Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: 3ZDC12bgt8tDPBjKiQk+b2qre9B6VL03ClKGLz4d6q8=
Subject key identifier: 33:8F:B5:38:E7:29:8C:8C:BF:30:D9:E0:B5:86:0A:6B:91:4F:4D:66
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019D3940D389A41985DB12FF50366A4665EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 14EE
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: +wDRLeLBNb0nzC1nmCvl3kv3dlHyTHvHxwxZBaUc7A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d3:89:a4:19:85:db:12:ff:50:36:6a:46:65:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=338fb538e7298c8cbf30d9e0b5860a6b914f4d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:6d:ce:0b:fd:34:89:49:93:41:88:81:23:
7f:2c:12:e1:1b:96:05:f9:cd:69:88:d6:6c:07:12:
fb:7c:33:b3:aa:74:84:ea:7c:6a:2f:e5:38:13:30:
da:c2:fc:4d:c4:1e:bb:a8:77:da:e3:03:02:cc:09:
45:69:2b:70:a4:41:37:87:c0:3f:24:fb:ae:9c:c9:
f7:c8:44:26:33:78:4a:8c:0d:f2:89:d5:f7:f1:7e:
1d:83:b1:a4:74:93:06:c7:61:ca:96:f5:53:fb:d6:
d1:2b:62:7b:a7:c4:03:ec:0f:0e:01:57:6b:45:7c:
44:50:14:38:98:fc:8f:b6:c9:d6:01:6d:d7:4e:88:
45:3f:22:3a:08:0e:47:91:ae:34:7b:40:84:3c:a5:
27:25:c9:75:aa:e6:6e:c5:12:96:c0:0a:f1:35:00:
9b:76:19:d6:3c:98:19:54:fb:75:e5:0a:6e:34:3a:
56:70:3a:72:53:20:72:68:1b:07:53:3f:55:a7:df:
d1:4f:92:13:b2:a0:c7:cd:dd:4e:2b:90:7d:d4:e3:
48:45:2a:f2:13:ed:ca:29:b2:43:9a:63:d4:57:f0:
13:dd:33:a2:09:84:04:b5:87:d9:eb:26:e3:5b:2c:
21:ce:e4:fc:57:6e:8c:dc:3b:6d:cc:ca:4b:6c:93:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:B5:38:E7:29:8C:8C:BF:30:D9:E0:B5:86:0A:6B:91:4F:4D:66
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:da:3c:40:a2:cc:27:c1:ac:97:31:ca:1b:2c:38:a5:8c:
c6:88:2b:a8:3e:2e:cd:48:07:2f:ae:a5:8d:e7:f0:63:9e:8f:
37:bb:d4:5f:72:ff:e0:6c:e3:94:b3:74:75:f6:c2:a6:14:58:
1c:47:9d:0c:c9:6f:7d:77:af:6a:65:72:f8:8b:77:33:20:84:
f4:c5:35:70:bc:9f:d4:02:3d:8e:e0:f0:da:2e:0b:49:f5:71:
ae:70:5f:dd:ff:b4:11:2d:10:72:5c:ff:81:4c:14:8b:6b:df:
46:76:a6:1c:ce:90:b7:cb:d7:c6:13:84:c9:c3:14:56:06:41:
45:af:c7:34:ae:ee:86:52:2f:67:55:94:81:77:f5:fe:c5:2a:
46:fe:15:9f:84:da:46:12:af:c0:03:44:af:a0:d0:83:fc:9c:
c5:f7:4f:c3:db:82:f1:55:a7:d0:74:48:45:c7:18:b1:bc:28:
b6:ee:70:b7:86:f9:91:22:41:c7:7b:06:eb:c4:fe:d4:12:af:
0c:59:99:21:e2:d9:3e:9c:67:f1:46:42:4e:2a:02:32:7d:7e:
69:81:e2:69:1e:84:6c:d9:50:52:13:b7:97:9c:ee:e5:d6:73:
76:40:b8:c9:10:02:59:23:b7:9a:d7:61:51:f1:ea:ee:b7:bf:
4d:36:66:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:10 2026 by rpki-client