Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: fvq+fak91CK7EBg3n61/urBJVsjCypP/s8cjTsjhTSY=
Subject key identifier: B9:22:E6:3D:7F:18:38:CD:5E:C8:3A:BC:71:57:DC:BE:0A:FB:EF:4B
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 01A0C2FB7E21DEFD1065255DBCD68A630D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 16C3
Signing time: Mon 21 Sep 2026 08:00:56 +0000
Manifest this update: Mon 21 Sep 2026 08:00:56 +0000
Manifest next update: Tue 22 Sep 2026 08:00:56 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: 7Lq83uFZZE9XIwtIEEnID/yDbet233ZLQYClnkzcfVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:7e:21:de:fd:10:65:25:5d:bc:d6:8a:63:0d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Sep 21 08:00:56 2026 GMT
Not After : Sep 22 08:00:56 2026 GMT
Subject: CN=b922e63d7f1838cd5ec83abc7157dcbe0afbef4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:32:19:8a:77:91:97:a9:9d:53:ab:87:03:
32:92:b4:cb:a7:42:be:d4:74:75:cf:d0:dd:b2:cd:
18:50:88:c3:94:88:e8:2a:65:5a:c8:95:e7:87:2e:
dc:a2:24:f5:a6:b1:0c:8e:d4:5c:fc:32:3c:1c:9d:
1e:ca:f3:e0:1b:0b:6a:4e:ee:4e:e4:70:3c:15:83:
e5:ca:ef:ea:56:cd:92:9c:f1:e3:4e:e2:7d:45:29:
60:c0:60:2a:9d:79:cf:78:40:09:0d:29:36:2e:51:
e6:ed:a6:16:73:f7:7d:4f:af:e9:46:d3:ea:9a:a9:
1d:ca:40:af:38:a2:8b:bd:0e:0f:39:31:be:b1:a8:
ac:8a:ab:4d:e6:8e:ff:18:e9:1a:83:8e:1f:b1:2f:
9e:d8:30:d9:71:a2:db:27:77:78:99:0e:d1:d4:53:
98:41:14:e2:67:78:f0:b5:49:7a:53:49:3b:a1:cf:
a4:9a:d5:da:93:35:e8:e7:10:9b:47:23:ae:9c:2a:
a1:6c:12:c2:5c:45:23:b2:7a:62:b8:f7:21:29:fc:
31:3a:dd:ba:ce:62:3f:7d:ef:ea:2e:66:c4:ca:b7:
c7:4f:77:d8:47:20:60:f5:85:a3:5d:d5:d6:30:1c:
ed:46:5b:3d:33:ba:1f:99:05:86:fe:c5:81:2e:2c:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:E6:3D:7F:18:38:CD:5E:C8:3A:BC:71:57:DC:BE:0A:FB:EF:4B
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b9:06:8e:7a:1f:dd:f3:04:07:1d:be:99:0d:00:72:6a:17:
a6:8f:d3:58:20:86:c7:7a:70:25:5e:a9:07:e8:49:cc:03:ce:
24:d9:9b:4e:9b:2e:c3:22:44:29:2f:90:1d:84:64:8a:c4:61:
83:91:00:b4:f1:27:43:7d:8c:75:a9:94:51:95:77:eb:2b:b0:
24:fe:61:ca:8f:f8:70:c3:30:ef:8f:e9:3f:0e:14:4a:b4:5c:
e1:d4:65:3c:71:e4:a7:8e:93:f5:0d:ad:1f:de:be:7c:70:64:
73:ee:98:be:e1:bc:14:73:34:c2:83:e9:3b:3b:52:3c:1d:9e:
16:33:c1:0c:d7:f4:f9:f5:75:3b:14:17:13:78:45:93:2b:8c:
1c:07:4d:c8:60:a1:7f:48:cd:2c:92:98:2e:1f:de:11:48:de:
cc:19:88:dd:c6:db:32:c7:8e:37:1c:af:c0:ff:8a:57:0d:8b:
8e:17:24:c3:f6:ba:c5:bb:bb:70:4c:ea:a0:c9:ec:fa:f7:09:
35:e1:82:ca:2e:cb:8c:6a:5f:e0:c1:e5:2a:d7:51:f6:38:49:
1b:15:a0:0a:af:53:39:0b:25:d7:9c:05:ab:d3:2e:d4:86:c7:
ac:4a:3d:1e:53:2e:26:9a:a7:71:d7:27:72:ed:64:5c:b6:0e:
26:62:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:49:15 2026 by rpki-client