Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: hRottKTYmY9OrHDqocU58ge3OPB2YsDoQ3gXkNbcxbM=
Subject key identifier: A1:F3:FB:8A:1B:62:CB:34:06:F6:43:08:0C:BE:54:10:80:65:99:36
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 019E311716616C90C360861C091BDA326BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 14:00:57 +0000
Manifest this update: Sat 16 May 2026 14:00:57 +0000
Manifest next update: Sun 17 May 2026 14:00:57 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: jg9Ukng+d5Q7z4Wuh8rpQ4drNJeB+y5zB7sDEeKsswg=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:16:61:6c:90:c3:60:86:1c:09:1b:da:32:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: May 16 14:00:57 2026 GMT
Not After : May 17 14:00:57 2026 GMT
Subject: CN=a1f3fb8a1b62cb3406f643080cbe541080659936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:79:61:41:52:6f:d8:d0:2c:3a:80:f6:19:
e6:03:da:4c:d0:24:18:58:9f:1c:02:c9:5a:26:d5:
c8:f7:ee:8d:d7:07:a2:22:52:df:03:32:3b:15:25:
8c:b1:33:1c:1b:5e:90:2f:bb:da:8c:94:32:a7:df:
2e:fc:a5:c9:7e:dc:11:1d:0a:d7:2a:4a:54:16:69:
0f:d2:5f:e4:74:0b:2a:84:9e:77:5f:3c:06:ba:11:
4a:2f:d4:7b:1e:ec:3b:b3:c4:3e:d1:0e:cb:ea:78:
e7:ee:d0:f7:bf:e6:57:83:0b:2e:cf:54:c7:7f:56:
08:5c:1a:17:aa:fe:00:74:fb:9b:b0:1f:fc:63:6b:
51:62:8a:b7:d1:f5:c1:bd:e9:c4:d1:6c:58:16:e8:
7e:2f:e0:2c:ba:77:99:e6:e4:1c:aa:1f:e8:45:2c:
6f:46:04:34:c4:91:6d:20:80:35:4d:3d:35:f9:3f:
01:f2:98:04:6f:42:80:54:4b:10:15:53:b6:58:b2:
b2:8c:02:4f:15:ac:66:87:37:b1:06:60:de:89:7b:
80:a8:52:cc:cd:3f:aa:63:e0:96:5b:24:1e:36:51:
8f:8c:8b:f5:84:c9:94:ce:c8:27:bb:fa:0b:db:38:
e2:39:f3:6a:4e:f9:05:55:fb:89:f8:b4:1b:14:cb:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:FB:8A:1B:62:CB:34:06:F6:43:08:0C:BE:54:10:80:65:99:36
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:af:be:db:21:5e:4a:90:72:60:f5:f2:8c:b9:eb:07:28:44:
14:fc:7c:66:b9:26:b9:52:99:85:0d:bb:09:d0:f7:92:3e:46:
6a:3d:c6:ab:94:67:26:db:fc:72:77:0c:32:3f:fc:96:aa:11:
68:a4:c7:6e:fd:68:05:06:f9:a2:f2:8d:6b:c0:9b:81:ff:12:
3f:d2:ee:6c:a8:8b:2c:b8:ab:f4:82:9d:ad:a6:e9:19:cb:ea:
1a:85:44:c0:21:95:d8:33:0f:8b:9d:1a:b7:2f:ca:32:7a:b8:
83:27:ef:74:65:ef:4e:91:34:11:00:12:c6:92:d4:89:99:e3:
0a:f9:86:79:03:37:ea:f1:07:af:4d:b1:95:8d:58:f9:86:23:
c5:fa:d5:51:99:16:3f:fe:cc:be:bf:54:70:6c:35:b6:50:5a:
2c:a2:cd:98:6b:ef:4a:e9:5c:eb:1f:50:c4:3b:c2:42:a4:1d:
e3:aa:9e:16:d0:88:63:1c:a4:bc:5c:b5:51:c2:21:1c:44:0b:
c3:7c:0a:64:2f:1e:fb:52:b2:8b:a5:08:f6:0a:ae:ae:75:25:
63:b7:4d:ac:ac:3b:79:09:8d:17:ac:ae:a7:c1:51:80:b2:e7:
11:99:55:93:68:11:05:22:51:e5:14:d7:60:43:de:a1:e4:57:
b5:9c:a0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xFxZhbJDDYIYcCRvaMmvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi
YTEyNjAwHhcNMjYwNTE2MTQwMDU3WhcNMjYwNTE3MTQwMDU3WjAzMTEwLwYDVQQD
EyhhMWYzZmI4YTFiNjJjYjM0MDZmNjQzMDgwY2JlNTQxMDgwNjU5OTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd55YUFSb9jQLDqA9hnmA9pM0CQY
WJ8cAslaJtXI9+6N1weiIlLfAzI7FSWMsTMcG16QL7vajJQyp98u/KXJftwRHQrX
KkpUFmkP0l/kdAsqhJ53XzwGuhFKL9R7Huw7s8Q+0Q7L6njn7tD3v+ZXgwsuz1TH
f1YIXBoXqv4AdPubsB/8Y2tRYoq30fXBvenE0WxYFuh+L+AsuneZ5uQcqh/oRSxv
RgQ0xJFtIIA1TT01+T8B8pgEb0KAVEsQFVO2WLKyjAJPFaxmhzexBmDeiXuAqFLM
zT+qY+CWWyQeNlGPjIv1hMmUzsgnu/oL2zjiOfNqTvkFVfuJ+LQbFMvRRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHz+4obYss0BvZDCAy+VBCAZZk2MB8GA1UdIwQY
MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt
ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2
LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa++2yFe
SpByYPXyjLnrByhEFPx8ZrkmuVKZhQ27CdD3kj5Gaj3Gq5RnJtv8cncMMj/8lqoR
aKTHbv1oBQb5ovKNa8Cbgf8SP9LubKiLLLir9IKdrabpGcvqGoVEwCGV2DMPi50a
ty/KMnq4gyfvdGXvTpE0EQASxpLUiZnjCvmGeQM36vEHr02xlY1Y+YYjxfrVUZkW
P/7Mvr9UcGw1tlBaLKLNmGvvSulc6x9QxDvCQqQd46qeFtCIYxykvFy1UcIhHEQL
w3wKZC8e+1Kyi6UI9gqurnUlY7dNrKw7eQmNF6yup8FRgLLnEZlVk2gRBSJR5RTX
YEPeoeRXtZygIQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:35 2026 by rpki-client