
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File: CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier: el2LPPe61RvNLI3HljMbIRldvLN9ikRRl5mcLFB8t+k=
Subject key identifier: 67:15:B5:50:4F:3C:18:33:91:FA:72:FE:B4:AE:E1:EE:91:37:37:25
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 01A0CB22E919260014E3BAAF01C0D36BA011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number: 0BD0
Signing time: Tue 22 Sep 2026 22:00:57 +0000
Manifest this update: Tue 22 Sep 2026 22:00:57 +0000
Manifest next update: Wed 23 Sep 2026 22:00:57 +0000
Files and hashes: 1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: A9XnOd1Fk6X+WEPuBBZ8I/4TMEWkiruoQ2z5xg2GcRA=)
2: RsTSr-3jTnG1CeXmaL5yjIv3e7A.roa (hash: U9h7mXi2TPfXP2mWBMjzpDcUhTXc3t6ZDS7Y90GMnqI=)
3: V2mAUhiuLSdY43WTX18t68JU52U.roa (hash: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM=)
4: ZYguphbq_OVZXqnSVXPcyY-MrWU.roa (hash: YBNSr4xuGhr4HSUuVKzH8avlZXqqbx+cNVBs9dQx+pg=)
5: kNW-FofDRFcYyJ6jdZntLsWi_kQ.roa (hash: vsRui+TumYQf+mEKOxKsjjJTMlbNB6Ytf/Fua/xhVUM=)
6: ksfa6RQDM_0VxmjR64arGWZD9rM.roa (hash: eBadilkI77a4zTmLhePWsFBGmFNKACYzx+SMzHBV/40=)
7: yNd_DMkIMvgYnrn_7Wsari1U2DE.roa (hash: IEhZvaGq91qhQu5JNN1NRfY/8v2XmumSPV2Zm2UUU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:e9:19:26:00:14:e3:ba:af:01:c0:d3:6b:a0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Sep 22 22:00:57 2026 GMT
Not After : Sep 23 22:00:57 2026 GMT
Subject: CN=6715b5504f3c183391fa72feb4aee1ee91373725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:9a:e3:97:7f:22:b7:1e:de:04:48:2c:52:
ae:b1:be:ec:7f:a9:3e:e1:1f:6a:e3:f5:7d:8d:2b:
a5:bf:32:00:87:03:67:89:52:da:13:04:65:2c:ef:
f5:41:ef:6a:06:3c:7e:12:9c:fd:4e:c6:cb:e1:97:
ea:52:ac:a3:f3:3d:97:fa:8a:f3:60:52:57:b0:27:
e9:c7:23:f4:d7:3c:bf:02:42:6d:72:6d:2d:1f:2d:
6b:61:5c:ac:65:4a:6a:c2:b3:ff:06:21:65:f7:5a:
5f:27:13:ce:dc:61:24:c5:36:60:2b:d8:fe:ed:71:
01:b5:f5:ed:9f:d8:29:d2:5b:d7:01:21:56:e4:f8:
4a:ad:d8:54:3c:85:6b:cf:ea:a5:bc:2d:6b:07:73:
39:fb:e2:4d:b2:e9:ac:04:29:f2:2e:86:a3:ac:aa:
d6:f6:8b:d8:50:14:b7:46:db:8d:ec:4f:e6:46:75:
aa:9b:e5:52:c3:e3:9f:fc:3d:41:11:a2:57:70:39:
f7:51:8e:19:d5:dd:33:03:56:aa:6a:86:9d:eb:7d:
c2:d2:aa:84:0f:8e:75:68:9c:7a:18:fc:c7:84:0a:
3d:84:03:fb:dd:c2:e9:48:19:e2:65:fc:a8:52:6e:
3d:7e:24:f2:d0:32:6f:73:1f:3d:f6:d3:9e:e5:38:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:B5:50:4F:3C:18:33:91:FA:72:FE:B4:AE:E1:EE:91:37:37:25
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e1:56:94:12:cd:a7:69:41:67:15:bc:f5:a5:5c:23:2d:fc:
66:19:51:6c:67:21:40:23:1e:26:4f:66:6f:3b:66:d9:8f:a6:
05:7c:1c:2e:bb:a3:5e:e3:01:03:e3:e4:f8:47:86:86:a0:be:
b7:45:ac:ff:94:e1:e4:99:1d:0c:f9:6e:7e:07:f4:b3:26:cc:
c6:e9:b8:fe:8c:24:a0:76:d5:fe:e7:11:b0:2c:9a:99:3c:6a:
9a:81:17:e5:18:00:0c:a7:ad:e8:73:5e:0b:1c:8c:89:30:64:
7a:90:f9:73:4b:39:14:70:03:f0:e4:14:f7:90:f0:71:e2:7a:
d4:35:58:07:ab:92:04:73:6a:58:75:73:e3:36:f3:89:2b:08:
4e:07:90:1d:44:ec:b4:2f:64:4b:e0:31:0e:0e:c8:95:30:e7:
7c:37:ce:6a:58:75:96:19:ff:32:8c:8f:f6:2d:04:40:3d:e9:
d4:4b:05:55:4b:3c:26:34:cb:ad:53:d5:f1:31:22:9d:cc:17:
b4:6a:c5:8d:a3:37:87:59:30:68:eb:69:e2:0a:9d:e4:56:30:
9c:69:b2:d4:02:67:e7:8c:c1:e5:0b:19:fa:c1:02:6e:e8:a4:
15:15:99:ce:1e:de:da:56:1b:df:91:3e:6f:07:0b:81:3d:dc:
e5:d3:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:27:05 2026 by rpki-client