb:e7:3c:44:6f:21:9d:6d:e9:f9:75:
b6:c7:ca:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:19 2026 by rpki-client