Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: Gmtt8lcz9eNBWSZNNJDV1SzObB2IAmUiW48efv3Xnyg=
Subject key identifier: 76:60:6F:D0:07:58:27:0D:AD:1B:C4:9C:12:CA:84:0A:F9:1E:7B:3A
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 019D25BA3F06BED2CF37FD7179C88DA24749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 10C7
Signing time: Wed 25 Mar 2026 16:00:55 +0000
Manifest this update: Wed 25 Mar 2026 16:00:55 +0000
Manifest next update: Thu 26 Mar 2026 16:00:55 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: ts6WZOYeVauzJOOiwk7crfc+AVo4Qfd1OTxTTZAP6Qs=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:3f:06:be:d2:cf:37:fd:71:79:c8:8d:a2:47:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Mar 25 16:00:55 2026 GMT
Not After : Mar 26 16:00:55 2026 GMT
Subject: CN=76606fd00758270dad1bc49c12ca840af91e7b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:81:c7:b4:a9:e9:20:e3:83:31:de:df:5b:
86:8f:ae:b1:56:54:7e:64:ea:17:f7:76:32:d0:90:
2f:2f:37:8d:25:86:62:33:62:8f:ad:ea:88:32:dd:
06:66:0d:d8:7d:4c:86:97:c7:43:af:6f:97:76:10:
85:f7:12:34:19:77:42:d3:42:84:2a:88:c4:1c:83:
1f:16:79:2d:d5:b3:7c:f9:ba:b8:e3:6f:8f:db:36:
7c:aa:a9:7c:4b:81:e8:71:2f:d3:85:d1:1a:d5:6d:
93:8c:75:1e:43:2c:25:cd:c9:53:8a:94:4a:9c:be:
a7:69:1b:a7:28:43:12:37:86:62:79:f1:40:8f:9e:
69:69:41:19:d4:3e:84:75:88:d6:cc:96:de:ae:14:
05:0a:0b:90:85:8d:34:03:b0:10:84:de:36:b2:3b:
f6:84:eb:a6:4f:bb:2c:3f:36:7f:07:b2:3c:80:43:
cb:44:63:2d:0c:03:3b:3e:71:11:fb:38:1c:5c:37:
7c:6d:9e:d3:2c:7a:79:3d:7d:82:78:8b:d9:7d:cb:
bf:99:3b:24:ab:2e:f3:9e:86:d6:b5:fa:68:fd:ba:
33:44:40:2d:3b:3e:24:bd:f5:db:32:4e:10:7c:f2:
49:cc:7a:66:d4:24:0b:e2:1b:13:62:dc:07:3f:93:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:6F:D0:07:58:27:0D:AD:1B:C4:9C:12:CA:84:0A:F9:1E:7B:3A
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3b:8f:ea:ff:45:04:31:46:b3:44:03:3f:1e:e7:61:e6:e5:
ce:d2:d5:8b:8d:a6:15:85:61:ec:de:ca:a9:ae:c5:80:ff:9c:
3d:cb:09:e2:d5:9a:42:04:f0:56:6e:e5:e5:5c:3f:79:98:08:
ec:fd:3c:15:7a:2e:42:73:67:de:48:fd:5d:b6:62:45:a5:32:
ee:7e:3a:b4:cd:06:58:f1:34:49:da:29:32:3f:14:ab:f3:8f:
24:e1:0f:fb:b0:71:2a:10:a6:2b:ba:0f:3d:1c:8a:3d:bc:24:
3f:25:6c:7e:bd:75:07:b5:65:97:20:0a:86:90:5c:23:2d:f1:
21:47:d1:21:11:7b:a1:ef:16:eb:77:94:d5:23:6f:46:7d:e7:
94:0d:bc:45:f3:1a:fe:19:ce:a0:83:bf:25:e3:7b:94:b2:f0:
8c:c6:6c:fa:44:84:0c:50:e8:50:06:39:e0:81:a1:80:e1:0b:
25:cc:6c:a7:11:c1:6b:bd:77:db:2b:87:14:f0:5d:f5:bf:20:
3d:7d:4a:5e:a0:30:17:ce:84:a7:93:c9:a7:64:64:ec:3a:c8:
1f:01:9e:eb:49:bf:5a:d3:dd:53:86:a9:ae:60:d8:93:b5:85:
e2:02:6c:84:53:bf:a7:0d:85:57:b8:e5:7e:0e:ad:32:d6:57:
f8:90:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:33 2026 by rpki-client