Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: 43gh8zHcMRdERpXRiVS5ohx0gaAocqRCFDrC+c0srKc=
Subject key identifier: 4D:CE:30:3D:6F:E7:95:94:E4:C2:1E:A7:47:07:E1:86:8C:93:BF:32
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 019CABD909275955A678020C69C2DEB46527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: UBLL4+0PIZFe+1PVoEygP5Z93SL5nrOTEteGkryrlDI=)
2: bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa (hash: NnbPwHGrcdim6yrTkVQg/I67nU9XxwzvJk8QjULLx4A=)
3: oZr_EXsyQjW2TSmeXVYxNow-uRc.roa (hash: MMqu7TNNLRdy1w2DS9JU9E6roUikurSMo3WnZQdO9kU=)
4: zd8dlXTmCT-0m9TffsLEUAvTJYs.roa (hash: PkfGxsX99XUZA8APj8L5438qH49FAld+9Ynqz6Rjm9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:09:27:59:55:a6:78:02:0c:69:c2:de:b4:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=4dce303d6fe79594e4c21ea74707e1868c93bf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:54:6c:3a:82:df:06:8a:a9:55:73:dc:98:
bd:9a:63:98:77:93:51:8b:80:12:75:d9:8f:a6:c5:
d4:8d:5f:c5:6d:17:9a:ea:22:9d:16:68:fa:ff:58:
57:67:8f:e9:72:03:cb:29:6f:fe:5d:2f:8e:b7:30:
8b:cf:e7:28:bb:1f:7e:ac:15:a4:67:95:30:81:11:
2a:f9:dd:ac:6a:ec:dc:8d:6e:5a:1d:24:34:03:1e:
19:12:38:b5:92:66:5d:84:49:4f:d3:68:f1:55:16:
24:d7:ee:f7:97:83:27:39:18:cb:73:d8:14:e0:fa:
6d:24:23:55:72:28:56:fd:f2:9f:3b:63:45:f3:89:
a9:c5:af:26:c1:ae:76:ca:88:f4:19:e2:7a:82:be:
0e:d6:c3:61:50:f4:d4:d2:fb:19:8d:ea:6d:a2:0f:
12:e1:05:9f:f5:6e:e7:27:3f:d0:15:e2:e2:a3:fd:
8f:ff:89:ba:c0:ec:41:36:c5:56:80:3e:de:fd:e9:
05:d4:67:40:b8:03:50:b4:39:4d:31:7d:6e:00:1c:
33:fe:d2:b7:c2:ac:f9:fd:d4:ce:de:eb:6d:37:4b:
80:d8:09:33:4d:ac:62:f3:bf:a9:e5:20:5a:6c:67:
98:1a:a7:cd:e4:e8:b2:7b:ae:08:fd:40:b0:ef:b2:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CE:30:3D:6F:E7:95:94:E4:C2:1E:A7:47:07:E1:86:8C:93:BF:32
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8b:0f:9c:15:6f:12:c8:d0:47:08:f3:0d:3b:ba:f8:73:c1:
f6:32:21:81:03:42:b0:cd:45:61:41:76:94:ea:04:94:9a:9b:
12:d6:9a:01:bd:5c:f2:2b:e5:0f:7e:fc:c6:72:4a:ac:48:af:
ed:1f:7d:58:a7:2f:1c:c7:63:89:56:d8:74:73:a8:72:e1:83:
e7:61:22:2b:4d:6d:a8:94:ce:8e:52:d0:4f:ea:70:cd:34:ae:
1e:5b:f2:52:10:b7:b9:f3:29:51:1c:71:20:11:20:19:d5:90:
b6:28:0e:1b:87:50:4e:e6:5b:4e:9d:c2:d7:ad:ab:a8:fb:a5:
e0:36:b5:cc:0f:50:67:45:88:ab:6e:ab:1a:f8:3d:f3:33:b8:
19:81:5f:ac:21:68:f7:7f:b6:bd:06:6b:93:24:d1:24:e4:b8:
c4:07:6e:f4:de:ae:13:4e:c3:eb:77:49:0e:31:58:5c:9f:75:
45:90:f2:55:87:d2:62:9d:68:7a:0b:98:66:3a:c9:6b:1b:9e:
95:00:ff:6a:33:dd:fd:b3:68:43:8a:53:76:47:9a:51:c4:d6:
13:58:71:45:be:a3:e4:b8:93:18:b5:1d:c1:32:65:53:33:7f:
64:33:fa:cc:de:ab:95:5a:a7:58:e4:2c:fd:aa:d9:27:e4:ee:
6b:cc:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:08 2026 by rpki-client