Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: uvKhdsjheN9QAbqYXgrSLpF4e5sJT1NaQtZMv3xTRmA=
Subject key identifier: D9:31:3C:8B:F1:47:6D:73:5B:5E:73:34:9A:31:3E:A4:82:3B:04:CF
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 01A0C58E1155A5E7ECAC21B3B5EFC4712ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 20:00:17 +0000
Manifest this update: Mon 21 Sep 2026 20:00:17 +0000
Manifest next update: Tue 22 Sep 2026 20:00:17 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: Cb2ZycdnAb507tCfqQFbB2DQ4jnHFfosr5dWdqpgwr8=)
2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:11:55:a5:e7:ec:ac:21:b3:b5:ef:c4:71:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Sep 21 20:00:17 2026 GMT
Not After : Sep 22 20:00:17 2026 GMT
Subject: CN=d9313c8bf1476d735b5e73349a313ea4823b04cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:04:82:c2:2e:f0:e0:95:6e:02:e9:a8:21:
e4:1c:cc:9b:cf:13:70:f4:d6:19:8f:87:02:c7:68:
7d:b3:3d:b2:8f:01:1b:79:9e:53:37:ca:57:c2:92:
72:de:92:a6:f5:81:bf:b7:4e:18:11:2b:e8:95:c4:
6c:12:92:b2:63:f1:6c:85:65:fa:fa:6e:09:11:5b:
b9:57:a0:4e:8e:ef:62:fd:fc:0b:6b:57:a4:3d:ec:
4e:58:5c:59:13:5a:81:57:34:a4:40:b6:65:b9:46:
d2:7b:98:ee:16:5b:51:66:07:f6:10:b4:50:6c:11:
06:5c:77:37:d3:05:48:6b:b8:9d:b2:2c:a6:a6:b5:
9c:fa:34:c3:5c:e9:9f:52:db:8a:18:f1:e9:cc:dc:
7c:c2:40:72:51:2e:36:c6:9a:05:41:1e:79:ec:32:
c3:12:d8:a3:5d:90:40:31:ad:14:0e:62:0f:85:a1:
f4:17:b6:1f:76:6d:1a:5a:80:04:6b:1a:0b:39:38:
21:96:03:9e:81:21:04:14:d9:72:2a:3c:f3:92:14:
6c:b2:f1:07:ed:ff:67:d2:85:1a:ec:0e:af:ad:74:
88:db:1a:fa:7c:f2:73:55:17:11:71:1b:21:ff:52:
42:7d:8c:ca:26:92:78:b6:0e:45:42:c2:8b:25:32:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:3C:8B:F1:47:6D:73:5B:5E:73:34:9A:31:3E:A4:82:3B:04:CF
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:01:29:78:ca:bf:9c:56:bd:f3:5c:ca:e1:d2:67:3d:73:f2:
76:18:c4:c6:f6:4c:f0:f8:56:f1:e2:48:6a:88:4e:a6:18:0a:
9c:8e:da:19:b6:08:c7:83:4f:33:26:8f:02:fe:09:43:92:d5:
54:98:53:00:43:7d:c5:8d:c0:fd:20:fc:0b:3f:04:de:48:23:
6e:c8:b7:5f:49:aa:8a:f1:38:63:e1:2e:e4:9a:2d:df:85:0c:
4e:77:d5:83:c8:2a:51:9d:57:7c:f6:74:a4:86:fc:6d:47:a6:
cc:7d:ab:b5:a2:03:c0:bb:e3:04:ab:4e:f4:43:a9:ce:ea:b4:
34:c3:b4:2f:1e:45:45:5e:cf:ff:6e:e7:3f:3c:5d:40:28:e9:
33:71:a6:a1:30:0c:f0:f1:1d:f0:1c:fc:4e:14:ca:aa:54:ed:
89:3c:84:da:07:9b:42:17:a1:6c:0f:03:ad:a5:04:70:33:93:
cd:b6:f4:8a:e1:22:59:8e:b9:97:29:e1:8d:a2:0b:56:ad:8e:
b2:12:fc:72:39:ed:22:a0:33:28:c0:b2:4d:23:da:1e:d6:09:
a6:02:75:c4:43:ef:44:5b:c1:62:a2:25:22:d5:28:5c:b2:f8:
85:46:bd:d2:c3:20:12:23:6b:5a:ea:d0:be:7d:f5:44:24:27:
cb:81:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:02:31 2026 by rpki-client