Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: fwIcLiTgWNrfAaAh3+LT4OB27AzP+GGQZgXDDEnuDgo=
Subject key identifier: 6C:92:EA:E6:F0:B8:8F:66:44:13:E6:8F:FC:61:EE:AE:49:AC:5B:CA
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 01A0E286CB0E21C585BA4860A44C5DB609C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 11:01:19 +0000
Manifest this update: Sun 27 Sep 2026 11:01:19 +0000
Manifest next update: Mon 28 Sep 2026 11:01:19 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: Vkyuk7LHeAgBBNc7CVCexPJRDyM/BcShZVazQZDkyKE=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:cb:0e:21:c5:85:ba:48:60:a4:4c:5d:b6:09:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Sep 27 11:01:19 2026 GMT
Not After : Sep 28 11:01:19 2026 GMT
Subject: CN=6c92eae6f0b88f664413e68ffc61eeae49ac5bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:68:c2:ae:56:4b:99:a2:cc:e2:fa:4a:c1:
5e:7c:23:e1:45:5b:24:d0:3c:74:03:75:af:25:e2:
ce:2e:77:5e:c1:52:ea:d5:2a:ec:45:a4:3c:25:16:
d2:30:20:f7:55:7a:d9:bf:bb:8c:aa:a7:a0:ba:87:
e2:cd:ee:e0:15:8e:2b:18:09:86:b9:45:0b:31:1d:
4c:38:bd:26:04:ec:c8:f6:06:05:45:53:04:c3:fd:
97:6c:0f:b8:72:9c:80:b8:d7:4f:52:09:b5:29:c1:
f8:a7:b4:d1:da:fd:14:75:c1:fb:2e:c5:8f:41:db:
b9:c7:26:da:9b:57:75:b0:5a:84:dc:af:d0:d0:65:
5c:bd:96:75:a2:14:ec:05:24:5a:71:4e:ef:8a:53:
27:8b:20:4a:25:57:01:a4:e4:c4:e9:0e:fe:7f:c4:
85:3b:83:5a:b1:1c:10:43:bf:23:51:17:ec:af:cb:
16:9a:6e:b2:fd:00:ad:55:a0:39:8f:0b:21:bf:d6:
32:3b:23:c3:47:29:52:80:70:85:2f:a2:34:2c:14:
ce:53:ca:ea:ab:b5:bd:ac:92:94:c8:d8:da:bc:30:
30:f8:6c:c4:08:53:81:f4:78:9e:cb:aa:a1:a9:d7:
0a:2c:0e:25:bc:bb:4c:60:11:40:a6:42:02:78:97:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:EA:E6:F0:B8:8F:66:44:13:E6:8F:FC:61:EE:AE:49:AC:5B:CA
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:34:d5:51:37:da:94:b3:26:5b:14:20:40:5d:73:e3:52:41:
d3:83:ca:ac:aa:36:6b:99:b0:a8:64:a1:6e:7a:01:cd:53:f9:
0c:9a:7c:81:81:13:18:0b:68:d3:42:e3:f0:81:d6:4e:c5:a3:
65:09:35:80:c4:3c:00:53:ea:a3:31:22:81:e9:51:fd:68:d3:
db:29:8c:66:da:b8:cb:9c:2b:bf:b6:92:61:a3:43:fa:67:fc:
1e:04:32:f8:b6:1d:76:69:4c:0c:77:f4:53:b1:44:1f:c8:d0:
6e:5b:6e:c1:b8:d6:4f:a6:e4:04:e2:c5:8e:8b:88:76:b2:4f:
2f:89:a3:0c:92:8b:dc:11:15:f8:b6:93:7e:3c:43:97:d3:b9:
e1:ec:0f:59:d6:28:c3:71:21:02:22:d9:60:a3:91:9b:bd:90:
1c:be:66:7f:0f:f9:bc:2c:0d:f4:7b:87:17:7d:01:98:a2:c2:
05:0d:37:d3:10:56:ef:9c:1b:75:9f:56:83:ab:75:56:04:29:
b1:99:8f:2c:3e:b6:24:64:1e:35:f3:61:c3:84:3e:cc:56:ad:
0a:32:9e:67:cb:5d:f4:1a:66:bf:24:21:95:5a:2f:7d:22:24:
83:4a:28:ad:96:e8:7f:e1:9f:02:08:6f:86:8d:b7:4b:66:f3:
e9:dc:06:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDihssOIcWFukhgpExdtgnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi
YTEyNjAwHhcNMjYwOTI3MTEwMTE5WhcNMjYwOTI4MTEwMTE5WjAzMTEwLwYDVQQD
Eyg2YzkyZWFlNmYwYjg4ZjY2NDQxM2U2OGZmYzYxZWVhZTQ5YWM1YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ1owq5WS5mizOL6SsFefCPhRVsk
0Dx0A3WvJeLOLndewVLq1SrsRaQ8JRbSMCD3VXrZv7uMqqeguofize7gFY4rGAmG
uUULMR1MOL0mBOzI9gYFRVMEw/2XbA+4cpyAuNdPUgm1KcH4p7TR2v0UdcH7LsWP
Qdu5xybam1d1sFqE3K/Q0GVcvZZ1ohTsBSRacU7vilMniyBKJVcBpOTE6Q7+f8SF
O4NasRwQQ78jURfsr8sWmm6y/QCtVaA5jwshv9YyOyPDRylSgHCFL6I0LBTOU8rq
q7W9rJKUyNjavDAw+GzECFOB9Hiey6qhqdcKLA4lvLtMYBFApkICeJcLVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyS6ubwuI9mRBPmj/xh7q5JrFvKMB8GA1UdIwQY
MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt
ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2
LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDTVUTfa
lLMmWxQgQF1z41JB04PKrKo2a5mwqGShbnoBzVP5DJp8gYETGAto00Lj8IHWTsWj
ZQk1gMQ8AFPqozEigelR/WjT2ymMZtq4y5wrv7aSYaND+mf8HgQy+LYddmlMDHf0
U7FEH8jQbltuwbjWT6bkBOLFjouIdrJPL4mjDJKL3BEV+LaTfjxDl9O54ewPWdYo
w3EhAiLZYKORm72QHL5mfw/5vCwN9HuHF30BmKLCBQ030xBW75wbdZ9Wg6t1VgQp
sZmPLD62JGQeNfNhw4Q+zFatCjKeZ8td9BpmvyQhlVovfSIkg0oorZbof+GfAghv
ho23S2bz6dwGJQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:02:55 2026 by rpki-client