Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: tKjfEdjryx6o6ZYxIDF7ketUHty7w5XPZLVYR3g8O7w=
Subject key identifier: B4:74:A2:E5:B9:97:B5:09:DD:27:D9:82:E5:F7:45:32:75:87:68:6D
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019E30E00097947ADB1588BD62B638FB7EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0BB2
Signing time: Sat 16 May 2026 13:00:47 +0000
Manifest this update: Sat 16 May 2026 13:00:47 +0000
Manifest next update: Sun 17 May 2026 13:00:47 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: x95lnWi0vqBYPkxQt0zLXN1Ec3oy82dwRxxaHJgq09w=)
2: wwo_DxaaSlkeSM_BlRmma4rbf0I.roa (hash: mqk1cRlhcQcCo6/bhwR5BjCAjJJ/RC++qOvJ8wDbdP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:00:97:94:7a:db:15:88:bd:62:b6:38:fb:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: May 16 13:00:47 2026 GMT
Not After : May 17 13:00:47 2026 GMT
Subject: CN=b474a2e5b997b509dd27d982e5f745327587686d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:96:a8:71:06:92:f7:5c:59:84:98:3a:8a:
77:a5:6b:1f:ab:46:3f:70:8c:10:e4:1b:09:30:b4:
8d:f8:ca:5d:28:e5:8a:d7:cc:30:f1:24:50:a2:36:
2c:6b:ae:8d:d4:fa:15:b1:00:39:b2:e4:70:4d:dd:
50:1f:39:e2:91:4e:75:85:5c:c5:3c:2b:2f:40:51:
eb:e5:6a:d9:6b:07:db:7f:27:c9:a2:3a:3d:29:14:
ad:8d:c9:86:e1:97:90:4c:92:78:f8:a8:4d:8d:e8:
01:68:5b:04:5e:3c:d7:65:61:03:50:65:0b:54:63:
a1:57:b5:0d:89:76:74:60:c8:17:8a:51:33:58:f1:
4b:25:dd:bf:e0:5b:1e:23:b6:5b:f6:42:51:32:1c:
0e:45:72:ee:71:7f:a9:fb:26:14:95:a2:3d:77:f0:
b4:ab:da:e8:51:29:3b:39:19:8f:aa:d3:b5:f4:9b:
fb:dc:33:78:06:06:f2:7d:99:f5:77:9a:a5:6f:89:
38:e3:3c:2b:03:dc:30:9c:5c:0f:5b:0d:5c:fd:d9:
83:d2:2c:32:e4:1f:e1:43:ed:9c:61:f1:57:eb:cd:
4d:cc:2e:c3:12:f5:44:48:63:1e:7d:08:a3:f2:01:
12:cd:c0:77:a3:25:4f:d0:b1:7c:1f:64:c8:13:f9:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:A2:E5:B9:97:B5:09:DD:27:D9:82:E5:F7:45:32:75:87:68:6D
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:51:a7:d5:5d:00:02:04:eb:b4:7c:a1:75:6a:26:7a:cd:62:
e9:af:54:a2:bf:4c:ce:4a:4a:4b:e7:cd:8d:9a:f9:61:88:d6:
9c:68:6b:82:f6:b5:2f:02:b3:7b:be:62:d9:81:51:68:c3:5c:
c8:8f:e3:6f:f5:9e:32:12:c9:3f:4e:fe:ea:e1:51:c4:e5:ac:
c3:9b:eb:93:9e:44:13:21:47:87:c5:ac:76:8b:4f:7a:c0:6b:
6a:c9:00:ad:43:76:a6:d2:32:bb:6a:ac:ac:ad:fb:64:41:2a:
71:a2:53:b2:91:81:78:92:ec:31:54:cb:a9:4b:52:ed:39:ac:
27:69:4c:ff:99:fc:3a:71:c2:df:96:57:4f:54:72:cb:f7:6e:
a6:7a:6f:75:ab:f4:34:9a:a1:32:7c:6f:5e:35:93:5b:cd:14:
17:e1:96:6a:d5:6b:89:d2:f1:42:e1:90:48:66:d9:f6:19:8f:
e6:d3:73:49:a4:03:08:99:7b:60:4c:9a:46:38:9f:e1:6c:70:
a0:dc:14:40:6b:18:78:ec:90:a3:74:af:1c:91:f2:c5:5d:ad:
8a:e3:db:67:cd:35:57:62:2d:f8:d6:e5:b3:71:4e:03:50:01:
90:9d:11:9a:5a:89:6f:6d:cb:a6:03:3b:95:ed:31:16:55:d9:
a0:d3:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:40 2026 by rpki-client