Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: QupOMjiIcI4xzN3c04ffvdq8+pgCS1JNCeoh2Ifv5T8=
Subject key identifier: A4:A8:75:EE:53:44:DD:78:86:E0:34:DF:06:9A:FA:37:4D:C9:EA:D1
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 019F18D625D913E9C8B31278C154EF8A3747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 14:01:55 +0000
Manifest this update: Tue 30 Jun 2026 14:01:55 +0000
Manifest next update: Wed 01 Jul 2026 14:01:55 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: PMefUVtBfE9pEyDM7nGS1eM4DDNim55RBe8hEqZC404=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:25:d9:13:e9:c8:b3:12:78:c1:54:ef:8a:37:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Jun 30 14:01:55 2026 GMT
Not After : Jul 1 14:01:55 2026 GMT
Subject: CN=a4a875ee5344dd7886e034df069afa374dc9ead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:b9:85:37:58:69:c3:83:f4:42:d2:16:bb:
06:ea:d9:cc:d4:c3:25:32:de:20:f5:da:83:f9:0c:
3e:b1:e8:46:51:11:12:b2:04:d1:ea:a7:a9:23:9a:
4c:81:32:ec:72:64:be:f5:98:85:5e:12:0f:50:ff:
31:11:d1:02:ad:52:27:45:6d:4a:c6:e9:27:8f:89:
5b:24:80:ac:20:7d:14:09:d7:71:7b:7e:e2:82:2e:
d2:91:eb:0d:92:95:a0:c1:34:1e:09:61:ed:be:ac:
ae:00:6f:69:50:b5:8d:01:26:73:90:b1:e3:1c:bb:
2a:40:ce:d1:e1:f1:f0:97:bc:92:cd:c7:de:cd:bf:
91:92:f8:95:07:13:a7:15:4b:ef:97:d0:39:45:a1:
4a:f6:35:4f:82:ef:60:ed:e1:f1:f2:24:48:d0:69:
6b:8f:68:90:c8:4f:4c:8e:e9:8a:c8:24:e9:6e:ad:
c6:63:18:13:75:e9:4c:0f:08:e0:68:a1:cc:23:cf:
be:ad:e5:bc:25:4e:06:94:c3:f1:d3:ec:41:2c:87:
d6:ab:27:86:3f:e5:08:05:93:23:a0:91:00:83:d2:
33:ad:21:cb:b2:9f:4e:be:12:fa:41:f7:67:ae:b9:
c7:1b:c3:f3:67:26:dc:6b:83:cc:e3:44:f0:81:74:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:75:EE:53:44:DD:78:86:E0:34:DF:06:9A:FA:37:4D:C9:EA:D1
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:a0:87:2f:71:c9:ac:4f:56:b7:fe:65:0e:a8:d3:f6:21:
51:0d:fa:68:4c:4a:55:e2:cf:82:a3:40:45:79:1a:62:c6:3b:
22:b3:a3:48:77:2f:32:88:8b:ae:27:7a:02:a9:47:a3:a5:82:
61:67:e5:04:c1:17:20:62:c0:2b:08:b8:f4:99:1f:44:57:ad:
07:92:cf:29:57:25:38:f9:dc:55:e5:60:08:0d:8c:8d:00:ad:
0c:ba:e0:d7:69:3a:8b:59:4f:71:d9:53:1d:fc:72:00:86:a5:
5a:2d:ef:f1:b0:c7:8c:30:c0:c8:a2:24:93:6e:50:6a:23:6b:
ac:90:58:af:08:e2:4c:b9:5b:41:ed:65:7a:47:47:64:41:76:
f8:7c:bd:a5:c0:d1:09:d6:f4:95:87:ec:cf:88:1f:70:2f:19:
0d:58:a1:52:47:46:11:b3:ad:c8:31:c1:7b:48:19:80:db:c4:
fe:8f:72:22:98:fe:c8:0b:57:7d:63:5b:31:da:fa:f5:34:94:
9d:70:95:e6:ac:18:53:79:bc:78:9a:c0:85:6a:fa:e3:a5:55:
29:6a:d3:30:56:c2:49:f8:9f:1a:58:e6:1f:a2:10:53:ea:cf:
1d:cb:05:a7:6f:af:ac:c6:2a:4f:b4:0f:3a:c7:3d:42:78:02:
ed:ed:a3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:52 2026 by rpki-client