
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: ZKK8vtUsu9qjgET6/d0AlpoafAZlip5yLtbSZgg8jn8=
Subject key identifier: 33:B5:42:C3:67:0F:7C:51:E4:DD:07:B3:33:7F:72:3C:14:A5:2B:68
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 019D9B50BD040F4BE0AD2ADDABEF2F0465E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:00:52 +0000
Manifest this update: Fri 17 Apr 2026 12:00:52 +0000
Manifest next update: Sat 18 Apr 2026 12:00:52 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: WqIloGJk27xzPmGqtWYHQY8z5GGUe1liVquus2M/17k=)
2: bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa (hash: NnbPwHGrcdim6yrTkVQg/I67nU9XxwzvJk8QjULLx4A=)
3: oZr_EXsyQjW2TSmeXVYxNow-uRc.roa (hash: MMqu7TNNLRdy1w2DS9JU9E6roUikurSMo3WnZQdO9kU=)
4: zd8dlXTmCT-0m9TffsLEUAvTJYs.roa (hash: PkfGxsX99XUZA8APj8L5438qH49FAld+9Ynqz6Rjm9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:bd:04:0f:4b:e0:ad:2a:dd:ab:ef:2f:04:65:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Apr 17 12:00:52 2026 GMT
Not After : Apr 18 12:00:52 2026 GMT
Subject: CN=33b542c3670f7c51e4dd07b3337f723c14a52b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:4e:3f:b8:49:24:b3:df:e1:7b:02:19:63:
fa:6f:77:77:31:f9:bb:ed:a3:37:d5:e5:90:71:82:
e9:89:a7:0e:b1:82:c1:d4:68:25:14:c3:d9:11:6a:
4a:03:37:44:5d:30:93:b2:7d:1e:90:18:fc:ab:9e:
b0:5c:49:44:63:ff:9d:b2:13:5b:3b:b9:00:96:b4:
29:21:35:28:7c:47:70:49:c0:8a:cb:27:aa:8f:40:
4b:95:bc:03:bd:da:8e:99:a0:96:11:cc:14:83:e7:
20:c7:4f:bf:7a:65:bd:26:f4:0e:c4:60:7b:8e:9a:
77:44:40:0e:cf:0f:d4:93:39:7f:05:75:f3:23:6c:
96:b4:ed:f5:7c:a8:16:4c:6a:92:90:9f:aa:d2:33:
02:32:09:87:33:9c:66:58:76:4a:78:de:a2:c9:7e:
5a:51:7c:01:3a:bc:e4:a5:c2:d6:9b:e4:42:d8:4a:
e7:17:16:d8:64:79:b6:7a:df:ff:f4:a6:06:aa:d1:
4b:aa:12:6a:7c:14:b1:cd:f4:cb:74:93:da:53:c9:
a5:5f:a4:25:98:04:1b:29:8f:59:2d:cc:52:63:63:
8a:08:f6:00:cf:8b:31:ec:10:c9:4e:43:86:26:db:
42:72:53:18:76:0a:7d:41:3e:0a:b0:b3:43:f9:06:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B5:42:C3:67:0F:7C:51:E4:DD:07:B3:33:7F:72:3C:14:A5:2B:68
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:58:ab:59:dc:37:ef:ba:a4:f5:0a:47:d5:78:f2:8d:b7:8b:
d8:52:97:cb:61:f7:c7:19:18:24:8c:45:c9:87:26:e4:06:c6:
cd:02:6f:5b:68:b0:8d:1b:55:62:59:1e:b8:0c:17:bb:e1:fb:
f9:25:ac:65:fe:bc:d2:fd:02:8f:61:c7:ea:ad:33:6f:fc:fa:
c1:77:35:e7:36:4a:aa:43:92:14:aa:bb:1a:3b:13:aa:26:c4:
bc:dc:5a:72:80:eb:a3:01:06:4d:30:22:c0:40:b2:9e:e6:e7:
34:ad:51:64:d4:92:06:21:a0:0e:c9:7b:b1:2a:81:87:e2:5f:
37:c0:5e:e8:5c:97:cd:17:e0:02:cc:42:9f:e3:b7:2f:db:66:
e5:2e:79:9f:d5:d6:8f:1f:06:d6:bd:8c:e8:cd:b4:4e:b9:f3:
ff:58:d6:ef:ad:50:38:2b:8a:f7:b2:37:c4:b0:26:51:b0:02:
82:a2:0b:c8:03:47:c9:06:91:17:0a:e2:5f:a9:28:70:40:40:
73:37:ef:bc:59:5e:60:d8:36:60:56:a4:4d:96:87:4c:f0:ae:
ff:87:a0:66:f9:82:85:91:4e:29:5b:6d:79:00:67:68:36:90:
18:dc:ca:20:2d:99:fd:8b:e5:91:71:68:be:85:fe:c5:b9:34:
79:ec:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:39 2026 by rpki-client