Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: zh8Pdr4fRkC0fwtArcHFJzGISK2Q1CMr57yOtpgUcjg=
Subject key identifier: 2B:69:FE:23:45:98:E9:F4:91:5B:0E:2E:46:E9:1D:28:59:86:67:0E
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019CAC46CAF642B9A7337C5F9B9AEE0D50C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 14A5
Signing time: Mon 02 Mar 2026 02:00:46 +0000
Manifest this update: Mon 02 Mar 2026 02:00:46 +0000
Manifest next update: Tue 03 Mar 2026 02:00:46 +0000
Files and hashes: 1: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (hash: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q=)
2: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: b4o5CbICj4i5WeLpJPKOuaH5b4AaARU3CcfaYT3t0to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ca:f6:42:b9:a7:33:7c:5f:9b:9a:ee:0d:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Mar 2 02:00:46 2026 GMT
Not After : Mar 3 02:00:46 2026 GMT
Subject: CN=2b69fe234598e9f4915b0e2e46e91d285986670e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:fd:70:57:c6:5a:f3:e1:32:79:db:3e:85:
e4:7c:ad:84:28:5e:95:dc:c8:57:1e:57:a6:fe:93:
89:b1:10:e0:66:10:bc:f6:78:bb:d1:b7:d2:5d:34:
a5:97:5c:2c:e3:3a:cb:40:13:91:5e:8d:c2:25:69:
9d:52:d3:9b:da:ef:17:68:c8:38:b3:67:13:67:2b:
22:3c:b8:5d:7e:0e:17:91:bd:c4:72:15:6b:e0:b3:
48:ad:b2:18:ae:3f:d7:38:89:cb:d6:95:cc:2f:dc:
61:af:1c:d2:c5:8f:65:84:bd:78:87:ff:61:8c:2a:
80:9c:98:e8:c8:20:78:8e:4f:65:69:17:ac:6c:6c:
37:5f:e0:77:40:2d:ab:62:ba:0b:7e:a0:db:db:a3:
18:5d:b3:7b:7a:0e:fb:6f:9c:b2:ef:82:92:a6:d8:
70:6a:c1:c7:f1:30:d8:cd:58:c5:cb:9e:bb:9a:84:
cc:1c:de:12:96:dc:bd:fd:92:27:d4:bd:cf:b6:cf:
c9:e0:87:85:ae:b6:6c:32:7d:7e:0a:6f:6b:5e:ff:
a7:6a:62:f4:b7:e1:e9:3f:0f:90:1c:33:51:87:4e:
96:34:cc:96:36:d2:4a:6e:a6:a5:ac:5a:80:ab:1a:
2c:b6:f5:17:81:a2:85:b6:14:b1:14:c6:06:9f:47:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:FE:23:45:98:E9:F4:91:5B:0E:2E:46:E9:1D:28:59:86:67:0E
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:74:f6:60:db:01:b8:31:d3:d9:ee:01:ed:91:da:eb:8a:7d:
0b:99:03:d6:c1:42:f9:fb:ad:44:02:0b:9b:0c:2b:01:d7:8b:
f8:50:25:c7:90:87:41:13:23:d6:fe:08:b7:f2:9c:73:6c:02:
a7:8a:aa:22:58:e7:26:2f:d8:ca:d7:b4:d2:df:95:f9:99:49:
28:d6:99:4e:21:3b:67:7d:5f:e5:0b:dd:b2:12:18:aa:59:07:
08:68:1a:0c:6e:9f:52:11:29:d5:64:4b:ef:45:ef:4a:aa:d2:
73:cb:82:62:e0:7e:49:b5:91:b8:ff:78:ec:34:ad:93:41:ba:
18:6e:7a:08:ea:f7:2e:48:10:5a:6c:1e:3e:09:34:f7:9b:9b:
fe:6d:c8:c0:36:a9:5b:9c:9b:98:62:09:9b:68:ee:14:65:69:
4d:8f:e4:63:71:b3:ea:15:ab:87:a7:78:2a:2c:48:d0:0f:68:
d3:8c:50:50:d9:9b:95:c8:1a:ef:8f:90:f3:87:74:49:44:a3:
1f:18:9e:07:17:b3:bf:87:e9:93:d6:c4:de:4c:6e:6e:8a:49:
40:3a:37:7c:5f:c1:95:a7:6d:6d:4d:05:ad:2c:a7:34:9d:16:
d3:20:19:eb:22:55:fc:5c:92:f7:41:14:c4:e9:b0:4c:02:1c:
85:07:42:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRsr2QrmnM3xfm5ruDVDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5
Y2IzOTIwHhcNMjYwMzAyMDIwMDQ2WhcNMjYwMzAzMDIwMDQ2WjAzMTEwLwYDVQQD
EygyYjY5ZmUyMzQ1OThlOWY0OTE1YjBlMmU0NmU5MWQyODU5ODY2NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPj9cFfGWvPhMnnbPoXkfK2EKF6V
3MhXHlem/pOJsRDgZhC89ni70bfSXTSll1ws4zrLQBORXo3CJWmdUtOb2u8XaMg4
s2cTZysiPLhdfg4Xkb3EchVr4LNIrbIYrj/XOInL1pXML9xhrxzSxY9lhL14h/9h
jCqAnJjoyCB4jk9laResbGw3X+B3QC2rYroLfqDb26MYXbN7eg77b5yy74KSpthw
asHH8TDYzVjFy567moTMHN4Slty9/ZIn1L3Pts/J4IeFrrZsMn1+Cm9rXv+namL0
t+HpPw+QHDNRh06WNMyWNtJKbqalrFqAqxostvUXgaKFthSxFMYGn0f07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtp/iNFmOn0kVsOLkbpHShZhmcOMB8GA1UdIwQY
MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt
ZDg3MTEyY2E5OWFlLzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl
LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3T2YNsB
uDHT2e4B7ZHa64p9C5kD1sFC+futRAILmwwrAdeL+FAlx5CHQRMj1v4It/Kcc2wC
p4qqIljnJi/Yyte00t+V+ZlJKNaZTiE7Z31f5QvdshIYqlkHCGgaDG6fUhEp1WRL
70XvSqrSc8uCYuB+SbWRuP947DStk0G6GG56COr3LkgQWmwePgk095ub/m3IwDap
W5ybmGIJm2juFGVpTY/kY3Gz6hWrh6d4KixI0A9o04xQUNmblcga74+Q84d0SUSj
HxieBxezv4fpk9bE3kxubopJQDo3fF/BladtbU0FrSynNJ0W0yAZ6yJV/FyS90EU
xOmwTAIchQdCsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:56 2026 by rpki-client