Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: 2TUqUM7yHZjy5VchBZtUbNJP24sZTmfYc9ItT1O+XAM=
Subject key identifier: 7C:9F:46:92:C0:13:75:43:DD:B7:AA:B1:C9:F3:BE:F7:A3:A5:56:90
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019CACEB4BABA7300C67CDCA3A1EC1602B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0B15
Signing time: Mon 02 Mar 2026 05:00:27 +0000
Manifest this update: Mon 02 Mar 2026 05:00:27 +0000
Manifest next update: Tue 03 Mar 2026 05:00:27 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: 6Oy7RKeRHLk5A6vp7CkBP2mhAH3L/qgFmHyGF2x4Ecw=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:4b:ab:a7:30:0c:67:cd:ca:3a:1e:c1:60:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Mar 2 05:00:27 2026 GMT
Not After : Mar 3 05:00:27 2026 GMT
Subject: CN=7c9f4692c0137543ddb7aab1c9f3bef7a3a55690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:50:8c:f9:b3:db:0b:02:06:25:4f:ec:ba:
b4:3d:bb:cc:43:63:9f:d5:5f:66:ba:6a:61:0b:ae:
2a:6d:a6:e6:b8:d2:c2:b5:99:1c:20:d1:4c:36:fb:
86:0d:be:f4:ce:31:fb:65:9b:5f:56:97:bc:4e:a7:
7b:00:41:17:f7:a3:66:b1:3e:88:4f:92:04:67:82:
97:73:65:f3:5b:45:64:41:4f:04:63:57:10:55:83:
03:f7:76:fe:38:6a:be:f2:1f:f0:63:af:51:9b:38:
cd:d3:3f:ba:86:2e:35:7a:2c:1d:d3:5f:4c:51:5d:
92:f6:33:a4:9a:f9:66:74:6c:f0:8c:c2:37:01:1a:
c9:d0:aa:08:0f:ba:eb:e0:9d:24:1c:6c:28:0c:85:
e7:fc:8f:6c:66:f9:7d:8a:5c:48:c5:b3:cc:47:e2:
16:fd:0d:da:19:ee:2f:51:87:3d:3b:0a:79:df:f8:
60:62:fd:e0:52:e4:59:82:38:69:92:6b:b9:de:fe:
f9:fb:fc:61:15:2c:a3:e9:0c:c1:c8:ee:4c:6b:68:
ae:de:41:8b:7a:7b:73:b0:21:b2:6e:32:7b:9f:4b:
d3:c7:4d:7e:64:dc:f0:95:27:f5:c6:8a:7f:7c:4d:
11:cf:2c:58:ac:90:03:d3:6e:81:73:6f:3f:0f:9c:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:46:92:C0:13:75:43:DD:B7:AA:B1:C9:F3:BE:F7:A3:A5:56:90
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2e:af:f8:92:1a:fe:b0:6a:52:87:89:34:0e:df:78:8f:55:
ac:02:78:dc:5d:de:e2:bb:ec:0c:6c:8c:15:3a:8c:c6:b9:be:
a0:97:ef:58:28:eb:4f:e8:a2:d2:5e:6b:a7:8b:0b:ed:96:a8:
59:44:ff:2d:73:8b:bc:0e:a6:90:da:48:1e:7a:80:95:df:85:
72:2e:6d:d9:80:a4:ad:7a:e5:4c:fa:2d:d9:bb:a8:cb:13:5d:
1b:c9:89:b3:c1:9d:8f:90:75:17:09:35:61:bc:fe:d5:1a:0e:
36:af:6c:15:58:89:8e:23:26:25:96:0e:1b:32:12:a4:f6:da:
68:1e:7c:1e:25:f9:1e:69:32:c0:79:2c:a3:95:8e:6d:8a:ef:
a8:48:1d:b0:8d:26:ac:23:d8:a1:88:6d:29:8c:24:ec:a7:e1:
d4:aa:97:d2:19:5e:3d:40:4b:55:c3:01:c0:70:23:66:3a:e2:
8a:26:8c:57:b0:a3:48:25:74:f8:25:59:68:8c:84:bb:f9:61:
02:78:d7:38:fa:3e:26:87:c7:c3:07:a8:e0:7e:cd:d4:fd:c2:
28:79:d9:16:56:8b:79:f1:96:48:d1:67:89:cd:92:48:8b:24:
d8:8a:f1:cf:79:17:73:bf:f4:34:41:65:85:63:60:45:d1:3e:
1b:c0:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:54 2026 by rpki-client