Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: aooGH/lnuvFC/k1+XKe7Dnn3U/BIyAepWp0QNMuKi7U=
Subject key identifier: E2:04:1F:07:EC:C4:51:4B:C4:28:DE:9A:B3:D4:F9:86:8F:53:52:0A
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019F183019F5360E9C378276FE9937B29841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 15E6
Signing time: Tue 30 Jun 2026 11:00:33 +0000
Manifest this update: Tue 30 Jun 2026 11:00:33 +0000
Manifest next update: Wed 01 Jul 2026 11:00:33 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: X9sOG6QgSAFI+mvm+sVVer7JI6EaMRIcKcg+kWpzgtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:19:f5:36:0e:9c:37:82:76:fe:99:37:b2:98:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Jun 30 11:00:33 2026 GMT
Not After : Jul 1 11:00:33 2026 GMT
Subject: CN=e2041f07ecc4514bc428de9ab3d4f9868f53520a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:4c:2e:d6:bc:e1:04:13:ca:7d:f5:37:86:
62:b8:cd:58:81:84:f6:74:35:16:26:07:c0:19:73:
b9:36:d9:c6:5d:46:c3:85:8b:7a:8e:60:6b:91:5c:
0b:67:00:41:31:eb:b5:c2:03:de:de:4e:39:1d:c8:
59:7d:b0:a5:8b:3b:41:01:e8:6b:c8:ea:d1:25:a0:
b4:8e:46:e1:d6:bd:ec:8e:4b:80:e4:83:43:44:77:
78:51:8f:73:63:c5:e9:ab:2f:a7:da:96:8c:6e:06:
5e:12:c6:16:14:aa:6e:9c:df:39:36:b6:a8:71:04:
ea:cd:76:cc:93:58:b9:55:74:a8:db:95:af:ca:78:
1b:59:fe:e1:e6:81:dc:f9:2e:d0:9a:a7:da:e7:3e:
e6:cc:1a:b2:1e:86:25:b5:f6:e2:6a:bf:16:10:86:
02:9e:7b:f3:4a:9a:b0:35:83:c8:04:44:87:29:d9:
98:39:30:c2:5f:48:c7:1b:0f:e4:f0:24:8d:03:48:
6e:0e:5e:bd:69:96:57:57:8d:91:30:20:6c:95:43:
36:09:c1:b1:72:29:6d:bc:8c:f5:ad:7d:90:d1:29:
b3:f9:d6:3f:9a:39:6d:34:19:48:b1:5b:b8:85:db:
bb:23:4d:fd:b7:59:3c:ea:d4:ae:14:f4:e3:1f:40:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:04:1F:07:EC:C4:51:4B:C4:28:DE:9A:B3:D4:F9:86:8F:53:52:0A
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:46:47:cf:c7:a4:89:7e:3e:de:bf:4a:61:20:b2:11:8d:b7:
76:7e:9f:f1:c0:f1:eb:a5:89:74:b0:9d:5d:a6:bb:94:da:9b:
0f:4c:44:48:b2:9c:db:8d:57:97:56:06:aa:e8:d0:bd:8d:91:
35:e9:e8:19:db:e5:8b:95:71:b6:04:6a:4c:17:9d:1c:90:62:
16:4f:06:94:62:cb:fb:f9:a4:93:c0:e8:d7:81:7d:30:04:8a:
79:cb:f1:a0:93:99:7e:8f:4f:2f:1b:b9:db:60:3a:53:bf:30:
7e:4a:71:c4:32:ee:2e:d1:bd:83:e3:fd:af:3f:ec:d2:bd:1b:
31:4e:93:24:0f:19:0f:87:d6:0f:d1:d5:76:c3:ff:1a:2f:a7:
56:9b:e9:e0:3f:4b:71:9c:a2:d9:5d:ef:f0:06:bf:ad:e6:97:
df:f0:df:9e:27:62:2a:24:2d:bb:5a:ac:66:79:12:91:1a:31:
62:6e:78:78:3a:8e:37:00:27:ec:68:a7:c7:6a:4e:73:ad:64:
86:d2:ed:95:56:d2:b1:78:29:2f:4f:3b:ee:a3:45:5c:f7:51:
c2:84:b8:b5:8c:b7:39:7f:08:fd:e9:f0:9d:59:37:ba:af:2b:
60:91:48:cf:65:b4:16:d2:d4:4e:bd:fe:73:2e:7a:e2:34:bc:
3b:8d:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:55 2026 by rpki-client