Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: RxXBRjMrvR9abJQEm8LIRTOudi8YL6hctwSDMwpbn0w=
Subject key identifier: 35:C8:4A:BC:4F:05:A9:6F:F3:21:08:96:14:EE:14:2D:12:B3:C9:D4
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019CAAC64B5D73430E45F3028BA8AE687067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0AE8
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: ADreNuUyfkpmN/eAznlwR+Mpdxt1xggm7vTmy81QDyE=)
2: wwo_DxaaSlkeSM_BlRmma4rbf0I.roa (hash: mqk1cRlhcQcCo6/bhwR5BjCAjJJ/RC++qOvJ8wDbdP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4b:5d:73:43:0e:45:f3:02:8b:a8:ae:68:70:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=35c84abc4f05a96ff321089614ee142d12b3c9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:78:0f:d1:55:e6:6f:4c:a7:a5:20:6f:f6:
ed:c9:7a:62:c0:b0:19:38:f4:a1:b8:0b:8d:33:45:
62:2d:48:9a:90:4c:dc:9b:7a:1a:35:9e:ed:fc:2a:
6d:c5:8f:87:2b:34:12:60:9e:46:7e:a0:7d:e7:31:
72:32:5a:fb:c1:0b:78:74:e8:ac:2f:99:be:85:e0:
04:3e:2b:01:53:41:74:90:dc:0c:56:41:00:b7:61:
47:93:7a:e1:31:66:db:c9:6f:e0:36:e0:e7:6f:30:
75:ca:ca:cb:24:ea:a9:55:08:92:f9:d5:06:94:15:
ec:16:8f:1c:e9:9e:65:2b:e9:d2:c7:56:ba:44:f4:
2c:e7:af:a5:e7:77:c5:5c:07:4f:16:f3:87:91:fd:
21:c2:ca:8c:65:47:99:fa:8a:19:60:9e:69:80:12:
8d:d1:1b:fc:15:7c:89:b4:ce:22:a8:64:ff:b3:86:
95:eb:3b:b2:dc:be:85:5b:a5:25:10:7d:df:01:03:
ff:72:2f:2a:d7:d1:3b:1d:4c:ed:e3:32:20:f4:cc:
09:8e:ec:c3:6c:70:1a:09:9e:d9:05:d3:96:ef:49:
f8:fb:2e:5d:39:32:61:73:e5:9e:ee:be:af:27:9a:
be:48:4f:05:2b:69:bf:b8:c5:2d:28:38:a8:b7:8d:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:4A:BC:4F:05:A9:6F:F3:21:08:96:14:EE:14:2D:12:B3:C9:D4
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1b:35:d7:ec:b2:71:fb:0a:57:e0:6b:f5:73:f6:a7:37:7b:
1b:2f:a2:2b:e8:69:15:2c:01:5a:38:40:12:82:75:1c:28:c6:
9b:51:95:64:85:d7:86:0e:8a:24:6d:2d:00:14:3b:8d:68:b6:
db:7b:66:0c:f3:14:b7:34:0a:1f:95:1b:91:8b:84:ef:25:d0:
99:3f:d9:14:8d:05:19:93:0e:5b:92:83:53:ec:cb:77:ac:8a:
28:05:91:6b:70:f5:22:5f:1e:f5:8a:2d:c0:c4:54:f9:d7:34:
db:c7:32:f9:33:eb:10:9d:b6:a4:39:88:91:4f:5f:d5:e2:48:
6a:28:97:8a:97:4a:b8:c0:fc:b7:b4:fa:fb:45:80:50:52:60:
2a:a3:c6:42:95:83:f6:52:6f:d6:0a:94:ab:ba:2e:7a:32:81:
dd:79:ca:44:4f:8f:7e:90:ba:96:79:a2:3a:0b:94:9a:b8:32:
a4:7c:fb:bf:67:88:fe:30:c0:8c:0d:a1:cd:26:c2:1c:6e:cd:
2b:bd:38:4f:8c:c2:fb:85:5e:10:66:0b:26:2e:55:90:43:2e:
e1:d9:53:bc:73:ed:75:7b:a3:33:2d:da:e6:6b:21:5e:b6:dd:
b5:6c:29:d5:e5:bc:d0:9a:13:f1:be:d7:36:03:52:e3:4f:a9:
d6:74:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:04 2026 by rpki-client