Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: pkYSn75g9SrafJTncVXC0IG0dsz8nSGqHJYdd60NMsE=
Subject key identifier: D2:CB:E9:D7:A9:2E:D3:5A:C4:B3:87:23:49:64:B3:4E:D5:3D:65:87
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 01A0C1B199956F751FF7B837B068EC066065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0D32
Signing time: Mon 21 Sep 2026 02:00:36 +0000
Manifest this update: Mon 21 Sep 2026 02:00:36 +0000
Manifest next update: Tue 22 Sep 2026 02:00:36 +0000
Files and hashes: 1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: Rqn+N/MqXMYYWs1KzmsRt8GiBTgeAbSi5b/o1oMrlmc=)
2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:99:95:6f:75:1f:f7:b8:37:b0:68:ec:06:60:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Sep 21 02:00:36 2026 GMT
Not After : Sep 22 02:00:36 2026 GMT
Subject: CN=d2cbe9d7a92ed35ac4b387234964b34ed53d6587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:48:fa:88:12:2c:6c:76:ac:22:74:8e:4f:
f6:16:3f:ca:c3:da:67:13:70:57:4f:75:f2:29:94:
56:f7:5d:4a:0a:a3:9d:11:d2:21:32:4a:c5:c0:d0:
22:7e:5a:0f:b0:bc:61:3b:4b:ff:dd:eb:14:9a:9d:
2a:de:ae:44:4d:4c:b3:7e:43:2f:1f:27:23:e1:4e:
42:84:9c:ad:14:9b:84:49:cd:4b:5f:ff:04:91:a7:
91:85:3b:0f:09:7b:86:13:21:14:e1:25:56:8c:29:
97:0a:ad:d8:c9:22:ab:b3:33:62:68:ea:85:0b:5c:
b6:12:90:4c:05:28:1e:92:34:89:09:05:fa:7a:b4:
2c:e3:c1:4b:19:be:20:62:5f:80:6b:ae:c6:91:75:
90:0f:11:72:1a:45:3b:06:20:42:16:2d:dc:d4:6f:
e2:fc:0a:46:07:7e:02:d3:d7:4d:99:bd:26:6b:7f:
ef:14:d0:b7:59:8e:af:a9:61:77:ca:6e:e0:d4:32:
59:2a:f6:f2:5a:5d:35:bd:80:95:49:b4:45:5a:7b:
14:b3:0a:ba:0c:6d:8a:a9:64:fe:09:f6:dd:61:69:
ab:b6:5f:9d:2c:1e:e1:a6:5f:8d:1d:f6:85:a2:c0:
cc:0e:48:a3:76:d6:ce:b0:c8:e2:43:ad:5a:9b:06:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:E9:D7:A9:2E:D3:5A:C4:B3:87:23:49:64:B3:4E:D5:3D:65:87
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c8:7b:d1:88:6c:df:85:22:29:92:f4:29:1a:bd:8e:16:e3:
7f:38:d0:97:f2:1b:a5:6b:bb:ee:02:ec:f2:d8:b1:89:d3:7d:
62:bd:22:01:e3:b3:d1:5a:dc:3a:da:71:cc:42:7f:a6:81:3e:
fc:30:d5:fe:e8:29:56:a9:8e:2e:ba:39:b0:c1:11:5a:a4:f2:
81:7a:dc:ad:0c:a4:77:14:6c:77:7e:08:47:56:6b:66:b8:5a:
19:7c:56:85:52:5d:75:38:3d:bd:fe:84:87:cd:13:df:cb:5f:
4f:6f:2d:ce:2f:ca:6b:7c:ca:cf:cb:1a:3f:dc:1d:41:7e:fe:
40:2b:78:28:7d:a6:af:f6:a7:c6:bc:8e:51:20:31:47:f9:25:
02:47:43:f8:95:3c:bb:54:94:41:aa:0f:4a:8d:7c:9a:68:17:
3e:83:61:ce:da:1d:e1:c2:52:34:14:fe:7a:7d:1e:cc:a5:6f:
37:d8:45:f6:b7:db:5c:0f:cc:54:ea:eb:bf:02:c9:cf:16:78:
68:21:a3:84:51:07:ee:bf:d7:bd:eb:a3:0e:e3:3f:fa:b0:30:
cb:54:66:f4:95:a8:51:48:48:81:83:72:2d:67:4b:e1:1d:e8:
2d:10:48:5e:b0:71:9a:60:8e:21:34:6b:e8:b1:8d:c0:cf:72:
12:84:c3:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsZmVb3Uf97g3sGjsBmBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2
ZTM1NzgwHhcNMjYwOTIxMDIwMDM2WhcNMjYwOTIyMDIwMDM2WjAzMTEwLwYDVQQD
EyhkMmNiZTlkN2E5MmVkMzVhYzRiMzg3MjM0OTY0YjM0ZWQ1M2Q2NTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9dI+ogSLGx2rCJ0jk/2Fj/Kw9pn
E3BXT3XyKZRW911KCqOdEdIhMkrFwNAifloPsLxhO0v/3esUmp0q3q5ETUyzfkMv
Hycj4U5ChJytFJuESc1LX/8EkaeRhTsPCXuGEyEU4SVWjCmXCq3YySKrszNiaOqF
C1y2EpBMBSgekjSJCQX6erQs48FLGb4gYl+Aa67GkXWQDxFyGkU7BiBCFi3c1G/i
/ApGB34C09dNmb0ma3/vFNC3WY6vqWF3ym7g1DJZKvbyWl01vYCVSbRFWnsUswq6
DG2KqWT+CfbdYWmrtl+dLB7hpl+NHfaFosDMDkijdtbOsMjiQ61amwY6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLL6depLtNaxLOHI0lks07VPWWHMB8GA1UdIwQY
MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt
ODUxZWE2NWNiOThiLzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi
LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8h70Yhs
34UiKZL0KRq9jhbjfzjQl/IbpWu77gLs8tixidN9Yr0iAeOz0VrcOtpxzEJ/poE+
/DDV/ugpVqmOLro5sMERWqTygXrcrQykdxRsd34IR1ZrZrhaGXxWhVJddTg9vf6E
h80T38tfT28tzi/Ka3zKz8saP9wdQX7+QCt4KH2mr/anxryOUSAxR/klAkdD+JU8
u1SUQaoPSo18mmgXPoNhztod4cJSNBT+en0ezKVvN9hF9rfbXA/MVOrrvwLJzxZ4
aCGjhFEH7r/XveujDuM/+rAwy1Rm9JWoUUhIgYNyLWdL4R3oLRBIXrBxmmCOITRr
6LGNwM9yEoTDfQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:36:27 2026 by rpki-client