Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: rA0sYLX/SPR3U7+2b7pEd0DPdr9ZMbnHTsUDUUm4qpA=
Subject key identifier: F9:0C:9C:D2:CD:A2:AA:52:E6:8B:78:70:47:45:4C:19:1C:DF:41:92
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 01A0D5DE343E2824B8D225A0B464538D2F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: 04D1
Signing time: Fri 25 Sep 2026 00:01:44 +0000
Manifest this update: Fri 25 Sep 2026 00:01:44 +0000
Manifest next update: Sat 26 Sep 2026 00:01:44 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: vzhqP+IISBbS7RgZMxTHz71bcZeMP774BPskJGf4dDo=)
2: M3DwLkdZ4U5SO6WeKhfSjchcFqQ.roa (hash: GytdW9ktv5N5mIUsOefVAFMWXbdLbqFMuWoFw+Cxm4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:34:3e:28:24:b8:d2:25:a0:b4:64:53:8d:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Sep 25 00:01:44 2026 GMT
Not After : Sep 26 00:01:44 2026 GMT
Subject: CN=f90c9cd2cda2aa52e68b787047454c191cdf4192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:3f:46:69:a1:ce:e6:88:63:d8:f4:95:7f:
4c:31:30:7b:a2:45:ca:e1:e1:64:83:3b:3b:2d:c0:
62:03:80:63:1f:3b:d7:d4:82:50:a3:d0:cf:71:2b:
21:e4:91:1e:93:39:f6:aa:4a:df:87:ce:8a:f7:23:
dc:d2:69:dc:dd:97:da:af:ea:67:6b:3a:c1:bd:06:
fd:f3:ea:f9:e3:e0:f1:da:c5:c4:85:f4:5d:97:27:
8f:f7:ab:82:7c:4a:7e:4f:59:79:4a:f5:71:db:2e:
14:a8:7b:2a:23:51:61:a8:7e:66:34:a0:db:7d:28:
3d:41:84:da:a9:61:24:cb:ce:4e:8b:46:89:1d:87:
cb:b9:c8:38:94:e3:bf:44:84:8b:eb:13:de:28:92:
2e:2e:9f:b1:35:d8:eb:14:ce:84:59:74:0c:6f:04:
56:31:d1:f9:0d:3e:4a:bf:3f:55:9d:31:8e:bf:4c:
72:bb:eb:5f:2e:30:7c:e1:a1:4f:4f:03:f9:58:e4:
48:14:0d:55:f7:a0:96:f5:ce:12:66:e2:0c:84:42:
82:eb:f8:21:03:b5:c6:12:d8:6a:38:a7:f6:f7:c8:
ef:5d:64:e2:d2:2c:3b:92:ac:c8:38:83:19:d7:b2:
86:53:30:18:2c:6b:ba:fc:a2:8e:91:0a:1b:d9:71:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:9C:D2:CD:A2:AA:52:E6:8B:78:70:47:45:4C:19:1C:DF:41:92
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:93:ad:2e:0b:f2:0d:8f:48:99:99:8b:ac:2e:12:0a:28:
a1:4d:60:e6:c0:64:81:c4:5b:ee:b4:c7:da:73:5b:bd:58:ca:
0b:eb:f7:c0:f0:a5:5f:9f:2b:bf:0b:78:ba:b7:0d:18:02:b6:
c3:be:6d:f9:e5:46:c0:3c:af:c4:ba:a7:08:05:da:52:e9:24:
73:d4:42:a8:fd:81:4a:94:99:01:ee:b0:ca:3e:e4:17:a7:c8:
49:b7:2d:d9:b8:3c:ab:fc:e5:c2:a1:5b:51:de:3f:ad:28:ae:
57:4e:ef:1c:10:6a:88:0b:06:89:91:2d:3a:2c:35:70:c5:0e:
44:87:d3:23:30:75:1d:bd:f7:f0:87:2e:af:81:83:d6:23:1d:
9b:64:46:4c:66:4d:39:b2:41:33:e3:81:f2:d9:16:96:8c:ba:
e4:da:ec:cf:92:74:91:10:08:c4:69:97:a9:de:9b:e4:6d:6f:
d0:df:6c:42:e9:ee:85:be:5b:64:a7:fd:e6:5c:8c:3e:bd:eb:
be:52:5f:3f:73:01:15:81:8e:05:b5:e9:fe:11:e9:6f:d2:ff:
62:67:aa:72:fc:98:fd:f2:f3:3e:26:f8:e1:6c:c1:a1:de:95:
78:40:d5:b0:b2:02:d0:09:b2:50:6f:65:d2:ed:61:36:f7:7e:
e0:e4:1d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3jQ+KCS40iWgtGRTjS+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmMzZTg2NTRmZTg3YmRhYjQ3MTFkNzc2ZTQ0YjRmMGNk
MWI2NDcwHhcNMjYwOTI1MDAwMTQ0WhcNMjYwOTI2MDAwMTQ0WjAzMTEwLwYDVQQD
EyhmOTBjOWNkMmNkYTJhYTUyZTY4Yjc4NzA0NzQ1NGMxOTFjZGY0MTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35A/RmmhzuaIY9j0lX9MMTB7okXK
4eFkgzs7LcBiA4BjHzvX1IJQo9DPcSsh5JEekzn2qkrfh86K9yPc0mnc3Zfar+pn
azrBvQb98+r54+Dx2sXEhfRdlyeP96uCfEp+T1l5SvVx2y4UqHsqI1FhqH5mNKDb
fSg9QYTaqWEky85Oi0aJHYfLucg4lOO/RISL6xPeKJIuLp+xNdjrFM6EWXQMbwRW
MdH5DT5Kvz9VnTGOv0xyu+tfLjB84aFPTwP5WORIFA1V96CW9c4SZuIMhEKC6/gh
A7XGEthqOKf298jvXWTi0iw7kqzIOIMZ17KGUzAYLGu6/KKOkQob2XFMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkMnNLNoqpS5ot4cEdFTBkc30GSMB8GA1UdIwQY
MBaAFAlsPoZU/oe9q0cR13bkS08M0bZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEt
NGU3ZDU4NDhkZTAwLzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEtNGU3ZDU4NDhkZTAw
LzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6OTrS4L
8g2PSJmZi6wuEgoooU1g5sBkgcRb7rTH2nNbvVjKC+v3wPClX58rvwt4urcNGAK2
w75t+eVGwDyvxLqnCAXaUukkc9RCqP2BSpSZAe6wyj7kF6fISbct2bg8q/zlwqFb
Ud4/rSiuV07vHBBqiAsGiZEtOiw1cMUORIfTIzB1Hb338Icur4GD1iMdm2RGTGZN
ObJBM+OB8tkWloy65Nrsz5J0kRAIxGmXqd6b5G1v0N9sQunuhb5bZKf95lyMPr3r
vlJfP3MBFYGOBbXp/hHpb9L/YmeqcvyY/fLzPib44WzBod6VeEDVsLIC0AmyUG9l
0u1hNvd+4OQdTw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:17:11 2026 by rpki-client