Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: F/AWfBI/k2BnKLA9Tl3Wt6Do3x1i9MnteAVirHbtxuM=
Subject key identifier: 86:75:13:AC:3C:17:13:C7:0A:45:36:ED:38:D9:90:22:4F:5F:34:99
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019D2A3C4B76914B2D6AA70D59144E6AD51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0B2A
Signing time: Thu 26 Mar 2026 13:01:27 +0000
Manifest this update: Thu 26 Mar 2026 13:01:27 +0000
Manifest next update: Fri 27 Mar 2026 13:01:27 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: dnH9YLc6dSDctL2MwiQAAWXINej5hcVksJTkYfQTV2g=)
2: wwo_DxaaSlkeSM_BlRmma4rbf0I.roa (hash: mqk1cRlhcQcCo6/bhwR5BjCAjJJ/RC++qOvJ8wDbdP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4b:76:91:4b:2d:6a:a7:0d:59:14:4e:6a:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Mar 26 13:01:27 2026 GMT
Not After : Mar 27 13:01:27 2026 GMT
Subject: CN=867513ac3c1713c70a4536ed38d990224f5f3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:b1:61:a4:28:46:33:3d:46:f1:ea:4f:dc:
20:9e:d5:55:7f:6a:44:60:7b:cc:5b:ac:8f:85:ea:
d4:33:66:1a:ac:20:3e:64:47:77:76:bc:f8:4e:02:
bd:b3:5b:e8:63:aa:85:d5:46:e6:1a:70:bc:4b:e5:
91:1c:e2:ba:0f:ba:12:4c:2d:5b:5f:e2:b7:f4:ad:
8b:81:48:56:94:e1:73:62:b5:f3:94:57:d8:4b:7b:
14:65:ad:41:41:47:be:6f:8e:f1:14:a6:63:39:f4:
3b:09:02:9a:b8:ab:4c:1b:7d:a5:81:18:5d:e1:18:
82:fa:9e:23:c1:06:3a:85:e1:12:fd:5f:8f:6b:23:
7f:ed:fb:80:8a:d4:0b:de:9c:23:9c:14:24:c6:bd:
64:e9:f8:71:04:0f:35:ed:4b:e4:39:0f:0b:00:db:
a2:ba:86:4f:87:83:d1:d1:c6:b0:03:53:d7:a0:83:
f2:40:83:1b:ef:f2:e4:fb:c3:67:08:1b:39:09:77:
0a:88:75:a2:7d:3a:94:22:39:6e:42:3a:58:e4:6d:
bb:c7:58:9f:30:67:71:95:a8:25:27:51:e6:85:2e:
e1:35:ec:d9:30:3c:26:b3:0b:d6:a5:1f:e8:bb:b6:
92:ff:28:7a:b3:51:93:62:42:10:c4:61:05:3b:bd:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:13:AC:3C:17:13:C7:0A:45:36:ED:38:D9:90:22:4F:5F:34:99
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:f4:24:6e:6f:1b:64:56:3d:76:ec:2d:78:e2:ec:3c:da:
b2:6f:19:18:68:f4:84:2c:ec:da:e2:b7:d9:a8:26:ec:de:b9:
c9:89:72:3f:8f:f5:98:f2:18:15:ff:4a:9a:b5:88:92:b3:6c:
33:85:2a:2c:4d:ca:84:28:3d:3e:9c:2e:28:45:5e:55:d9:50:
f9:b1:42:7a:66:52:68:6d:d7:f3:a3:16:5c:e2:b8:b0:af:e2:
02:e6:ad:5d:b7:d0:93:28:d4:b9:51:6b:5c:b0:e8:84:55:d7:
b1:8b:31:af:6e:55:84:2a:25:f9:26:bb:34:fe:d5:b3:18:f8:
d9:ca:ba:f1:f2:e9:1e:04:ae:4d:41:32:24:1e:e8:c2:7c:80:
f8:b3:58:04:51:8a:b4:20:98:a4:3a:81:6d:28:e7:2e:93:c0:
1b:e4:41:42:0e:82:ac:f2:bf:66:a7:13:82:c9:bf:08:e3:38:
1b:21:18:e9:a9:96:4c:e0:d0:5d:17:28:5e:a2:9e:b0:e3:9f:
9e:94:46:74:07:2d:58:ae:76:bb:3f:a8:ed:74:0f:bd:ea:74:
6c:ab:60:71:38:d8:1c:f5:b9:1f:3f:bb:ae:1a:da:cc:44:8e:
58:76:85:3e:87:c0:7a:17:cc:39:30:11:7a:2e:10:e4:c4:52:
aa:c8:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:18 2026 by rpki-client