Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: GcHqwP5ev4hWInmEsk/pQXtO344mfPDT8vR0g8lAEoU=
Subject key identifier: 2B:2E:41:38:29:DA:5F:CF:BA:3C:B7:36:70:4F:6D:57:A7:0A:BA:BB
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 01A0CB5974AB0760E9BC7B461932DA4EC457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0D37
Signing time: Tue 22 Sep 2026 23:00:32 +0000
Manifest this update: Tue 22 Sep 2026 23:00:32 +0000
Manifest next update: Wed 23 Sep 2026 23:00:32 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: cFCLk6CmiSAlEA0ya85Q3fosl42L3H+S9ah94rI7fRk=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:74:ab:07:60:e9:bc:7b:46:19:32:da:4e:c4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Sep 22 23:00:32 2026 GMT
Not After : Sep 23 23:00:32 2026 GMT
Subject: CN=2b2e413829da5fcfba3cb736704f6d57a70ababb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:04:fc:f1:d9:fd:dc:8a:f0:30:70:bc:82:
f1:bd:a3:63:fd:6f:89:b3:29:27:87:b3:3d:6e:62:
b3:91:63:0f:7e:dd:91:83:95:e3:66:65:99:61:82:
cb:0e:9f:5b:09:3c:c8:86:56:66:1b:f1:43:4a:32:
1d:22:64:56:41:ac:27:f0:b6:2b:38:70:ed:dc:4a:
54:05:3a:2f:df:09:27:df:4f:a5:2b:e8:a0:3a:c1:
5d:f4:a4:d7:47:5d:53:04:02:8f:f5:e2:06:2b:df:
19:05:67:93:27:01:07:c6:7b:d5:2a:1d:d6:a5:ee:
fc:27:c5:17:71:bc:6d:c2:0a:0b:9a:c8:85:e3:a1:
ea:ba:ec:09:2c:a5:6f:12:ae:88:ee:96:2e:9a:32:
0d:b0:20:d6:ee:42:b7:38:0a:bb:6f:7e:20:85:20:
3d:e1:1c:c5:51:f0:31:62:8e:01:7b:d5:f9:69:7e:
e5:3c:71:b0:24:54:e9:56:2d:cf:58:36:d4:56:d3:
19:7c:7c:b4:86:c0:e2:ba:f5:bb:b0:ac:5b:f3:2f:
8e:2f:49:12:87:c2:02:d6:95:e1:28:91:6e:9a:d4:
9f:3d:a6:1f:ec:cc:85:65:11:b6:96:68:5f:88:d9:
66:95:5e:6b:a0:8a:f8:4a:6a:f0:00:79:d1:5d:11:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:41:38:29:DA:5F:CF:BA:3C:B7:36:70:4F:6D:57:A7:0A:BA:BB
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:a1:f5:e5:53:45:08:3b:bb:e7:44:3f:34:db:b6:29:6b:
75:16:28:9e:75:38:bf:94:68:1a:be:e7:8d:10:33:9c:53:34:
d9:e6:00:a8:c5:6c:58:3e:b1:8e:e5:76:12:27:ba:0a:97:b1:
59:3d:4d:34:bb:13:e2:c3:f7:53:09:83:70:22:fc:37:63:8d:
72:98:24:45:8d:06:a2:e7:43:41:a8:e9:df:29:aa:c0:aa:14:
a5:36:22:05:1f:86:96:69:58:75:b1:64:36:ba:bf:92:f5:f4:
ea:9e:a9:75:1a:87:f9:4d:ac:19:4a:ec:77:15:d2:3b:d6:1d:
10:a4:c5:78:cf:09:0d:25:75:be:8c:3f:86:b7:ab:00:ef:70:
9a:2e:97:4b:58:64:2e:0e:13:01:51:b5:ac:9c:1f:90:1f:fa:
1d:2c:30:28:e8:9b:5e:e1:46:65:d1:e2:bb:bf:7d:e0:30:bf:
5d:06:46:73:36:d2:e6:00:f7:cb:f4:a9:58:85:b8:70:0b:e6:
bd:a2:ac:ae:ef:a0:ec:1b:74:4f:4e:08:94:21:bf:7d:40:7d:
2b:d3:4c:85:8b:b0:38:a7:70:02:66:4f:4e:cb:37:c6:a5:10:
60:14:73:e5:2e:90:08:3f:18:23:f3:01:88:4a:81:08:60:6c:
76:99:e1:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWXSrB2DpvHtGGTLaTsRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2
ZTM1NzgwHhcNMjYwOTIyMjMwMDMyWhcNMjYwOTIzMjMwMDMyWjAzMTEwLwYDVQQD
EygyYjJlNDEzODI5ZGE1ZmNmYmEzY2I3MzY3MDRmNmQ1N2E3MGFiYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+YE/PHZ/dyK8DBwvILxvaNj/W+J
syknh7M9bmKzkWMPft2Rg5XjZmWZYYLLDp9bCTzIhlZmG/FDSjIdImRWQawn8LYr
OHDt3EpUBTov3wkn30+lK+igOsFd9KTXR11TBAKP9eIGK98ZBWeTJwEHxnvVKh3W
pe78J8UXcbxtwgoLmsiF46HquuwJLKVvEq6I7pYumjINsCDW7kK3OAq7b34ghSA9
4RzFUfAxYo4Be9X5aX7lPHGwJFTpVi3PWDbUVtMZfHy0hsDiuvW7sKxb8y+OL0kS
h8IC1pXhKJFumtSfPaYf7MyFZRG2lmhfiNlmlV5roIr4SmrwAHnRXRHF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsuQTgp2l/Pujy3NnBPbVenCrq7MB8GA1UdIwQY
MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt
ODUxZWE2NWNiOThiLzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi
LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIOh9eVT
RQg7u+dEPzTbtilrdRYonnU4v5RoGr7njRAznFM02eYAqMVsWD6xjuV2Eie6Cpex
WT1NNLsT4sP3UwmDcCL8N2ONcpgkRY0GoudDQajp3ymqwKoUpTYiBR+GlmlYdbFk
Nrq/kvX06p6pdRqH+U2sGUrsdxXSO9YdEKTFeM8JDSV1vow/hrerAO9wmi6XS1hk
Lg4TAVG1rJwfkB/6HSwwKOibXuFGZdHiu7994DC/XQZGczbS5gD3y/SpWIW4cAvm
vaKsru+g7Bt0T04IlCG/fUB9K9NMhYuwOKdwAmZPTss3xqUQYBRz5S6QCD8YI/MB
iEqBCGBsdpnheg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:08:39 2026 by rpki-client