Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
File: CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft (raw, json)
Hash identifier: VtO1R6mW8ujVEdGR+BpkltvvoqZVwvTi5+GXuVHbcIw=
Subject key identifier: FF:31:00:A2:D5:FD:54:C3:4F:84:1A:C6:B7:CF:E6:1C:46:89:10:30
Authority key identifier: 09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
Certificate issuer: /CN=0966d239db4031fd6f147f601a2bb6b033314069
Certificate serial: 01A0D0EDD655E812EB639EE53FCBA7A8F908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
Manifest number: 0144
Signing time: Thu 24 Sep 2026 01:00:42 +0000
Manifest this update: Thu 24 Sep 2026 01:00:42 +0000
Manifest next update: Fri 25 Sep 2026 01:00:42 +0000
Files and hashes: 1: CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl (hash: Y8RQ4pLEssQUfrZgZ+9nQ1sc149UmpStU9ajxPwLVns=)
2: GZAShLfc8NeJgF1_NRDRN1m5XTs.roa (hash: lixfepr/Gg7h2VoWBQECGRTLGauSXIp4KHdFX4z+DOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:d6:55:e8:12:eb:63:9e:e5:3f:cb:a7:a8:f9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966d239db4031fd6f147f601a2bb6b033314069
Validity
Not Before: Sep 24 01:00:42 2026 GMT
Not After : Sep 25 01:00:42 2026 GMT
Subject: CN=ff3100a2d5fd54c34f841ac6b7cfe61c46891030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:bc:f0:b8:fc:88:d3:6a:4e:1b:9d:74:53:
03:7a:3e:af:99:30:0f:84:be:b1:b7:3a:55:e0:97:
19:49:86:31:8c:24:2e:67:8f:6d:36:34:b2:03:1d:
f5:35:7b:6b:1a:b5:d8:35:f0:f8:6c:60:66:b5:93:
53:db:37:f3:6d:62:75:fa:d9:2d:69:f6:ee:a5:35:
d1:60:a5:e0:86:0d:59:35:25:c4:41:02:a8:69:2f:
66:e6:7a:e1:00:e4:7d:b9:92:61:e3:c8:46:9c:ff:
74:b3:95:d5:34:ef:2f:e1:5e:94:55:49:cd:3e:bc:
c3:0b:01:3f:1a:9b:12:cd:c9:6b:68:56:e6:a2:83:
e1:65:d2:d8:5a:0f:07:32:cf:40:b5:31:0c:83:81:
48:7d:1f:60:a5:19:38:ae:3e:12:f1:08:b2:a3:5b:
c6:2e:34:62:69:50:d6:d2:c5:5d:0a:7e:b9:c5:0f:
3d:08:4f:db:cf:28:c2:bd:fb:d8:5f:cd:4d:2f:c6:
59:ab:bc:85:f7:f2:58:ca:1a:c9:ef:a6:8a:f6:60:
58:19:72:4f:ca:4c:88:8d:61:96:c5:cb:0b:42:6e:
a5:89:db:41:d8:51:b2:e3:f8:ea:f7:79:a2:4e:62:
68:4d:f2:80:67:cb:02:2d:83:4a:78:0d:68:1f:5f:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:00:A2:D5:FD:54:C3:4F:84:1A:C6:B7:CF:E6:1C:46:89:10:30
X509v3 Authority Key Identifier:
keyid:09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:00:e9:e2:59:4a:6d:12:2f:b5:e6:aa:79:c0:d7:7a:cf:ab:
f2:b4:f0:f9:bf:5e:74:3b:2a:c8:05:5b:7c:4e:28:30:9b:b6:
d2:85:4e:45:a3:4c:6a:e0:6b:51:51:9d:52:5d:a8:4a:f2:e4:
09:cb:ae:58:7d:5c:0f:85:b1:33:6d:fd:2b:0f:3a:6a:72:e5:
e5:30:ed:18:03:83:55:a3:51:8c:88:4d:c9:80:76:a3:de:3d:
fc:63:c3:34:de:61:7f:d9:42:83:69:33:23:d1:48:06:e1:04:
b0:ee:19:88:10:51:91:91:2d:aa:4b:4e:52:13:38:29:bd:e0:
df:64:21:43:aa:61:d0:83:4a:01:e4:7a:87:17:23:2e:14:5b:
d4:f5:c6:09:e4:2b:00:0f:03:ca:05:81:df:f8:9c:a5:3c:1e:
d9:0d:ba:2a:33:5e:3b:7f:54:48:22:47:06:7d:bb:7d:11:c8:
81:d7:9e:ed:07:90:59:9f:54:7b:71:68:de:f5:bc:ab:3d:98:
07:7e:7e:53:7a:48:1d:d3:4d:38:d1:90:d3:94:94:ef:dd:99:
aa:cf:bc:95:1a:7c:e9:81:62:fd:d9:24:b7:65:b8:59:6a:85:
25:79:63:0c:c2:5e:7d:18:cd:eb:e3:67:2e:96:b0:e6:bf:69:
10:78:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:29:38 2026 by rpki-client