Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: vbHuSfonqoOk3i9sZ+dTGJa03WYA6aiOXeoMKU03aFI=
Subject key identifier: C6:C0:0B:2F:89:6D:CD:79:3F:AF:79:59:91:A9:EC:ED:E8:00:E7:9B
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 01A0558C847497C016F8EA0488309EB701A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0CFA
Signing time: Mon 31 Aug 2026 02:01:07 +0000
Manifest this update: Mon 31 Aug 2026 02:01:07 +0000
Manifest next update: Tue 01 Sep 2026 02:01:07 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: CEDpnttjQNRt9nvS8XvshMQyDfkpbAchewwEjGxRChI=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:8c:84:74:97:c0:16:f8:ea:04:88:30:9e:b7:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Aug 31 02:01:07 2026 GMT
Not After : Sep 1 02:01:07 2026 GMT
Subject: CN=c6c00b2f896dcd793faf795991a9ecede800e79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:9f:aa:52:09:b1:13:9c:34:2e:f1:93:c3:
11:ca:1c:6d:c6:0a:88:94:c8:1d:a7:0f:51:6b:af:
d9:2d:47:47:b6:21:22:58:80:4f:15:7d:79:d9:fc:
ad:7c:08:1e:9c:db:ea:fa:b3:7d:b5:39:ba:74:b0:
9a:fc:fc:6b:c4:04:69:5d:f4:e4:c3:e6:a8:9b:be:
d0:fd:c5:40:d6:5a:d0:2a:f5:e6:dd:0f:30:00:43:
e0:45:43:02:37:3c:9a:9d:e4:5f:31:ef:dd:ee:00:
b1:5a:ac:cd:c7:17:5f:08:13:d9:8f:d6:59:07:5e:
d9:92:d7:eb:e1:cc:d0:e8:0d:3b:95:be:58:38:21:
c6:c5:b6:51:d1:b6:d2:ca:45:cb:ea:29:1e:18:8e:
b9:d3:63:94:91:ef:66:78:90:2f:0e:38:95:39:a2:
3c:f2:a4:76:03:fc:a7:cd:e1:34:be:47:de:af:3b:
59:63:59:8a:a3:dd:9b:44:22:e3:f5:9e:36:cd:4c:
0b:1d:85:a7:b8:29:3e:42:ea:18:85:99:72:e7:81:
cb:89:eb:c7:21:ad:1a:42:24:c7:a6:28:83:d9:03:
c5:79:ae:1c:9b:2e:60:10:29:60:e8:86:42:34:5f:
94:cc:50:54:d1:c9:16:ad:b3:4b:1d:9f:3d:f7:8c:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:0B:2F:89:6D:CD:79:3F:AF:79:59:91:A9:EC:ED:E8:00:E7:9B
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bf:cf:f6:52:b8:4d:6c:ae:bf:94:8f:ca:50:32:9a:c6:17:
07:e3:d2:e6:7d:cf:7d:28:58:7b:8f:58:cd:12:2d:dd:0c:81:
86:30:09:20:37:e4:35:1a:bd:e2:0e:a6:d4:e4:2d:cf:36:cb:
d5:f9:3a:6c:75:78:6c:23:82:c3:cb:d4:f6:30:56:ff:52:5d:
51:8b:ac:d3:54:3b:63:f8:94:2d:d3:95:2d:f5:c1:23:3d:e8:
45:fd:8f:15:6c:0f:14:48:a4:3d:68:24:d0:c9:4a:4a:10:3e:
19:5d:f1:66:82:cf:0e:12:64:92:c6:55:6f:79:c1:ae:19:9e:
d0:bf:7d:3d:f0:73:ca:38:3c:ac:71:6e:da:c5:bc:84:83:fa:
cc:40:a0:bc:74:b2:c8:d6:3e:ad:e3:ac:cb:99:2e:85:e6:42:
b6:2b:76:8b:a0:2f:13:6a:02:f3:32:89:da:d6:e1:0b:cb:45:
4e:ad:75:d6:0d:9a:af:2a:9e:1f:61:c8:29:31:11:aa:d3:f3:
ca:3f:04:08:0c:01:9b:91:99:a0:33:54:66:50:e9:02:c9:e3:
56:33:79:94:c2:0f:14:c5:dc:68:fa:79:1a:4d:44:5e:c9:ee:
81:15:2f:fb:d4:28:79:65:55:16:dc:9e:ed:59:3c:9b:19:56:
e9:c0:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:16 2026 by rpki-client