Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: I4RUHDBH6yrSl9/2hknY/A7P7hP6Lk6Ic1Cn/GtrbW4=
Subject key identifier: 4B:FD:A5:58:E3:46:8E:60:B3:B5:20:0A:F6:9D:CE:FA:E5:2D:B9:8C
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019E3072E3919C5A673E27FD14C1A7EAA532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 156E
Signing time: Sat 16 May 2026 11:01:36 +0000
Manifest this update: Sat 16 May 2026 11:01:36 +0000
Manifest next update: Sun 17 May 2026 11:01:36 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: qbLwrS+qf1Jn26TB4E3K57OuMvJ4eCko30WK0zjzWR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:e3:91:9c:5a:67:3e:27:fd:14:c1:a7:ea:a5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: May 16 11:01:36 2026 GMT
Not After : May 17 11:01:36 2026 GMT
Subject: CN=4bfda558e3468e60b3b5200af69dcefae52db98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:34:1a:88:96:e7:80:3a:e4:ed:20:f1:bd:
c2:55:5f:7c:75:bc:d3:2e:82:6a:6c:da:66:36:34:
29:58:66:68:07:3a:2a:9b:bf:68:33:e4:6f:c3:94:
78:23:22:00:dc:00:9d:51:c3:41:45:ca:7d:4b:99:
70:eb:c9:53:76:be:b0:a6:54:14:c1:11:5c:09:4b:
86:93:02:b6:e6:76:86:8a:c7:67:5a:19:7f:3c:43:
3d:f6:a4:dc:c8:81:28:69:74:8e:fa:0c:d9:7b:6f:
de:71:d0:42:df:55:cc:31:b7:56:bc:49:50:42:c2:
dc:2b:34:f2:df:49:d4:20:e4:13:e9:d5:dc:6c:2e:
a4:cf:f6:b4:48:15:49:53:70:b3:38:67:9c:31:7b:
4f:d0:e2:6e:01:e3:6d:81:b0:d6:ef:b9:80:22:ad:
39:7e:d6:e8:1b:49:9b:0b:7d:4e:c8:ab:68:c0:e2:
c6:8d:fe:bf:11:ad:0a:dd:4b:62:d0:d1:d3:d6:c9:
1b:ff:0d:12:62:fb:a0:38:5b:e9:73:92:60:ca:c9:
da:37:f9:08:78:2c:7f:e4:6c:2b:b2:76:e3:28:6b:
0d:5c:ce:23:ba:19:5d:59:11:c5:92:d4:86:99:6e:
4f:83:74:ae:c6:ef:aa:d4:bb:d2:33:1f:5c:84:90:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:A5:58:E3:46:8E:60:B3:B5:20:0A:F6:9D:CE:FA:E5:2D:B9:8C
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7e:bf:96:5b:0f:1a:f3:e1:a5:d5:8f:ae:5c:db:42:d4:28:
9f:a5:b9:16:cf:eb:29:5f:71:4d:ca:36:3c:55:7d:91:f5:ef:
c3:02:a5:b5:2e:02:4d:5d:eb:40:be:95:c0:ef:f6:95:1f:02:
a2:ad:bc:e6:e7:a8:1d:03:78:6d:e1:b6:06:3e:49:57:2b:8c:
46:f0:d9:a3:5c:40:b9:87:f2:af:34:6a:b7:e2:f3:25:bc:02:
77:df:c2:e9:31:5f:cf:29:3b:c0:9b:b1:0b:c0:fb:fc:ea:2e:
7d:bc:98:8b:0a:10:a3:c8:09:68:03:99:3c:e8:b4:55:64:49:
37:c7:70:c6:42:11:79:88:6b:1d:14:df:0e:6c:91:6f:96:72:
dc:7d:97:d5:63:a7:ec:db:aa:1b:6a:ed:e4:0b:e8:68:d0:01:
99:5d:24:5f:4f:b2:20:ca:15:a5:38:ea:ef:10:85:cb:04:31:
8f:a1:67:e4:05:2d:86:aa:3a:15:d2:b7:b3:3a:aa:cb:c8:c4:
a3:e2:5b:bd:36:6b:89:59:88:fd:0c:79:47:7d:1d:f2:ae:77:
d1:89:3a:d4:ac:ce:ac:77:5b:e2:8e:32:ed:17:fb:a2:92:aa:
87:41:f8:b5:c2:3c:90:e0:fd:e6:c4:25:0f:bc:9c:24:df:01:
88:43:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:26 2026 by rpki-client