Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: ut6EPUFnL7Fi7twaGqm569zDc1PLgBvLrKH6q+bnuNQ=
Subject key identifier: 52:6A:DA:3A:4C:A9:66:E6:1E:EC:CC:2A:84:AB:E8:B8:B6:A1:97:98
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 01A1DD94C1D61F7CE9678ED3B881946F9D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0DC5
Signing time: Sun 15 Nov 2026 05:01:16 +0000
Manifest this update: Sun 15 Nov 2026 05:01:16 +0000
Manifest next update: Mon 16 Nov 2026 05:01:16 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: 5Ab24PWOourEf69M5fi9LIQoXP7z5oVRP1BlmsTHLZM=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:c1:d6:1f:7c:e9:67:8e:d3:b8:81:94:6f:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Nov 15 05:01:16 2026 GMT
Not After : Nov 16 05:01:16 2026 GMT
Subject: CN=526ada3a4ca966e61eeccc2a84abe8b8b6a19798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:40:e5:34:0d:df:de:ab:e2:4e:43:63:d4:
97:95:62:1a:95:fc:89:4a:e3:a1:53:9b:3d:ce:90:
5d:cd:d7:5c:ee:6f:0f:58:88:0f:12:7c:64:36:e3:
81:11:09:bc:a5:42:98:15:98:2c:bc:a4:89:63:34:
d3:f3:f1:ae:56:70:97:f2:5f:81:5f:a8:ab:1d:82:
51:c4:f9:6a:51:73:ff:ba:c0:71:ac:71:d0:b9:b3:
af:52:5c:85:db:67:9e:a2:c9:4a:82:9b:18:38:21:
5b:bb:de:6e:77:a6:ff:da:a3:29:63:05:1d:e7:1d:
61:64:ad:ae:80:39:75:6e:f2:2e:72:ba:5f:61:34:
d2:15:41:8d:c6:32:01:94:a5:80:12:f5:91:a7:8f:
e6:52:de:14:f3:a0:2e:ba:67:d7:fd:f2:2d:53:0f:
16:bb:53:87:4f:2f:ef:b6:dc:fb:bd:32:ed:8d:11:
ad:2b:b6:05:48:c6:41:e0:71:00:72:ab:7b:23:44:
60:6d:d1:89:aa:39:81:6e:f3:5a:c2:91:02:45:99:
70:62:32:02:a4:b1:59:bb:19:83:c1:41:df:fe:1f:
c7:a8:a2:e2:aa:04:c6:a9:8f:aa:af:d0:7d:02:b5:
7c:49:9e:1d:2c:ff:7f:b3:dc:46:02:b2:4d:e3:50:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:DA:3A:4C:A9:66:E6:1E:EC:CC:2A:84:AB:E8:B8:B6:A1:97:98
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:26:85:b2:c9:a5:e2:3e:ba:64:c7:da:d1:5a:c3:9a:63:4e:
ad:de:e6:fd:99:09:9e:96:99:bd:75:2a:23:df:e3:20:40:cf:
3c:61:46:54:89:dc:5b:25:32:5f:4c:16:2b:5c:5b:bb:c5:ff:
e7:a4:59:63:2c:5f:e2:90:38:de:ef:c6:4b:94:f8:ff:29:62:
02:75:44:85:b7:a1:95:bd:f6:bd:94:21:98:f5:72:a1:48:aa:
9d:9a:f9:af:77:82:98:7f:cc:95:66:e6:7e:ef:52:7b:1d:a2:
c9:35:1c:09:42:f2:8a:08:7d:b0:df:d3:2b:b3:dd:ab:94:a0:
e2:1a:4e:97:b1:2f:d0:2e:ee:5e:54:ac:8c:17:36:bd:08:7e:
c0:7a:ca:f5:6d:d2:c0:bb:d8:c8:42:36:99:cd:19:86:e7:a5:
17:01:9f:b2:05:f4:2e:1f:8d:4b:04:19:0a:a9:12:d5:46:22:
3b:7a:2f:98:2c:97:ef:18:d9:8c:82:f7:b7:df:a4:f3:fa:63:
40:9c:04:da:66:db:d9:1c:85:f4:74:ac:dd:05:69:e4:6f:1a:
2c:32:5c:d0:78:11:41:90:7f:ec:5a:2f:76:1b:42:18:db:58:
07:39:7a:50:06:3f:8f:5d:12:04:41:08:6a:93:39:8b:0a:7e:
e3:7c:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:03:43 2026 by rpki-client