Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: 5KON2wOXmmOH43mQMmvNz7TpCot6uK/jV5Pp42Zc2Hw=
Subject key identifier: D8:D4:0C:9F:52:05:66:7B:FC:BA:83:A8:9B:7C:CF:38:51:07:6E:01
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 01A13F39776177856206BB0A0707888DF95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0D73
Signing time: Thu 15 Oct 2026 11:01:33 +0000
Manifest this update: Thu 15 Oct 2026 11:01:33 +0000
Manifest next update: Fri 16 Oct 2026 11:01:33 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: Au3XyhYrYzUiIQj6OPPbcWLA1xldb4gtyHD5cVMwt/Y=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:77:61:77:85:62:06:bb:0a:07:07:88:8d:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Oct 15 11:01:33 2026 GMT
Not After : Oct 16 11:01:33 2026 GMT
Subject: CN=d8d40c9f5205667bfcba83a89b7ccf3851076e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:0e:04:fd:f2:71:2a:65:d6:2e:a6:38:74:
03:02:fa:b2:7f:38:52:1a:37:10:60:e6:bf:cb:f3:
dd:c0:41:ad:b2:0b:da:9e:62:80:9f:4f:7c:6a:41:
51:78:c8:b4:5a:fb:57:9a:43:0a:84:46:7f:4b:b2:
85:ee:9a:8b:0b:95:eb:1a:58:2e:01:31:e5:44:45:
1d:09:46:14:fb:c6:8e:da:ef:1a:20:df:0b:34:71:
b1:00:8e:87:fe:fb:d6:a2:f0:c0:dc:b9:85:07:d4:
d0:49:8b:c7:ea:e7:3a:25:95:39:0f:75:01:d2:5d:
b0:53:28:43:24:0b:62:0a:4f:2c:3d:94:2a:3c:93:
23:3e:e1:c9:0b:85:92:91:8e:1f:5f:60:c2:f1:b4:
f6:26:05:70:18:9f:f5:b9:1b:aa:45:f2:48:aa:d5:
fe:e0:5e:86:2a:9f:6e:eb:06:d3:3b:8d:46:9b:51:
3e:2c:3c:db:aa:64:74:55:1c:53:4e:55:f9:b8:0e:
c1:b3:f1:e1:4d:45:6e:f6:d5:60:5f:28:0e:b3:a4:
b0:2c:0c:e4:b7:7b:47:95:ae:54:7f:b9:9a:29:84:
7b:7b:c0:a7:c6:ad:aa:fe:3c:da:00:fc:81:5b:d9:
ea:3e:e0:4e:b2:dd:f0:45:9e:96:d5:f3:06:21:8f:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:0C:9F:52:05:66:7B:FC:BA:83:A8:9B:7C:CF:38:51:07:6E:01
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0f:ff:3d:b8:8c:f9:66:97:55:c9:79:5f:81:27:a3:1e:34:
02:fd:85:87:8e:db:51:d4:bb:9d:c4:63:89:73:60:de:a5:b1:
6a:b9:6c:c9:10:2a:7a:d1:91:9c:47:c9:b4:0c:a8:5c:10:60:
0d:d5:d9:a3:85:31:ad:17:fa:6b:24:18:e6:c3:1d:9b:16:db:
f1:81:af:5e:a9:27:66:a2:71:9e:86:73:16:21:4d:9e:7c:e4:
87:e5:9e:ed:f9:43:40:1f:e8:04:35:c6:44:fb:07:8b:7e:2d:
39:f1:d9:80:7c:51:92:1a:7f:b8:cb:1f:c6:14:58:74:93:8b:
95:a4:b9:5c:97:36:93:e2:15:09:ab:b4:f6:8c:6f:1e:bc:d5:
e6:44:e2:ba:f9:82:42:7e:66:91:27:cf:c2:f2:7d:b1:a9:48:
04:4e:19:30:f5:8b:ef:7d:c0:e6:ed:97:13:1b:8b:cb:7f:6e:
a7:dd:1e:d8:06:ca:cb:3c:5a:56:d2:f6:f4:12:38:8f:54:64:
c0:54:11:6a:ee:e9:4a:11:17:d9:d6:b3:1e:47:f1:98:07:59:
a7:36:5b:f2:df:c9:2c:71:6f:71:c2:ae:2d:b5:2d:f3:b0:25:
eb:61:99:a9:81:53:c3:0e:8e:3f:71:25:ab:d2:e1:bf:f6:d1:
fb:01:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:50 2026 by rpki-client