Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: obaRop7J/9htH9ZKsvmwwil9VXmX8FyPa40HzL6m3PQ=
Subject key identifier: F8:D1:A3:CD:BA:F4:26:0A:C1:A1:D1:41:C5:8D:06:1F:26:24:A5:DD
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019FA9AC19A3D72074EBF13DDD420B8BA7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0CA1
Signing time: Tue 28 Jul 2026 17:00:56 +0000
Manifest this update: Tue 28 Jul 2026 17:00:56 +0000
Manifest next update: Wed 29 Jul 2026 17:00:56 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: YmMwAvCSdPBGw6GSgNSBK3DDEFIaq91FjXP6eLRpkVE=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:19:a3:d7:20:74:eb:f1:3d:dd:42:0b:8b:a7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Jul 28 17:00:56 2026 GMT
Not After : Jul 29 17:00:56 2026 GMT
Subject: CN=f8d1a3cdbaf4260ac1a1d141c58d061f2624a5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:e3:a8:22:6e:3e:c0:cd:d4:59:64:2d:88:
dd:e7:ab:04:38:6e:68:30:70:4a:66:70:c4:31:b6:
3f:bd:89:2b:57:3d:66:05:97:96:1c:cc:b9:7a:55:
21:3a:0f:6b:a1:41:40:6a:45:02:e2:4b:fa:c1:33:
1a:2e:0e:bb:36:f7:a4:2a:55:99:eb:71:fb:6a:e0:
d3:09:4d:b0:ef:5a:6b:12:60:21:21:15:c5:4c:7e:
00:c8:ec:cd:37:c4:7e:45:c5:43:3a:86:a2:0f:b3:
08:8b:56:ea:74:e6:cd:50:f7:84:9a:20:92:ab:c6:
92:58:69:71:c4:37:1a:ed:84:8c:2d:86:d6:dd:a4:
5e:23:02:be:33:70:2a:0a:5e:27:8b:35:4a:30:12:
a0:42:5e:cd:0f:a1:a8:78:09:23:7e:92:02:29:66:
62:76:87:d0:40:57:d8:26:45:f5:50:f8:33:76:7a:
d0:a5:47:7d:37:88:c4:ee:02:62:9d:57:6c:7f:7e:
52:18:a0:2a:28:dc:5a:a3:8a:d3:55:e4:e1:c7:00:
07:cc:8e:71:40:df:1a:c6:16:2d:2e:12:15:55:dd:
3f:b7:a3:18:9d:3c:54:72:20:10:34:70:8a:bd:ec:
cd:76:d2:a6:9d:d0:70:8a:76:41:d4:64:aa:2c:0f:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:A3:CD:BA:F4:26:0A:C1:A1:D1:41:C5:8D:06:1F:26:24:A5:DD
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5b:74:41:87:fc:b2:1e:12:5a:83:9e:7d:fe:8b:ad:18:55:
76:da:5d:69:0e:33:7f:3d:8c:f7:61:84:ea:8c:ca:f7:6c:21:
51:2b:27:63:4b:82:90:b7:69:85:f1:d0:af:be:bc:cd:49:aa:
c4:0a:fd:d5:b8:80:d6:83:1a:3b:1b:7e:9c:9e:ad:4c:2b:1d:
d3:81:94:8e:d0:80:f7:70:7d:27:cc:06:d1:fa:4b:13:1a:ed:
03:e1:b7:a2:2a:d8:aa:ed:8a:c1:8e:bf:f3:55:7d:cc:33:9e:
2d:f8:0b:5b:3b:74:19:40:d3:32:cf:7f:c1:ae:06:62:8a:a3:
b2:15:c0:e6:72:18:18:6b:18:c4:38:7d:d4:86:7d:83:0c:41:
8d:36:87:0d:08:e1:78:45:91:2c:33:72:97:4b:e8:d0:00:67:
6c:7d:d0:30:2b:ce:95:d1:18:bc:02:31:b2:4f:aa:1a:08:55:
67:d4:e0:ad:9d:c9:c2:9e:b6:31:af:be:dd:4b:bc:ad:17:e5:
c4:78:83:ea:cd:87:08:34:0f:6e:0d:e0:42:86:91:ad:03:93:
58:c9:bc:95:77:82:65:8e:32:3f:c2:c7:31:ad:8f:93:a7:eb:
07:18:7e:bf:d5:ed:6f:7b:0b:38:31:b5:4d:67:a4:09:74:f5:
70:a8:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:02 2026 by rpki-client