Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: zLdwoFoLCY83VDQe7KoROVnRO+/by7tPPLQzIbaHDlM=
Subject key identifier: CE:70:FC:6A:B5:02:C9:7B:5E:60:74:C6:C9:9A:09:3F:91:0F:29:CB
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 019FA898D9F4540EDA6B8E689BB9F5E2A796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 12:00:17 +0000
Manifest this update: Tue 28 Jul 2026 12:00:17 +0000
Manifest next update: Wed 29 Jul 2026 12:00:17 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: VSJkFAi+hVdyjSZ4O7XGUdck01w/eUxX1joxPJ+vALo=)
2: bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa (hash: NnbPwHGrcdim6yrTkVQg/I67nU9XxwzvJk8QjULLx4A=)
3: oZr_EXsyQjW2TSmeXVYxNow-uRc.roa (hash: MMqu7TNNLRdy1w2DS9JU9E6roUikurSMo3WnZQdO9kU=)
4: zd8dlXTmCT-0m9TffsLEUAvTJYs.roa (hash: PkfGxsX99XUZA8APj8L5438qH49FAld+9Ynqz6Rjm9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:d9:f4:54:0e:da:6b:8e:68:9b:b9:f5:e2:a7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Jul 28 12:00:17 2026 GMT
Not After : Jul 29 12:00:17 2026 GMT
Subject: CN=ce70fc6ab502c97b5e6074c6c99a093f910f29cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:08:f3:cf:3a:bf:b3:00:03:89:06:75:e2:
4e:6a:41:c9:ee:50:e1:ee:d6:f6:33:b2:45:f5:78:
fc:f7:51:ba:66:80:63:b7:e3:09:32:48:49:b4:74:
39:cb:b7:16:59:8a:5b:19:62:49:ab:5a:54:47:44:
8a:69:11:00:5f:2c:34:07:4b:0b:95:69:38:e6:66:
79:cf:af:a6:9d:82:91:63:8e:fa:43:09:58:c2:f2:
b3:99:e2:c0:e7:7a:4f:79:5a:45:4e:ba:94:92:a5:
e0:bf:66:03:e4:26:72:f4:bf:f7:3c:e2:f5:b1:c5:
d1:d7:1b:cb:8b:56:bf:49:77:9f:29:d3:38:f6:f0:
ee:cd:c0:2c:83:8d:5e:df:3e:c5:fd:26:f6:df:32:
fb:e2:5d:cb:74:36:c2:11:df:5a:46:ce:9b:64:65:
3e:5d:44:aa:93:2b:49:46:4f:99:bb:fd:5a:2a:9c:
a5:cf:9d:ce:2d:67:f6:81:03:75:56:1d:bd:77:5f:
6c:33:2a:bb:83:cb:98:06:76:00:fa:e0:ce:a0:9d:
c0:03:7f:42:09:54:dd:f4:7d:c3:50:5a:45:33:ac:
ea:78:bb:17:56:42:55:34:a5:80:80:05:b6:d4:83:
02:79:49:70:78:d1:9a:b9:5c:80:14:e3:90:95:45:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:FC:6A:B5:02:C9:7B:5E:60:74:C6:C9:9A:09:3F:91:0F:29:CB
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:1a:5b:3b:65:37:fb:71:88:fb:c7:08:d1:1c:08:76:e1:2d:
61:04:75:d7:45:51:81:5e:2c:38:4d:c5:7f:c5:e3:97:24:ac:
8a:3b:4a:bf:a2:b1:a8:2c:c5:1e:05:bd:38:a5:88:51:ab:20:
26:fd:78:c7:ec:73:ca:58:f9:df:8e:7f:a0:11:7c:bb:e5:69:
17:64:18:cb:a0:a4:1a:cf:f0:50:d6:90:69:43:93:72:53:99:
32:7c:d6:fa:0f:53:93:e7:d3:67:b7:96:c2:c4:27:92:73:03:
21:bc:bd:d9:1c:d5:b8:34:ae:e7:e3:95:25:03:26:b4:28:d3:
06:ea:05:9d:d8:b1:09:5b:bd:37:d4:c7:0a:93:5e:54:bd:25:
c8:cd:80:2c:53:d6:3b:d3:17:f0:70:45:b7:27:54:17:4d:9e:
94:5b:bd:40:8a:b0:f8:b5:03:36:13:3a:a9:b3:5d:79:d0:41:
cb:53:c9:f4:af:c1:47:0c:24:24:12:63:ea:0c:aa:8b:0a:b8:
e4:7f:d6:82:4a:f4:24:5b:b0:ec:e8:6d:cc:ea:76:3b:50:db:
50:2a:78:fc:d6:48:99:13:7d:d4:bd:97:76:1d:bc:22:ad:92:
d1:c9:c0:d3:b8:7f:35:ab:53:f3:4a:07:77:61:ad:db:0c:0e:
ba:de:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:45 2026 by rpki-client