Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: AphQ3bNrFAt7WqeRzo5EWNHeItO70CSlitTKkyDxruA=
Subject key identifier: 21:6C:A7:0B:F6:C9:FD:22:20:89:7F:0D:CD:5E:8B:B5:20:A3:46:F1
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019E1D9107CFF9FE83A5697210BFB0DD0667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0BA8
Signing time: Tue 12 May 2026 19:01:44 +0000
Manifest this update: Tue 12 May 2026 19:01:44 +0000
Manifest next update: Wed 13 May 2026 19:01:44 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: /oy+KwxtIt/h+HqwnMBlQ7QWwcvhslu0GMIFmcK8JAk=)
2: wwo_DxaaSlkeSM_BlRmma4rbf0I.roa (hash: mqk1cRlhcQcCo6/bhwR5BjCAjJJ/RC++qOvJ8wDbdP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:07:cf:f9:fe:83:a5:69:72:10:bf:b0:dd:06:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: May 12 19:01:44 2026 GMT
Not After : May 13 19:01:44 2026 GMT
Subject: CN=216ca70bf6c9fd2220897f0dcd5e8bb520a346f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:67:03:ac:87:17:47:35:db:84:26:e3:40:
b5:13:d7:14:6e:eb:4d:d7:89:99:92:a4:3e:5b:29:
2f:4d:34:8f:bc:8d:ab:4a:5f:69:01:e2:ee:d3:72:
a5:39:b4:53:74:b5:3b:bb:f4:ad:48:47:4f:bf:06:
71:9b:c8:bd:1b:31:d4:60:d7:5e:c8:e7:17:ea:83:
86:4a:a3:c7:ff:5b:57:07:71:1e:8e:57:a9:81:02:
13:eb:32:3c:0f:8f:54:77:2e:79:b2:43:14:f3:d3:
c2:42:4d:37:fb:8a:32:e5:30:97:21:51:d0:3a:a3:
0f:b2:a4:c5:a6:ce:67:6b:06:ad:91:4c:52:a4:05:
a0:e8:5c:6d:d2:10:cc:90:3e:51:49:c1:f7:4d:99:
c3:31:b0:01:77:a8:e5:03:09:25:7c:e7:14:b1:34:
4e:e4:46:ca:5f:70:d2:c7:fa:2a:ed:03:9d:d1:bd:
47:2e:e0:d3:73:81:71:43:ba:b5:25:51:78:de:67:
52:43:02:5a:df:ed:65:0a:33:70:96:b9:c3:f5:3b:
86:18:aa:61:55:39:41:3d:0c:9f:0b:68:3d:99:75:
f2:a6:48:70:2c:85:55:c0:81:dc:cc:bf:83:11:0a:
7b:ac:c8:b9:63:30:01:76:61:ed:dc:c2:c2:b5:37:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6C:A7:0B:F6:C9:FD:22:20:89:7F:0D:CD:5E:8B:B5:20:A3:46:F1
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:b5:e6:d8:2a:cd:f8:db:7c:6a:60:03:d3:4b:9a:f8:9b:
58:7f:d9:0d:b6:67:f9:fb:d0:dc:ce:48:9e:2c:97:51:e5:fd:
0c:d4:7b:4c:35:d6:b2:33:02:80:55:b3:31:08:25:a5:c2:d4:
22:d0:04:ad:c5:8a:c4:0a:67:34:41:d5:01:ab:74:7e:fd:ad:
01:cf:bd:6d:c1:a9:fd:14:cc:cc:38:45:b8:5f:b0:53:df:8f:
48:07:74:72:33:6b:eb:93:f2:86:1c:cf:15:31:c1:df:0b:ae:
f1:d6:5c:27:fd:24:20:b9:ff:a1:47:38:92:5a:28:36:a9:c3:
ca:5a:a9:b5:70:09:d5:0d:8f:d7:0b:d2:d7:70:da:d7:32:b8:
72:6b:90:a6:21:a5:a6:0a:81:7c:e7:d3:10:bc:22:28:f7:39:
14:07:5c:fd:af:76:2d:50:0b:85:49:28:08:4a:4e:b9:a2:87:
3a:cc:5e:76:f7:1d:6e:db:4f:79:d7:cd:b6:7c:c3:da:c8:10:
7d:13:51:ea:53:52:92:44:c2:38:95:94:bf:49:a2:9e:46:ca:
6f:fb:e9:1f:c7:44:16:1a:68:c4:ec:1b:c4:d6:63:c4:5a:76:
00:cd:04:cb:7c:44:d8:86:51:a1:30:82:23:27:56:4e:52:74:
70:6d:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:19 2026 by rpki-client