Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: 0Xx3Y/roKdtOswrgiIEPQlohqmN5kNMGPMOkaM7aWLA=
Subject key identifier: A3:17:2A:83:3D:A3:25:5A:90:C0:E2:1C:5E:F0:2A:10:F5:F8:FB:36
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019EBF5AF7C750F0CE725370DF682C2EA4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 15B8
Signing time: Sat 13 Jun 2026 05:01:10 +0000
Manifest this update: Sat 13 Jun 2026 05:01:10 +0000
Manifest next update: Sun 14 Jun 2026 05:01:10 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: z3AqZa4rBoBFAFct//Cdp7XhYNffZpGgLuhS3sUxhmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f7:c7:50:f0:ce:72:53:70:df:68:2c:2e:a4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Jun 13 05:01:10 2026 GMT
Not After : Jun 14 05:01:10 2026 GMT
Subject: CN=a3172a833da3255a90c0e21c5ef02a10f5f8fb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5c:5c:8c:cf:fd:cf:bc:86:ae:a2:25:ad:39:
10:51:dc:c0:47:63:5f:8a:ee:78:bc:1c:99:03:26:
07:59:c9:1f:35:71:33:52:9e:e0:f3:81:b6:12:87:
aa:79:34:e9:4a:58:a1:ad:8d:b1:0f:53:c7:d6:c6:
9d:c1:9e:ae:30:d1:ef:e1:94:55:f2:43:67:22:ad:
95:08:cc:c0:56:ff:5b:37:f0:a4:43:74:a6:ac:65:
28:d0:c7:b9:56:80:14:c8:35:d2:fd:f6:b0:de:5c:
32:ad:23:db:95:1e:da:34:33:f9:97:0e:41:98:b5:
b4:f0:10:54:28:b7:88:19:49:a2:42:79:4b:25:02:
15:8e:86:fd:02:2f:22:df:61:95:42:9b:30:8f:d6:
0c:cd:67:2a:ce:c8:d0:8a:7a:18:5e:5f:49:8d:e0:
10:9d:f6:c9:c1:6d:5a:de:f5:8d:ac:3c:f6:29:a8:
7b:73:9b:3a:63:11:d8:1e:33:53:39:a4:b4:b0:af:
fd:cc:ff:d2:a0:21:18:90:06:df:43:6a:fd:4e:5c:
28:d8:84:15:46:e5:b0:ca:27:dd:16:17:e4:31:fc:
5a:6b:52:56:8c:e6:84:e1:7f:f4:17:8f:35:81:4c:
83:9c:11:86:52:22:6c:b3:b7:65:dc:ac:2e:ad:ab:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:2A:83:3D:A3:25:5A:90:C0:E2:1C:5E:F0:2A:10:F5:F8:FB:36
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:42:b8:5d:27:94:b8:fb:26:be:a5:88:e6:28:70:ff:98:50:
db:22:67:c9:56:95:9d:db:ba:99:b7:69:c1:aa:a5:28:d5:02:
c4:f7:81:f1:6e:46:d7:13:71:79:0c:d9:cb:bf:21:53:9c:77:
5c:e2:ef:55:c4:18:99:3e:d0:31:7c:d9:67:93:2e:ef:01:bd:
33:fa:a5:ce:36:7c:53:d0:33:43:6d:29:5b:ab:ca:6a:21:7e:
73:96:d1:2a:78:c1:62:4b:96:b7:35:0d:38:29:32:81:d8:9b:
25:6c:04:f2:02:db:a7:1e:41:11:43:65:89:8c:93:bc:ed:79:
9e:58:4b:86:1f:1a:51:65:7c:2e:3a:1c:75:3b:83:77:0b:fb:
2d:e7:f8:1c:ed:c4:7d:6b:cc:1c:bb:52:5d:3b:71:53:a0:2e:
87:24:aa:72:aa:07:c0:1c:a0:42:ec:22:72:2c:e7:f0:9f:19:
49:32:db:04:aa:eb:4f:67:a2:78:a9:67:e2:e0:4b:55:d0:86:
24:3c:4b:16:48:9a:57:00:e6:36:69:74:82:6e:f1:50:47:71:
ec:4f:eb:33:0b:31:a3:e2:e8:aa:60:e4:62:cf:16:dd:d3:c6:
0d:d8:29:8d:c4:0d:64:a7:ee:d9:6a:5d:c4:9f:1b:af:a1:51:
40:10:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:57:28 2026 by rpki-client