Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: Qgl8zYNrfiHspr/gHcJGAJU3BJ2ywWpB/SWnlGZIhgo=
Subject key identifier: 21:0C:2C:A4:26:01:AC:84:1F:EF:59:C1:54:A5:5C:C6:91:5B:11:E4
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 019D28848A0A3AEDD28C82B832A5C7344E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: 87SBQbuWngPPNQw2dhXGN/3/2LKiPrBRxUAwuDMaBCQ=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8a:0a:3a:ed:d2:8c:82:b8:32:a5:c7:34:4e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=210c2ca42601ac841fef59c154a55cc6915b11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:48:41:56:f4:8c:95:c9:ad:f7:2a:ca:df:
a3:bf:e7:e0:3e:1e:25:ed:83:83:89:ae:04:5c:4e:
9f:42:f1:53:78:ba:fc:1b:92:3d:7b:4c:25:f8:ef:
e4:38:6c:b3:bb:aa:63:e8:dc:7f:8d:90:70:53:8b:
cd:f2:c0:ad:26:bd:de:1f:ee:b2:02:0c:f7:af:87:
3e:fd:35:2a:e0:aa:95:bf:65:98:7e:81:a6:01:b2:
a7:f7:50:1c:62:a8:a0:90:94:bd:5d:45:a9:43:6e:
64:2b:ad:b9:4b:24:0e:80:43:cd:b8:c4:e1:b2:2e:
13:a3:72:c6:f2:05:23:55:a3:b6:7f:3b:f5:ea:4c:
4c:68:f5:72:91:34:86:a6:ff:29:56:50:b5:9f:13:
9b:5c:af:75:01:5a:dd:e9:fd:1b:fa:a8:99:28:5d:
9a:09:10:47:6c:39:c4:42:9e:c8:a1:e6:2f:f1:42:
0b:b5:9d:04:4e:c3:7f:ab:42:c5:4a:ec:e8:ea:24:
1b:fb:d3:4a:90:11:33:1a:9d:66:61:2b:b7:80:f2:
3e:3e:e7:a6:08:a7:e9:e0:31:13:13:8c:be:30:d1:
36:05:90:3d:7c:b7:38:56:0c:c5:da:95:2b:0d:20:
a2:2d:9b:69:04:8f:5b:a5:fe:00:ba:be:99:36:08:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:2C:A4:26:01:AC:84:1F:EF:59:C1:54:A5:5C:C6:91:5B:11:E4
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:84:44:b3:fc:cc:89:25:e7:10:63:59:73:93:dd:16:7e:23:
60:4f:f5:0e:ba:e5:13:6f:f5:8d:3e:25:b3:8c:af:3f:de:79:
85:5e:56:85:f8:ff:67:ac:9b:ae:56:cb:33:49:e9:95:7a:07:
8f:7f:1d:27:e0:60:5b:e8:4e:1e:45:09:f4:3b:6c:9e:e2:ed:
fa:2f:7a:32:87:a6:50:7f:4d:55:a1:85:dd:3b:6c:8c:9d:41:
0a:26:78:8e:d6:fb:d4:8a:72:ee:d8:9c:ad:7a:b0:c5:97:6e:
ef:6f:eb:9f:e4:68:2f:74:e2:e6:9f:6c:7a:8b:0e:c5:7b:04:
21:21:50:24:93:6c:a5:91:2b:75:eb:76:01:f6:ec:37:34:ac:
03:57:d8:8a:19:40:cf:ad:3c:62:80:bb:f3:e1:ac:02:8d:5b:
e3:a4:23:47:1f:cf:71:55:5f:01:90:34:5a:45:6a:fb:29:da:
5d:4c:f6:27:8b:33:ff:4d:30:e3:46:15:e5:2b:4c:c1:ea:8c:
cf:b7:56:bf:58:64:5d:de:9b:63:a9:97:b9:e7:86:3f:53:14:
b9:b6:dd:81:1e:a8:ca:70:6a:a3:32:a1:29:2e:9e:e4:03:31:
7a:31:80:e7:05:1f:44:c2:25:95:4a:af:d1:aa:91:11:78:58:
c4:1a:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:48 2026 by rpki-client