Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: BlnwMtVcDyoGDBi54SVR3y4UGkiwiEf+2ZxAvy/xGR0=
Subject key identifier: DA:D9:67:4D:5F:8F:B8:93:6B:F9:32:A7:88:D3:2F:44:D4:65:81:3B
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 01A0CAB509E2DBC16E30D223F4051C19E34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 16C7
Signing time: Tue 22 Sep 2026 20:00:57 +0000
Manifest this update: Tue 22 Sep 2026 20:00:57 +0000
Manifest next update: Wed 23 Sep 2026 20:00:57 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: hY0PVPdhdRF6yBQDyjz05Q/YPqNImkZslbMwPurwG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:09:e2:db:c1:6e:30:d2:23:f4:05:1c:19:e3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Sep 22 20:00:57 2026 GMT
Not After : Sep 23 20:00:57 2026 GMT
Subject: CN=dad9674d5f8fb8936bf932a788d32f44d465813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:c6:06:62:bb:26:2c:3d:ae:b7:4f:7a:7e:
57:cd:56:80:69:da:d2:14:ec:d6:07:ef:3c:93:41:
d1:5c:fa:88:d7:b3:40:c0:5c:01:16:15:cf:b0:30:
3d:ee:19:5b:64:0d:6f:ac:2a:1c:2a:c2:de:9a:3b:
cb:5b:09:73:48:89:3b:ec:18:05:75:d6:fc:bb:fd:
78:03:3a:ce:0f:9c:a7:c1:b4:fe:cf:e0:a9:7c:2c:
7c:37:ed:38:fb:8e:c9:0e:85:51:ae:fa:16:fc:d1:
f3:3a:73:10:8a:72:09:26:bc:fc:cd:9c:f3:52:48:
f0:86:ca:5d:db:5d:e1:6a:25:aa:8f:a8:b2:7c:65:
60:11:f8:c5:ba:e1:8f:7e:fb:be:18:55:35:74:bf:
45:0d:93:94:a2:19:f1:5e:58:32:3a:f9:41:15:80:
5e:85:ab:8e:b9:e2:02:fb:a3:2f:32:b0:3d:b1:23:
1e:4d:db:ea:97:f3:7a:e7:c7:36:97:8e:ee:3e:7a:
f5:71:c6:c3:f6:5f:43:70:fe:3e:6c:3b:7b:3d:ba:
86:ff:30:d7:1c:a8:96:ff:28:2c:a1:53:bf:07:5f:
ca:5c:d9:1d:00:4e:35:ef:76:ee:c6:ea:97:9f:fa:
c2:3a:16:9b:a0:31:c2:f4:b3:81:20:8b:30:59:af:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D9:67:4D:5F:8F:B8:93:6B:F9:32:A7:88:D3:2F:44:D4:65:81:3B
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:dc:68:36:e0:dc:14:d9:9f:2a:11:66:1f:4b:43:01:a8:
c2:9b:d7:55:b6:ea:a3:0e:0a:1b:06:f0:ae:0a:b0:c6:31:4f:
f0:2e:5e:6a:e3:b8:6c:f4:f2:26:0b:e5:a8:a4:df:97:79:c7:
0c:2e:36:9a:ff:6e:06:37:c6:59:36:43:90:6a:49:69:e1:d1:
4b:a7:79:15:aa:b3:ba:2d:17:e3:f3:b6:28:a3:21:4c:bf:c0:
15:e0:48:93:b5:fe:ab:56:87:87:2a:07:69:9d:41:74:e6:06:
2b:ef:68:e0:e2:68:a6:a5:74:59:e4:09:63:d6:66:5b:a7:82:
63:ba:2a:98:b2:6d:3a:7c:7b:9c:49:01:9f:ed:3a:01:6b:56:
0d:70:b3:0d:1d:12:01:a7:be:b6:ad:0b:38:a2:44:a0:35:1d:
1a:5d:37:14:3b:2f:a6:8b:63:61:83:a6:62:96:90:58:d4:27:
b5:7e:09:5f:73:ac:d9:4e:2a:d1:ed:93:ae:df:fb:77:69:ca:
0c:a0:b1:7c:cc:e9:6f:f8:a3:d3:94:dc:62:94:1d:f2:40:0a:
70:23:0e:2a:2c:2e:dc:fc:49:b1:ef:72:37:01:d0:ac:9f:f7:
fb:29:82:23:78:46:59:4e:0f:c0:74:20:fe:9d:42:70:80:7c:
18:42:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:27:22 2026 by rpki-client