Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: vPX6SDaLC1O+4+UcdcVlKRAj6ddArpBA/LSX5sFJJ8M=
Subject key identifier: 97:42:09:FA:FB:F2:22:2E:36:AB:EB:0F:DD:D6:9F:09:F4:AE:7D:04
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 019F8F7E9041C1BCD68A6FC3DC6609A38ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: 0428
Signing time: Thu 23 Jul 2026 15:01:04 +0000
Manifest this update: Thu 23 Jul 2026 15:01:04 +0000
Manifest next update: Fri 24 Jul 2026 15:01:04 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: uup5o07chlhitwBtkMNcVAGVeJlrfs5q96hDNE4kRH8=)
2: M3DwLkdZ4U5SO6WeKhfSjchcFqQ.roa (hash: GytdW9ktv5N5mIUsOefVAFMWXbdLbqFMuWoFw+Cxm4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:90:41:c1:bc:d6:8a:6f:c3:dc:66:09:a3:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Jul 23 15:01:04 2026 GMT
Not After : Jul 24 15:01:04 2026 GMT
Subject: CN=974209fafbf2222e36abeb0fddd69f09f4ae7d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:0e:17:c5:1a:7a:8f:af:1f:66:26:0e:25:
f1:4d:6c:b4:a7:60:70:82:87:a0:e9:56:57:fa:c4:
e3:44:28:d2:4f:b5:a1:a7:e3:40:45:b4:7d:fd:44:
c4:08:ad:8c:86:84:e9:04:3c:b0:6f:44:e6:e6:42:
4d:b9:c6:72:39:a4:79:2e:24:3c:07:08:f4:71:74:
6f:7e:61:f6:da:45:51:09:6e:07:f1:f4:de:c1:7e:
da:bd:59:b0:33:46:c2:86:74:e8:ca:b9:e2:07:11:
91:a8:5f:b4:43:ef:73:1d:72:33:66:e5:6a:fb:d1:
0c:4d:f7:0a:a5:bd:64:90:4a:4b:01:65:37:af:14:
9d:d2:25:85:83:7d:a0:80:77:d6:08:d6:48:00:2b:
d8:2d:69:cd:6e:23:69:72:9c:cf:70:d3:1b:32:1b:
e0:26:22:2b:54:cf:c6:60:77:f6:33:74:d9:ff:70:
f7:89:77:89:84:c3:00:f4:b3:08:e4:a1:3d:e9:66:
43:86:a7:33:bd:fe:76:1e:b6:aa:ff:9e:70:c4:a3:
18:b0:cf:c4:94:57:b1:6c:19:d0:c7:33:3e:61:cb:
60:35:49:c5:e8:89:3b:8a:05:2c:61:5b:b4:db:17:
2e:42:2d:1e:0c:a2:65:b5:1c:2e:85:3b:b0:02:b7:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:09:FA:FB:F2:22:2E:36:AB:EB:0F:DD:D6:9F:09:F4:AE:7D:04
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:25:26:ba:a7:0c:82:c9:bb:0e:c7:81:bd:40:7d:e5:dd:e6:
ef:ac:27:c1:d9:5d:33:4f:b8:35:70:79:37:a6:a2:d3:58:2d:
7b:2d:34:a2:fb:5a:35:7c:de:3f:c0:ad:0b:bd:61:74:41:af:
b3:03:35:98:83:93:da:27:48:f5:b8:1b:87:b3:06:1e:6a:31:
c0:7d:cc:b6:83:93:32:d1:e2:7d:51:a8:ce:32:48:ae:95:7d:
62:b0:46:7f:48:d4:12:ce:79:18:1a:02:a1:f3:57:ee:74:36:
68:71:84:04:14:0f:c6:cf:01:80:61:0e:ba:e4:85:28:21:db:
f4:37:5f:87:36:83:91:28:fd:6f:f9:29:4e:89:af:2c:ad:13:
15:45:39:93:36:74:92:a5:aa:37:0e:01:c9:01:53:1a:21:07:
2d:3c:4d:90:7f:30:e9:b0:a2:c9:cd:f8:15:9b:63:f7:57:d5:
0c:36:e0:e5:61:d9:68:0c:06:75:cc:e6:a0:4f:92:c4:e0:ea:
b4:17:1e:32:84:19:79:b9:a8:11:95:a4:00:4d:b4:16:09:7a:
2f:54:ac:08:c0:30:3b:20:db:9c:58:fe:ea:df:ee:2d:1e:2e:
b6:8d:2a:21:31:6e:19:39:3b:6c:1d:a3:a3:2e:d0:26:04:a1:
d7:cb:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:00 2026 by rpki-client