Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: yfd8/IaFvQOFxKRsVhZm8WfAHIZXTUpHH0psPKP3BCM=
Subject key identifier: F4:A3:8D:5C:96:7E:79:DF:78:16:6A:15:63:DA:CF:64:6C:2B:53:AA
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 01A13D4A2EC680FCF24745B5D53F8B4FD102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 02:00:34 +0000
Manifest this update: Thu 15 Oct 2026 02:00:34 +0000
Manifest next update: Fri 16 Oct 2026 02:00:34 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: WyUA0YFX+rX16+piYgI2XjW6MaVERVehCwj50CphL3c=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:2e:c6:80:fc:f2:47:45:b5:d5:3f:8b:4f:d1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Oct 15 02:00:34 2026 GMT
Not After : Oct 16 02:00:34 2026 GMT
Subject: CN=f4a38d5c967e79df78166a1563dacf646c2b53aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:37:32:c0:8a:b4:68:7c:09:53:bd:53:ef:95:
92:90:3d:69:e9:1e:36:cc:ba:30:75:13:53:35:98:
3b:77:92:7d:28:aa:fb:4e:61:41:95:1a:6c:a1:0d:
4f:7c:62:8c:8c:e8:b2:da:e3:45:86:5b:39:e3:17:
e6:79:6f:90:d4:e7:97:8e:49:0b:a1:c7:95:7c:3f:
09:6b:81:b6:bc:36:9a:c9:f6:73:6d:25:c0:75:42:
70:36:d3:57:1d:88:7b:d9:15:8d:de:b7:19:e1:de:
06:ba:b0:05:b2:f8:c6:59:fd:16:d6:d8:14:e9:4c:
e1:d6:48:cf:92:db:2f:92:e3:fe:a2:94:c4:27:aa:
e8:3e:02:12:1e:58:9e:a8:74:20:aa:ac:b0:6b:0a:
5a:b3:07:cc:b1:6a:8b:fc:ca:c3:16:bb:1d:6b:c5:
46:12:21:4d:dd:b0:51:59:bb:7c:30:4f:0e:e7:5f:
c3:2f:de:95:6a:b2:cd:e3:d6:fa:48:a4:41:bc:46:
d9:d5:9e:63:cf:97:5a:6c:40:3b:b9:5f:6a:d3:fd:
7f:b3:bc:8e:7c:a9:a4:bf:e5:39:c3:5b:e6:a8:72:
ab:b8:c5:00:dd:62:6d:8c:a7:ca:ba:22:26:bd:4c:
a1:e1:ba:d2:6c:78:6e:2d:bd:fd:d0:5a:40:ae:bb:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A3:8D:5C:96:7E:79:DF:78:16:6A:15:63:DA:CF:64:6C:2B:53:AA
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:49:3d:9d:08:3a:e0:8e:f4:7a:80:4e:b6:b9:c2:83:8f:89:
18:94:5a:4e:9a:4f:67:3c:ea:38:fa:1f:e0:df:d6:84:c4:be:
e8:a5:6b:e5:51:c6:f1:ff:e3:9b:c7:f3:d1:06:77:91:d2:b8:
c0:83:f0:85:9e:e9:76:cc:ad:39:a2:2f:12:71:29:18:98:92:
41:8d:f9:f2:c4:0c:43:0c:64:10:5d:cb:4f:d7:e1:b2:24:07:
89:b9:d8:9d:2a:12:4f:a0:ac:67:27:5b:76:24:4e:4d:55:97:
0d:13:b8:3c:39:8a:f9:08:65:23:14:23:5d:3a:a1:48:d2:1f:
c8:84:f0:28:88:1f:7e:3f:b3:d7:17:0c:86:d8:67:d0:12:98:
17:d9:da:34:cc:c9:62:a2:f5:06:03:03:df:9c:b2:cc:f4:cc:
83:9d:1b:70:5e:bc:80:c0:67:59:ba:0d:e6:be:b9:38:53:b1:
a2:31:9a:cd:35:ee:29:22:87:e7:f0:5f:0d:7d:0e:6a:42:e0:
6c:7a:8f:c7:9b:49:12:10:73:b1:94:bc:79:05:54:ab:e3:fd:
b0:fc:a8:b3:87:92:ac:7e:0e:0d:ec:73:9c:fb:68:f3:95:42:
dc:88:04:ab:6b:9c:8b:e8:db:e2:80:36:ec:73:36:4a:5c:1e:
27:d9:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:44 2026 by rpki-client