Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: Q3YzQxPqh/yaU0Lv7B8AoF5B8anK/Czm/I6rEsBUbII=
Subject key identifier: 0D:DD:8F:A6:7F:E5:05:E9:6A:FA:BF:88:D8:FE:21:37:A3:59:B0:04
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 019D38D2DC8AB7925EC143DBD75BEC771C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: tKBGei/sjYD5tWE3JKLclEmjbyj7bOeUzBgRQl7oNFg=)
2: bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa (hash: NnbPwHGrcdim6yrTkVQg/I67nU9XxwzvJk8QjULLx4A=)
3: oZr_EXsyQjW2TSmeXVYxNow-uRc.roa (hash: MMqu7TNNLRdy1w2DS9JU9E6roUikurSMo3WnZQdO9kU=)
4: zd8dlXTmCT-0m9TffsLEUAvTJYs.roa (hash: PkfGxsX99XUZA8APj8L5438qH49FAld+9Ynqz6Rjm9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dc:8a:b7:92:5e:c1:43:db:d7:5b:ec:77:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=0ddd8fa67fe505e96afabf88d8fe2137a359b004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:04:d2:92:c7:ef:1a:b2:1c:48:95:00:4a:
41:aa:49:de:cc:33:55:b0:d6:53:89:27:9b:6c:e8:
69:34:48:92:59:9b:3d:71:bf:39:bf:70:c9:1f:5e:
9a:b7:8c:15:36:64:96:65:8b:f0:0a:6f:2f:ec:c9:
69:c3:a1:3c:93:57:c3:c5:ce:36:b1:b7:b5:51:a6:
b2:e7:b5:62:90:ee:9c:a0:0e:87:6a:a0:69:96:a7:
5a:e8:6b:83:9c:37:ea:23:ac:3c:33:c7:18:c3:cf:
1c:f2:43:6f:11:99:0d:03:08:f8:1c:26:ea:03:ec:
69:50:47:0b:ca:a5:84:5e:3e:58:14:66:36:bf:2b:
df:4c:40:a8:c2:70:17:1c:28:91:b5:05:36:9e:d9:
a7:ad:39:67:5c:7c:87:ea:75:1d:11:f5:93:ff:0f:
64:f5:da:75:fd:27:a9:10:cc:51:67:90:c7:ad:6d:
5d:2b:b6:17:94:4c:cc:1d:56:c0:74:03:aa:f1:72:
8b:68:b0:3a:fc:c9:19:d8:cd:33:27:52:68:a2:33:
0f:32:9c:83:29:bd:f4:df:20:74:f8:ba:7a:73:c4:
ba:65:ec:e5:39:64:73:1b:9c:88:aa:b5:67:3f:09:
dc:62:8f:18:40:c7:29:32:e6:20:c0:e4:74:d6:8d:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DD:8F:A6:7F:E5:05:E9:6A:FA:BF:88:D8:FE:21:37:A3:59:B0:04
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:ba:43:4e:35:f6:19:23:2e:6f:84:f5:8d:17:9a:78:8b:
16:5d:b6:69:3d:68:fc:eb:f6:41:b1:a9:5d:de:12:b9:9d:27:
2e:8a:7e:79:8c:bd:c2:ae:22:5d:79:bf:fb:bc:d3:c2:02:bd:
22:69:a7:bf:2c:4d:cf:75:e9:1d:e1:fc:ce:14:b9:4f:6d:11:
40:e0:be:7e:f6:ac:72:c4:c5:57:88:c5:ce:57:77:4b:f9:24:
7b:3d:00:e2:b6:ff:1c:08:b6:15:e7:9b:ab:05:f4:43:11:b4:
c7:2c:e1:6d:03:38:4f:d5:e2:d1:fa:3d:d5:59:de:4a:ea:7f:
74:bf:96:e5:87:42:70:ec:d3:af:ae:43:c4:de:e3:54:cc:76:
1a:c6:0e:81:10:97:54:28:9e:e6:94:d9:83:7d:43:ad:4f:35:
a4:c6:ca:92:4e:0a:97:04:6b:96:22:8b:7a:11:bc:18:d3:9b:
8a:e5:f3:e8:8f:e6:4b:87:cf:11:5f:c2:54:f4:90:9a:f7:1c:
d8:13:a6:df:26:30:05:36:37:7f:19:5c:40:a3:34:af:be:78:
77:8a:7a:74:02:07:f1:34:fb:8a:30:ce:b9:51:e9:f9:64:2c:
aa:79:b8:29:d0:e5:50:36:64:de:c0:a2:b4:99:d8:62:de:c9:
99:cb:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:14 2026 by rpki-client