Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: Oo950gXzyyF7RBZyn7bZAV6XICx0ap73373oQ4dIP9g=
Subject key identifier: 16:9F:1B:7A:0F:1B:62:BF:9D:57:E0:EF:CA:17:60:C7:3F:FC:B3:26
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019F8FEBBEB85721079C4A7797BD7CFED48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 1624
Signing time: Thu 23 Jul 2026 17:00:19 +0000
Manifest this update: Thu 23 Jul 2026 17:00:19 +0000
Manifest next update: Fri 24 Jul 2026 17:00:19 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: NvQLMJWJhAZJW4HR4YafRdhzgrZI9DPJ9zrbOSVx2qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:be:b8:57:21:07:9c:4a:77:97:bd:7c:fe:d4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Jul 23 17:00:19 2026 GMT
Not After : Jul 24 17:00:19 2026 GMT
Subject: CN=169f1b7a0f1b62bf9d57e0efca1760c73ffcb326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:18:f1:b8:b5:77:c5:46:c4:e2:7b:0f:2a:
84:6e:a3:df:65:d8:a7:35:6d:ed:43:3a:2d:e1:78:
9e:e9:76:74:2c:ae:f9:36:ca:70:01:03:4e:7c:33:
15:99:17:cf:c8:4c:ef:6b:aa:cd:af:2d:7a:24:06:
3f:f7:fd:f6:56:2a:ec:b2:e0:ba:db:4d:79:cd:1c:
2d:2b:af:62:0f:69:bb:cd:d1:8d:c6:0b:7c:46:25:
50:ef:82:d7:9c:f4:80:a2:36:70:c3:d3:b2:2d:0b:
63:99:4d:51:35:a3:7b:fb:33:a8:13:f2:b7:63:d3:
42:e2:08:1e:b8:88:b3:18:c4:14:58:48:a3:f0:7a:
b7:d8:e7:a0:6b:c3:14:7e:b6:b5:29:3f:4c:85:39:
43:41:f7:5c:3f:60:99:06:cd:66:be:3f:79:85:b7:
b8:21:11:0a:7b:17:63:46:f8:f9:62:be:1a:90:5b:
af:b9:70:01:e2:f9:f0:c8:65:c3:1d:e8:d5:69:d4:
97:07:7e:35:e2:fc:b6:a4:9e:d5:0e:00:ff:6c:c9:
34:2c:40:f2:c8:2a:02:ba:ab:ca:37:d4:52:3b:dc:
61:22:97:24:64:1b:26:99:31:a2:4d:96:d2:9a:16:
02:d9:47:05:3f:fe:91:c1:80:fa:30:b5:52:1c:7d:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:1B:7A:0F:1B:62:BF:9D:57:E0:EF:CA:17:60:C7:3F:FC:B3:26
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:43:80:d5:cb:52:11:c2:57:71:cc:41:3d:1d:54:5b:61:e1:
42:b6:ab:ae:34:ad:ea:56:e6:d7:47:52:02:ef:6e:3e:9f:38:
55:62:34:98:35:d6:25:64:1c:0b:73:6c:cf:74:69:f6:49:26:
36:b8:4b:92:fb:ee:ea:ef:f2:f2:9e:13:0d:4c:61:72:01:71:
dd:88:4d:25:af:94:a9:33:b3:05:b7:72:29:bf:41:1e:f7:f4:
24:26:3d:37:9c:29:22:81:fd:ce:06:4e:50:64:ee:cc:85:42:
ee:1b:fe:e3:cc:19:bf:fd:a9:66:2f:6a:a1:5e:80:86:62:df:
d5:09:01:7b:aa:25:ae:b0:e8:44:46:6f:d9:58:f9:09:56:5d:
54:8a:18:12:2b:20:70:24:15:00:f3:88:ac:30:c2:8d:71:29:
cf:06:ac:13:12:b0:4f:63:2e:4d:4c:0b:bc:70:02:c1:4c:28:
08:24:f3:3d:0f:33:03:6f:89:6d:97:7c:58:ac:7b:86:d1:97:
9c:d6:a0:df:63:b1:37:56:68:e2:f6:b0:95:1a:0a:6f:e3:dd:
40:3e:87:7c:69:76:f3:d8:8d:bc:f4:52:b4:e2:2a:ea:25:f8:
2f:15:b0:85:8a:eb:b8:19:d4:25:ca:be:49:8f:a9:69:8a:46:
c0:e4:43:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:11 2026 by rpki-client