Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: H0zwqN8r0zQuQ30TTjAdSrm/1gS/i9doSOIIofOefLc=
Subject key identifier: A8:6A:08:56:F6:28:F8:7A:8C:B9:10:E6:98:97:E4:F8:BD:12:FE:D4
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 01A0DF4F403C301CEF1DA27B724B89271544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 20:01:47 +0000
Manifest this update: Sat 26 Sep 2026 20:01:47 +0000
Manifest next update: Sun 27 Sep 2026 20:01:47 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: U3kl0tTM6vGIi8ydmNFNGAD7zHfVrF28gXQyeZcKHGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:40:3c:30:1c:ef:1d:a2:7b:72:4b:89:27:15:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Sep 26 20:01:47 2026 GMT
Not After : Sep 27 20:01:47 2026 GMT
Subject: CN=a86a0856f628f87a8cb910e69897e4f8bd12fed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:fe:4e:c5:12:e2:66:eb:30:39:ac:5a:d8:
86:b6:d1:7a:32:66:db:cc:d0:98:4d:73:01:f5:64:
fc:fc:76:de:e3:4e:06:ae:6e:70:5a:32:8f:d6:0a:
98:9d:a2:57:57:83:36:08:3b:75:aa:bb:f3:c7:62:
ee:99:9f:67:f1:a2:59:76:e3:23:bc:22:42:71:7f:
e8:83:74:1f:16:ec:a3:d2:9a:dd:da:07:ad:fa:73:
41:e7:e0:89:3c:c2:69:63:34:eb:eb:02:5c:a5:af:
dc:b5:f2:82:10:ba:fc:91:c8:59:4b:11:a8:8b:06:
94:19:44:17:d4:74:ee:77:c2:29:31:3d:14:de:f4:
b4:25:ad:1b:0b:bd:23:69:81:ab:ab:ea:0e:70:10:
65:32:77:1a:3e:0e:1b:b1:78:45:72:75:02:1c:49:
26:31:50:33:19:00:4a:9d:93:4e:03:06:50:fd:e7:
c1:0a:1c:02:37:05:10:5e:b9:b5:59:95:65:f2:6d:
5d:d9:8c:be:31:a1:c2:1a:11:d5:c8:2e:54:6f:63:
60:c0:32:da:5e:9f:86:20:c8:50:e9:76:2f:e0:cf:
6b:62:35:ed:75:ae:00:38:01:ac:fd:7d:c9:cd:e5:
8b:44:b2:ad:16:e5:f7:f0:f8:16:e6:c6:61:32:64:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6A:08:56:F6:28:F8:7A:8C:B9:10:E6:98:97:E4:F8:BD:12:FE:D4
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:7a:2c:62:38:94:2e:30:3f:42:e2:61:98:66:9f:57:12:
33:db:8f:d1:aa:c9:e4:31:64:62:09:d4:72:65:51:cf:08:65:
4b:4b:91:80:0a:7d:ba:e6:28:ab:ca:27:a6:39:66:ec:d9:ae:
9d:85:9b:92:2a:a7:3b:45:94:56:30:14:1a:f9:f1:3b:75:96:
37:3b:ff:85:63:74:a4:fc:7a:f3:e1:27:1d:b3:c7:31:12:21:
d9:0d:11:30:43:39:c8:bc:ff:0e:34:4d:6b:03:27:a7:c0:36:
82:b1:27:99:e0:f7:87:9a:f0:fa:bb:cb:90:6e:67:ed:11:d8:
6a:fc:1e:06:38:23:b4:83:c9:2a:f1:d2:ed:54:24:8b:ac:cb:
62:d0:c4:10:dd:ca:b7:88:c1:b9:7c:63:96:1a:2d:e3:80:ed:
a2:26:a2:14:f3:4b:5b:0c:9c:4f:1a:7f:93:ef:dc:98:e4:aa:
c1:eb:c1:1a:6c:d8:a3:ed:a2:49:b3:84:58:01:93:d3:1a:73:
be:26:6c:14:68:75:32:82:2f:1a:6a:ba:8f:4e:2f:e7:33:f9:
45:ec:64:90:b4:fc:cc:d6:98:93:9d:39:dd:02:63:0b:35:25:
aa:dc:3f:2e:3c:e8:2b:8d:73:0f:4a:e5:bd:98:ca:79:03:4d:
68:fd:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:14:21 2026 by rpki-client