Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: mi1zQnl2aWY6KjvL6NnVnoJZUerUrR14J/bkCboaiW4=
Subject key identifier: 1E:D1:D5:E6:BD:C7:00:51:40:55:4C:3D:C1:D7:25:5B:30:A1:2D:02
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 019F9090EF80C57C70CA8D34E4DD2CD1F9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 20:00:45 +0000
Manifest this update: Thu 23 Jul 2026 20:00:45 +0000
Manifest next update: Fri 24 Jul 2026 20:00:45 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: NCzpU33zEcG3XrMCY+m+aqEAlMBL/C/L4xbl/L5040w=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ef:80:c5:7c:70:ca:8d:34:e4:dd:2c:d1:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Jul 23 20:00:45 2026 GMT
Not After : Jul 24 20:00:45 2026 GMT
Subject: CN=1ed1d5e6bdc7005140554c3dc1d7255b30a12d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:7d:b1:4d:dd:fb:33:e2:da:d8:66:b4:6f:
71:77:f6:86:0d:c7:97:df:b0:24:26:c2:92:40:76:
aa:3a:04:85:41:16:e1:7e:11:9b:e8:b7:da:8e:dd:
7a:23:52:24:19:80:e1:df:fe:a2:ba:18:5c:bc:81:
47:5f:59:7b:76:0d:de:f0:8d:33:26:14:33:ac:f9:
56:34:59:ff:c2:8c:ec:41:83:aa:7a:32:b9:2a:ba:
e1:20:5c:12:7f:b2:b1:48:36:34:15:31:e2:07:b3:
3a:af:7f:41:86:92:e8:da:43:ba:86:f7:88:00:95:
a3:58:82:90:03:f8:bb:2d:83:06:75:34:c5:51:3c:
a8:82:7b:9b:8f:7e:28:dd:9d:30:c2:ea:5a:f7:5e:
df:c8:70:4e:53:7e:56:89:cb:d8:2a:d1:b2:24:37:
f5:71:70:cd:05:5f:47:0d:a3:3f:a6:5d:d1:89:ce:
f9:21:b6:cf:d6:52:a5:fe:4f:d2:87:2d:e5:97:37:
0b:5b:6f:4e:a6:93:5f:ed:3c:b6:7f:dc:31:5e:e7:
0a:cb:b3:7b:93:88:3e:17:b3:29:8e:c8:ba:14:aa:
06:ed:66:3e:89:dc:1b:f8:99:75:f3:d7:cd:82:96:
31:ff:65:7a:af:90:fa:1a:e8:b8:bb:a3:50:22:69:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:D5:E6:BD:C7:00:51:40:55:4C:3D:C1:D7:25:5B:30:A1:2D:02
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:18:84:84:c2:fe:90:53:7e:16:0e:15:87:78:86:74:29:52:
6c:f6:46:f3:0e:22:7a:a9:e7:f1:17:ac:b3:4b:39:c9:2b:2f:
c0:91:30:b9:e5:01:90:2f:34:b2:d1:3b:29:70:70:3d:d1:cb:
6f:8a:26:4c:ea:44:aa:3d:18:b9:80:7a:3f:10:be:e0:38:90:
55:67:58:2f:e5:53:58:65:ff:09:22:a5:31:f8:b9:28:f9:7e:
04:72:ec:08:e2:a2:7c:f5:fe:78:65:11:02:ab:60:1d:dc:ea:
25:4c:04:80:44:e1:02:32:3f:1d:93:f7:50:9a:30:53:e8:13:
c5:e6:cf:d0:56:b2:c8:cd:10:f8:68:d8:2a:7f:8b:c3:0c:5c:
ac:1c:91:96:88:42:8a:f2:86:aa:8f:c8:7f:59:e3:28:60:4e:
7f:b6:06:e8:0f:9e:39:da:74:98:69:80:eb:45:b8:0a:10:6f:
29:a8:e6:9e:fd:6e:81:79:d8:cc:fa:e0:9f:40:3c:44:53:14:
b4:26:7c:28:41:1e:5d:00:45:04:3a:95:31:eb:fa:0c:fb:fb:
de:44:11:bf:5b:67:be:ae:26:17:6a:44:cd:9f:40:4d:56:74:
6d:e2:c1:f6:58:a2:22:a0:e6:cb:41:a5:3f:49:41:1a:20:f3:
5b:56:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:33 2026 by rpki-client