Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: vr0DB69rHKMJtObRiUm3sZXC7hLbewnaMH/ohpjiSYQ=
Subject key identifier: C6:D0:CC:65:8F:7B:8C:61:22:32:32:1E:28:B2:14:21:25:1C:05:60
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 01A13E95258BA080A390A678D373ED48BF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 1703
Signing time: Thu 15 Oct 2026 08:02:04 +0000
Manifest this update: Thu 15 Oct 2026 08:02:04 +0000
Manifest next update: Fri 16 Oct 2026 08:02:04 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: EV2643321QRm3z/6xvUb4T9wRRtes2gPS2Jg6/oNjQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:25:8b:a0:80:a3:90:a6:78:d3:73:ed:48:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Oct 15 08:02:04 2026 GMT
Not After : Oct 16 08:02:04 2026 GMT
Subject: CN=c6d0cc658f7b8c612232321e28b21421251c0560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:64:9f:cb:f7:8c:74:bc:39:d1:cc:8f:25:
61:30:e2:dc:b8:e8:f7:dd:8a:d0:9d:01:46:92:59:
2e:e0:62:7c:ce:5f:2f:76:72:5c:09:36:b8:55:3a:
86:fc:22:85:50:63:2e:49:d4:23:61:cd:d0:b4:9f:
fb:00:82:95:00:1a:ee:41:cf:ba:e0:1c:61:df:4e:
46:2b:76:fd:fa:eb:5f:c1:7c:8a:3c:81:d2:fa:78:
22:a4:f3:07:64:3b:b1:4c:33:1c:04:fa:dc:dd:16:
e3:a2:27:83:71:3e:06:46:53:ae:20:66:c4:0b:df:
74:81:c2:de:48:ac:60:62:21:8c:f1:e0:14:ff:62:
53:7d:d6:6e:9a:d7:8f:fe:4a:16:11:24:1a:7c:4c:
d0:48:a2:cc:e9:df:2c:84:d0:d8:6b:c0:d9:2d:f3:
f0:c6:d1:b8:7e:07:97:a1:0f:98:df:de:f9:cb:23:
16:4a:b3:c6:ab:66:08:1e:d6:04:8e:1a:f9:7b:9a:
49:3e:3d:2b:33:7f:dc:75:c8:d5:7b:ae:65:e5:1b:
4b:64:b1:38:89:c4:2b:56:85:36:9b:25:af:f8:94:
48:21:bd:b3:de:7c:f8:91:c0:55:35:c9:e3:0a:bb:
36:e1:fb:74:bb:be:0e:b3:e3:92:02:2d:54:c8:55:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:CC:65:8F:7B:8C:61:22:32:32:1E:28:B2:14:21:25:1C:05:60
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6a:f1:e2:cd:7c:7e:87:76:98:90:a0:6d:cb:1d:73:e6:1c:
f3:ce:13:94:ba:56:e4:fc:0f:55:55:72:95:2e:38:83:15:91:
66:e7:b0:8a:47:ea:d3:f8:36:e2:8c:a5:fc:fe:a7:4f:5e:79:
c7:00:a8:76:ed:b3:17:29:6b:c4:8f:36:65:e9:a6:bb:74:9c:
09:b7:eb:2d:ba:81:88:63:ee:6a:dc:89:cf:3b:72:73:26:5a:
74:bd:bc:0a:24:a8:ce:5b:6e:4f:1e:a6:4e:d0:9b:b5:80:fe:
2d:d5:3a:e6:55:90:7a:f5:2b:48:8c:bc:a0:10:88:be:bd:db:
5b:7b:4c:a7:1c:3a:64:b1:ef:95:20:93:ab:e5:77:a2:fb:0d:
15:2b:84:15:f8:8e:d4:32:d4:19:08:52:e8:8d:ef:05:00:e8:
10:09:89:24:82:e2:0e:ee:94:94:8f:5d:ee:32:a6:22:db:50:
19:18:99:b3:37:d1:1f:0a:47:0c:4e:a5:d7:92:ca:b7:8c:41:
24:ce:6d:22:b9:6a:19:94:72:d1:4c:11:7d:93:4e:62:0f:73:
4e:e1:64:0b:f5:41:5a:4b:02:a1:69:f1:05:75:f4:ba:91:c0:
ab:6e:4f:35:5b:f3:24:74:94:ee:ca:a5:37:cc:84:5b:0f:01:
49:46:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:21 2026 by rpki-client