Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: UqR8Y75mEPROKZkv6NDLtJK6rE1kqQbUoDBJiXtI3rI=
Subject key identifier: 14:1B:2B:C5:26:40:35:B1:CE:07:AB:8F:F4:D9:64:EA:BA:27:59:B2
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019D2884A7D1727E34A9D2018148AF52C0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0B55
Signing time: Thu 26 Mar 2026 05:01:15 +0000
Manifest this update: Thu 26 Mar 2026 05:01:15 +0000
Manifest next update: Fri 27 Mar 2026 05:01:15 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: uWDReSKGyZYI1CGQRR3f8yKj26JRLj+PfGUc4YZJy2o=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a7:d1:72:7e:34:a9:d2:01:81:48:af:52:c0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Mar 26 05:01:15 2026 GMT
Not After : Mar 27 05:01:15 2026 GMT
Subject: CN=141b2bc5264035b1ce07ab8ff4d964eaba2759b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:fa:1f:34:b1:2d:05:ec:ca:1b:68:94:0e:
e1:85:f1:02:26:c6:3c:4e:b8:44:a2:41:db:81:15:
9b:4f:70:23:a7:11:f0:ac:01:12:7b:8f:10:17:27:
07:74:e2:6a:74:e0:b7:b9:f0:5a:9a:5b:8e:17:85:
97:93:0d:86:b9:a7:17:03:26:17:68:1e:f9:ca:09:
4d:a0:5a:0c:bf:43:c6:b4:af:31:78:ac:8d:30:a3:
0f:1d:92:d2:fc:c5:e7:f9:4d:4a:48:b1:13:cd:f9:
0e:df:ff:b3:06:9a:41:5c:f8:38:0b:34:a3:f3:82:
24:27:21:36:b4:49:c3:88:4c:52:c6:83:90:59:0f:
18:01:64:ae:f7:67:27:27:fe:ec:08:b2:a5:24:b8:
74:46:60:81:9c:0d:9e:d7:39:30:46:4c:77:36:76:
3d:d5:5b:60:3f:63:44:93:40:50:ce:3b:4a:1e:95:
d1:3d:65:09:c5:72:45:58:29:81:af:cc:04:0c:32:
31:b1:80:d8:c7:97:96:18:ca:14:a3:fb:09:fb:b4:
94:2f:45:c5:6c:3d:84:c1:46:91:13:74:d4:b9:24:
0d:1a:4c:32:c7:6f:aa:7a:f1:9b:f2:55:91:82:37:
17:86:82:75:cf:eb:55:f5:05:60:10:e4:17:3c:53:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:2B:C5:26:40:35:B1:CE:07:AB:8F:F4:D9:64:EA:BA:27:59:B2
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:24:ea:f1:c4:f3:32:f7:f5:9b:a3:22:ed:01:59:27:f4:da:
5e:da:a8:03:a8:72:52:ac:8f:42:b0:28:60:35:ae:9f:82:86:
c4:80:7d:0d:19:a9:7b:8b:9b:cd:1b:8b:4f:5e:63:f6:25:92:
e9:5b:bf:39:2f:b6:1f:64:a6:25:11:7f:8f:61:3e:4b:2a:73:
f0:85:76:00:b9:13:cd:33:de:08:ac:d9:eb:27:5a:38:2f:b8:
a6:72:d2:d1:0e:82:ba:03:28:50:5f:7a:e9:96:14:35:56:29:
00:63:85:76:56:21:6e:c2:3b:50:5d:3b:98:1b:56:fd:df:59:
96:65:4e:6e:ca:49:34:b8:a5:cd:0e:bc:71:05:86:f6:a4:a0:
e1:8a:3c:09:c5:de:1b:1d:5a:6d:ac:3f:79:4f:6d:4f:2d:bd:
40:5b:a5:a9:2c:40:80:b7:a6:da:cf:ad:f4:f0:ff:24:ef:df:
fb:46:63:58:d8:20:c9:77:f8:f8:d9:fb:3b:63:d0:a0:34:b3:
a5:1d:fe:15:35:4f:a2:60:6a:e3:98:ce:df:74:51:95:5e:97:
33:4e:e5:17:09:60:0a:26:57:c1:43:2f:93:55:16:23:d3:07:
3c:f6:22:16:b6:54:f2:60:2b:46:0b:20:42:96:6c:37:b8:8d:
b0:b8:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:32 2026 by rpki-client