Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: rTIgZQjgKKef+hPhfJHmf7ijUO1Un1lM9LQXyAmjMNo=
Subject key identifier: 74:DB:95:73:2E:03:6F:2B:24:70:88:4B:0A:15:58:34:37:5A:15:C8
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 01A00093CDEAFB33C1113EA0AE78A78A9FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 14:01:21 +0000
Manifest this update: Fri 14 Aug 2026 14:01:21 +0000
Manifest next update: Sat 15 Aug 2026 14:01:21 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: a4wpY6WcYQa5J7tfO3QG1dwBvIOqEbtk3PE4sf+vV0k=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:cd:ea:fb:33:c1:11:3e:a0:ae:78:a7:8a:9f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Aug 14 14:01:21 2026 GMT
Not After : Aug 15 14:01:21 2026 GMT
Subject: CN=74db95732e036f2b2470884b0a155834375a15c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:c8:28:37:ff:8e:b7:e8:a2:5b:09:85:30:
99:89:bf:8f:8e:01:1b:78:15:91:48:d5:c1:d9:72:
68:74:ff:14:9c:a8:e4:1e:53:f4:a8:61:12:87:7b:
68:e8:eb:5b:66:0e:50:f6:af:a8:8a:eb:30:d4:1f:
bc:bd:85:88:fb:02:e2:1d:98:2c:91:50:c5:25:eb:
5a:fc:bd:25:79:0f:a8:47:c2:2f:0a:05:7e:ce:ee:
2c:c7:90:1a:22:b4:fc:8e:2e:66:fc:90:b7:c8:60:
54:04:56:4a:65:0d:24:1b:81:06:f7:23:ba:a3:f1:
c4:f4:d5:35:04:5a:d8:df:14:b1:44:b1:5a:4f:ec:
86:be:ea:a1:19:de:4e:d6:1f:5c:63:28:7a:88:33:
68:81:2d:55:bd:7a:6a:c5:a3:be:11:0c:07:3c:3f:
bf:a5:c4:54:9f:cf:41:a9:36:af:a4:7f:06:03:ef:
78:e1:1d:74:81:7c:67:2f:ef:5a:af:ee:54:fd:ea:
48:aa:f9:ee:53:1a:55:70:09:01:a8:8b:67:3b:bb:
6e:b1:95:50:35:41:26:b8:30:28:83:79:84:1f:28:
23:a3:24:cc:4b:b4:df:a4:9c:f2:25:8e:cf:e8:a8:
c9:d9:73:13:3b:ab:ab:fa:cf:f4:95:aa:a1:fe:b7:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:95:73:2E:03:6F:2B:24:70:88:4B:0A:15:58:34:37:5A:15:C8
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cb:25:31:b8:d4:69:d0:5b:6b:c0:f2:82:0b:70:bf:39:01:
5a:f6:15:fe:55:d5:06:ff:4d:cc:e0:e2:f3:db:c8:ad:9f:b8:
a9:33:a5:2d:a5:f8:91:c4:f2:95:19:36:7b:9d:18:3f:3c:68:
0e:cc:58:1c:5e:2b:0d:fa:8c:73:b6:53:c4:53:a0:da:bb:ed:
81:d5:fa:27:f7:b9:c5:f1:12:3b:03:18:b6:03:2f:ad:41:ee:
69:94:9e:a7:96:9b:28:5f:61:0c:a0:e5:50:db:be:10:17:c2:
73:06:71:b2:9e:34:ef:53:d9:fa:92:c3:db:d7:6a:75:77:e4:
d2:f3:49:18:06:a7:90:81:1e:ab:f1:b9:27:19:56:f9:8e:88:
b9:9a:72:4e:7a:21:89:09:d9:0a:f9:46:de:aa:64:dd:9b:fc:
d4:16:68:30:01:59:28:51:e8:64:71:fd:8a:20:70:a2:3c:fa:
38:4c:fb:b9:e1:69:c8:c6:b5:7c:2f:6d:6b:28:b1:14:94:44:
78:bf:3e:a5:36:b2:02:b1:40:59:4b:c9:e7:54:09:99:0f:d8:
6a:d2:af:ce:b8:7e:6d:3f:68:1c:ec:c3:96:5d:37:ee:db:5a:
9d:70:ba:97:36:a0:a5:3f:86:de:36:7f:75:4d:fb:c2:4c:3e:
d9:6f:90:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk83q+zPBET6grninip/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi
YTEyNjAwHhcNMjYwODE0MTQwMTIxWhcNMjYwODE1MTQwMTIxWjAzMTEwLwYDVQQD
Eyg3NGRiOTU3MzJlMDM2ZjJiMjQ3MDg4NGIwYTE1NTgzNDM3NWExNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm7IKDf/jrfoolsJhTCZib+PjgEb
eBWRSNXB2XJodP8UnKjkHlP0qGESh3to6OtbZg5Q9q+oiusw1B+8vYWI+wLiHZgs
kVDFJeta/L0leQ+oR8IvCgV+zu4sx5AaIrT8ji5m/JC3yGBUBFZKZQ0kG4EG9yO6
o/HE9NU1BFrY3xSxRLFaT+yGvuqhGd5O1h9cYyh6iDNogS1VvXpqxaO+EQwHPD+/
pcRUn89BqTavpH8GA+944R10gXxnL+9ar+5U/epIqvnuUxpVcAkBqItnO7tusZVQ
NUEmuDAog3mEHygjoyTMS7TfpJzyJY7P6KjJ2XMTO6ur+s/0laqh/retCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTblXMuA28rJHCISwoVWDQ3WhXIMB8GA1UdIwQY
MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt
ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2
LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMslMbjU
adBba8DyggtwvzkBWvYV/lXVBv9NzODi89vIrZ+4qTOlLaX4kcTylRk2e50YPzxo
DsxYHF4rDfqMc7ZTxFOg2rvtgdX6J/e5xfESOwMYtgMvrUHuaZSep5abKF9hDKDl
UNu+EBfCcwZxsp4071PZ+pLD29dqdXfk0vNJGAankIEeq/G5JxlW+Y6IuZpyTnoh
iQnZCvlG3qpk3Zv81BZoMAFZKFHoZHH9iiBwojz6OEz7ueFpyMa1fC9tayixFJRE
eL8+pTayArFAWUvJ51QJmQ/YatKvzrh+bT9oHOzDll037ttanXC6lzagpT+G3jZ/
dU37wkw+2W+QLQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:49 2026 by rpki-client