Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: EGSiYG75tL9LM8ha6NakLfttymXudOeppOlRXD/H/5g=
Subject key identifier: 16:87:BF:6E:5B:2B:74:A5:94:E6:B5:72:5A:F1:F0:BA:B3:7C:4A:A7
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019D98862A0440C3BAFE7C93ED84914914AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0B8F
Signing time: Thu 16 Apr 2026 23:00:22 +0000
Manifest this update: Thu 16 Apr 2026 23:00:22 +0000
Manifest next update: Fri 17 Apr 2026 23:00:22 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: E74oCF0x/MYzS4uGwlNebT1PcakEM657jWw3bbJWv+Y=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:2a:04:40:c3:ba:fe:7c:93:ed:84:91:49:14:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Apr 16 23:00:22 2026 GMT
Not After : Apr 17 23:00:22 2026 GMT
Subject: CN=1687bf6e5b2b74a594e6b5725af1f0bab37c4aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:cf:27:4d:4e:c0:ff:e1:45:a9:42:39:a6:
08:4c:b8:61:57:16:72:f7:48:5f:ed:a3:a3:c4:de:
62:be:6a:12:13:4d:8f:7b:f9:55:05:cc:5e:8f:09:
e6:1a:8e:03:5b:c3:0e:92:10:b3:9d:01:20:04:28:
84:a4:d4:1d:46:10:70:2d:91:0e:88:60:41:73:fb:
8d:e7:9a:fd:e2:bb:4a:28:40:75:79:83:1b:79:aa:
95:d5:f4:0f:0b:0e:0a:8d:da:33:76:4d:78:56:9a:
9e:5a:61:44:f2:21:92:e8:89:f0:4d:0c:84:8e:41:
52:2e:ab:f8:81:0f:01:2e:6b:2c:ff:e9:80:1d:3f:
93:93:05:32:03:06:12:93:ea:0a:f6:c0:dd:f9:9f:
22:07:91:24:05:3c:ef:e1:c5:20:01:77:c5:a1:90:
49:2b:9e:49:70:70:28:bc:de:4c:f5:08:99:62:2c:
f0:b7:84:ba:e0:e8:15:c6:3f:7e:d8:e5:24:9f:d4:
91:f7:26:ef:11:16:8a:e4:73:68:04:a6:22:31:3e:
ed:17:1b:34:1e:61:38:14:a1:0c:5f:e6:4e:43:70:
05:ad:44:07:2a:34:85:6f:8a:70:44:23:39:5b:da:
71:52:16:53:b6:0b:dc:04:42:60:84:ae:51:cf:d1:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:87:BF:6E:5B:2B:74:A5:94:E6:B5:72:5A:F1:F0:BA:B3:7C:4A:A7
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:1c:a5:0a:63:e0:9b:ae:38:5e:d7:36:a8:c1:f3:c3:0c:72:
c0:94:d9:6e:3f:dd:05:36:d8:bb:3c:1b:8d:2c:84:43:40:1f:
5d:62:e3:ed:17:54:46:7c:e7:1f:18:12:2b:fd:1b:e7:cc:51:
b7:df:b2:ac:af:b3:22:4a:ec:26:6a:52:ed:bb:dd:a9:52:c2:
0f:87:d7:d3:64:09:f3:91:84:55:21:75:1e:8d:4b:5d:2e:1e:
6e:b5:37:73:a0:75:dc:0c:86:10:19:e4:e8:85:3f:96:c6:d2:
d4:bb:4a:b2:7b:84:15:d3:35:13:1e:34:f3:f6:9c:20:3b:b5:
dc:57:e4:40:5d:84:7f:a0:f3:6e:66:77:bf:d9:49:62:70:11:
03:dc:63:c0:05:2e:a2:e5:6c:60:a5:1b:db:6d:9d:42:4d:75:
bf:f7:d2:9c:fd:d7:fa:34:3b:52:ec:3d:9b:83:ac:d6:d7:fa:
f0:07:c1:52:fb:17:1e:18:5d:14:82:2e:b0:e9:2d:17:55:da:
90:7c:b4:11:e4:13:5e:4e:37:02:48:c6:65:b1:af:89:31:df:
ab:07:e9:18:3e:0c:75:92:cd:1a:4f:06:e7:3a:d5:0b:bb:46:
03:47:08:78:f4:42:cc:0c:b1:1d:16:f1:4b:b2:35:aa:ef:c1:
e3:40:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:18 2026 by rpki-client