Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: sXi3ReZ7V06aB8XEAF3DpkVpSMwPJ9Kqe/X23Y27pj4=
Subject key identifier: C2:59:6B:8F:2E:93:02:CD:3C:FD:5A:32:C6:4D:0B:65:1C:FD:13:E2
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 019D37F6DFD385AAF170C3DBB874FE6B9DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:18 +0000
Manifest this update: Sun 29 Mar 2026 05:00:18 +0000
Manifest next update: Mon 30 Mar 2026 05:00:18 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: wAWxpN6sWFnGYTOt9ctjrLWrk/Qht4cF0Sg0Fgr+yHg=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:df:d3:85:aa:f1:70:c3:db:b8:74:fe:6b:9d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Mar 29 05:00:18 2026 GMT
Not After : Mar 30 05:00:18 2026 GMT
Subject: CN=c2596b8f2e9302cd3cfd5a32c64d0b651cfd13e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:ee:e1:a6:d9:6b:a4:bb:1b:ac:ee:f5:14:
15:7a:a7:17:1f:13:99:ff:59:a7:04:e4:00:0d:01:
5c:a4:77:18:76:9c:11:84:a5:1b:46:53:b4:42:bb:
01:c0:69:16:57:69:d0:a1:ef:20:9d:fd:d3:99:98:
8c:6e:1e:79:17:f8:1f:e8:9a:5b:16:f8:d3:6a:69:
a2:1b:c2:4c:83:8a:1e:8f:d7:99:b6:a7:5f:dc:50:
94:c1:94:ff:06:48:df:f9:3d:2a:ea:4c:42:7e:55:
9f:b2:b6:f0:de:62:56:80:e6:81:ec:7c:d7:9e:7f:
52:03:1e:4a:58:30:bf:e0:92:7d:82:fe:6b:c0:8e:
23:de:0a:87:34:94:db:0c:c1:78:25:21:13:2f:83:
3a:7f:7b:c5:17:64:f7:e4:dd:90:c0:d0:34:2e:b7:
62:6f:a4:5f:b8:dd:ae:83:ab:97:01:c4:ea:65:c2:
7e:58:55:ac:94:a9:5f:eb:da:59:a8:a8:30:96:bf:
fb:a0:88:dc:13:b1:36:b4:e7:aa:94:9a:34:b5:7d:
ac:f1:51:0d:a5:53:77:ae:21:ee:03:da:2b:43:41:
f0:21:2d:33:cd:d5:17:f6:ce:63:4f:63:2f:67:76:
62:0a:52:50:10:a1:f5:5e:89:35:76:f3:e0:68:05:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:6B:8F:2E:93:02:CD:3C:FD:5A:32:C6:4D:0B:65:1C:FD:13:E2
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a7:09:a8:54:61:9d:80:38:9f:e6:09:67:ed:b0:23:16:f2:
60:ef:7d:e8:ba:72:0b:93:7d:91:67:79:29:d4:d2:96:9f:87:
e2:9a:5a:59:1b:cf:f1:6e:72:a4:6b:bc:d2:e8:cf:19:d8:97:
32:46:7a:2f:67:50:0e:d3:36:74:7a:3b:69:ec:ad:99:21:1d:
5d:3f:af:20:ae:9f:66:87:7a:83:87:df:50:2b:85:02:f9:ce:
13:39:f8:57:40:cf:70:92:a2:db:95:63:a7:87:98:6d:65:8d:
5a:4c:4c:61:a6:2d:23:b5:81:be:f9:1d:aa:dc:64:bb:0e:ba:
e2:82:8e:4f:2c:80:f4:56:7d:7f:64:cb:66:80:e4:fd:5d:40:
e8:2f:6f:54:70:91:41:94:18:d6:0b:0e:b9:da:ac:50:56:16:
97:e1:54:7b:42:f6:0b:09:da:fa:1e:39:b5:20:54:0f:9d:42:
26:b1:0b:c6:b7:3c:d9:76:62:0d:95:db:2e:42:ab:3d:11:51:
bb:39:1f:0e:b5:44:f7:4f:57:19:ce:76:04:6e:6f:2b:de:57:
ec:bc:ec:33:42:b7:56:e9:27:87:90:1a:f3:21:d3:ea:1b:49:
1e:58:36:18:1a:a0:fd:04:a1:58:9b:52:5c:5c:11:34:ac:4a:
ba:cb:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:23 2026 by rpki-client