Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: xsrhloPY01NNby8v87VaO+rK/EB99V8yCWDpaHrJrTk=
Subject key identifier: 9E:42:EF:4A:0C:44:F7:E4:AC:F8:D4:4B:7F:E4:6A:BA:9D:12:6F:53
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019E1D230B35BA9492229C1FAA42F106DE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 1564
Signing time: Tue 12 May 2026 17:01:36 +0000
Manifest this update: Tue 12 May 2026 17:01:36 +0000
Manifest next update: Wed 13 May 2026 17:01:36 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: F34/n/QaolYybNgZ17xuNtkswTGqEHGMASju06ZA2ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:0b:35:ba:94:92:22:9c:1f:aa:42:f1:06:de:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: May 12 17:01:36 2026 GMT
Not After : May 13 17:01:36 2026 GMT
Subject: CN=9e42ef4a0c44f7e4acf8d44b7fe46aba9d126f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:4b:23:b7:d8:30:2a:59:54:a7:81:8e:62:
05:05:b9:f3:2e:a4:f3:02:f8:e7:9f:29:2e:6d:c2:
f1:b0:9d:4c:37:95:ca:3b:e7:a0:7f:92:93:83:70:
1d:d1:af:f3:3c:17:10:66:4a:17:61:ba:8f:be:99:
f6:a5:43:2a:76:27:c9:f8:3f:2a:9a:ac:fb:2e:ba:
10:fd:ff:9a:fc:36:dc:b8:6a:88:57:a6:4f:95:fa:
e5:11:11:1a:da:d6:1e:ca:29:49:17:93:83:d8:41:
fc:8c:14:52:c4:64:ec:b4:ab:7e:12:6c:f8:30:03:
ea:12:f7:6a:bc:83:f8:11:07:87:65:14:92:cb:1a:
55:9e:75:53:9b:ab:8b:f2:7b:e9:54:b2:01:f4:91:
cc:da:62:de:d2:7b:f7:c8:8a:f4:55:3c:13:14:7b:
92:7a:ed:6e:f6:5a:ee:aa:3e:0c:3e:02:30:fd:99:
57:5d:7d:3b:d3:f4:f4:39:4f:37:da:5b:f1:4c:12:
1d:99:29:34:b4:05:fc:71:5f:83:d9:6e:37:bf:52:
3a:9f:75:03:81:77:7c:97:c0:e7:bf:cf:0d:6f:91:
3b:d9:de:ca:d9:8d:45:65:40:8b:54:b5:70:80:39:
84:96:07:5d:ab:0d:18:a7:ca:23:46:f5:3d:20:4a:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:EF:4A:0C:44:F7:E4:AC:F8:D4:4B:7F:E4:6A:BA:9D:12:6F:53
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e7:bc:00:56:2b:99:f6:d2:63:81:37:be:c1:9f:ec:95:09:
0e:29:64:c8:b3:73:59:95:4c:68:eb:5d:ae:f4:95:8e:8e:50:
1b:1a:d2:99:bd:28:c5:f6:74:12:7f:a3:2e:9a:27:3d:ef:cc:
02:02:86:a5:04:1a:53:b3:d2:49:07:cc:66:95:b8:60:45:ff:
be:75:da:2f:2d:fd:9a:97:e4:2b:7a:50:26:fa:59:8f:0a:25:
28:69:b6:38:53:1b:b8:c9:1a:c0:3b:c0:fd:fe:44:f3:6b:84:
a2:90:da:23:ac:9f:90:87:a9:81:94:59:4d:fe:bd:30:a5:f1:
bf:65:ed:b0:97:24:99:c8:8d:ae:de:58:08:31:40:0d:5e:9a:
89:5f:42:5b:c7:1b:f6:2c:ae:e2:aa:b5:ec:8e:e2:e0:0a:b8:
d0:dd:3d:0f:54:3a:f2:81:8a:73:e4:4b:af:0d:2f:2b:f1:c3:
ca:b8:6a:3d:90:5f:96:f3:5c:cc:f9:24:18:ad:83:f0:b2:6f:
92:f0:d9:be:3c:d4:76:d8:00:91:ba:de:6e:77:f0:76:9d:a1:
49:6d:b0:1e:30:54:2c:26:01:93:b1:7a:c7:d6:1a:ed:18:cc:
44:b3:c0:15:be:d3:33:25:39:ba:83:ca:52:79:95:50:9e:31:
2c:07:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:16 2026 by rpki-client