Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: XHAGJ+yPShPLh+MK0QgA4fpMzKUbs42T0mMnU3BbwjY=
Subject key identifier: 8C:06:C3:02:01:E9:DA:9F:C7:F0:A4:1B:82:CA:5E:C0:5E:8C:0E:70
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 019F91A3DBD046FE843BD87A0A0D4C127580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 1208
Signing time: Fri 24 Jul 2026 01:01:02 +0000
Manifest this update: Fri 24 Jul 2026 01:01:02 +0000
Manifest next update: Sat 25 Jul 2026 01:01:02 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: FFaPKcClBuceX8DI7vFfIkUvtabwjzSN7xcLqGgXI3U=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:db:d0:46:fe:84:3b:d8:7a:0a:0d:4c:12:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jul 24 01:01:02 2026 GMT
Not After : Jul 25 01:01:02 2026 GMT
Subject: CN=8c06c30201e9da9fc7f0a41b82ca5ec05e8c0e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:ff:86:90:aa:0c:e4:08:5b:d8:fc:23:31:
73:19:78:bb:68:b4:a5:cb:b7:b7:d1:30:49:fc:c4:
4a:e1:28:b9:6b:45:7d:13:03:01:58:82:8c:1c:e6:
01:11:67:c1:6e:28:45:7e:7d:d2:75:a9:98:90:62:
44:f2:00:b7:8d:7d:41:c8:02:b8:de:be:1d:73:52:
1a:ce:9e:3e:af:4a:a3:60:fd:af:ca:76:47:85:cc:
9a:9c:96:6b:72:56:48:3c:32:bb:9c:2e:7a:41:9e:
48:a4:68:56:06:0c:66:b8:a0:9d:33:d0:3f:ae:fe:
0a:bc:20:dd:7a:1e:a7:3c:7e:45:81:49:1a:f7:25:
c8:76:34:ef:af:be:01:d1:80:33:56:ee:61:9b:d3:
2a:07:31:42:8c:28:da:c0:0c:4b:c2:90:da:b1:c3:
41:61:8b:42:c4:3a:bc:dd:9c:da:01:5b:54:8c:9e:
ac:af:8e:1d:4a:88:1f:4b:86:27:4b:c3:3c:fe:5c:
01:0c:05:03:85:e9:3e:44:de:a3:04:35:0c:00:6e:
d9:de:ae:ae:93:9d:5d:9d:d2:db:f8:16:0d:3b:0d:
16:a3:24:d9:03:9f:e7:d1:a9:c9:c7:de:9f:d8:67:
9f:ca:96:1b:1b:5d:4a:45:7c:bc:c2:44:a1:5c:8f:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:C3:02:01:E9:DA:9F:C7:F0:A4:1B:82:CA:5E:C0:5E:8C:0E:70
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:e9:e7:6b:4f:3e:e1:aa:7e:26:8f:bf:39:91:e8:71:02:
a7:7e:29:9b:7a:ed:dc:6d:e6:ca:a3:80:b8:23:0b:d0:e0:33:
de:9b:b8:0c:d1:15:ca:61:24:a4:f3:e3:8a:39:01:e6:7f:ad:
e8:39:04:a1:49:3a:d1:1f:03:8e:bd:fd:1b:e6:29:a8:16:4b:
16:e7:57:a3:99:f9:e1:37:0a:36:dc:8f:2c:f2:1a:51:e5:c4:
53:97:42:a7:b7:09:d7:58:ec:39:f8:8d:44:4d:5c:11:84:d5:
3c:b8:a8:f4:60:11:0f:de:72:bf:7b:c3:cd:b6:27:96:ab:c6:
33:c9:92:bb:a4:30:1b:f8:c2:4e:66:88:d7:ee:dd:49:a8:a0:
e2:53:be:fc:8f:0e:91:db:85:95:31:2c:4b:47:3d:b4:4c:35:
7d:3f:e2:d2:51:bb:0e:5d:44:46:fa:79:2e:3e:4a:01:2b:50:
59:51:31:72:ff:d1:78:c6:e3:9a:b3:14:6b:c8:07:cd:ad:74:
59:05:75:39:d3:d4:39:af:38:07:45:4c:dc:05:af:e7:e1:72:
fe:6c:ad:76:f7:86:5c:3d:5e:2f:d5:80:27:82:91:0c:6f:30:
74:35:f1:0d:d8:8d:68:c4:fa:c3:2a:b2:cf:d2:a1:b5:91:fa:
17:2d:7f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro9vQRv6EO9h6Cg1MEnWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjZlMDVkMTUyNzUwZGZhYWRlNWZhZjc5MWJhZDM5MWRj
NmQyZDQwHhcNMjYwNzI0MDEwMTAyWhcNMjYwNzI1MDEwMTAyWjAzMTEwLwYDVQQD
Eyg4YzA2YzMwMjAxZTlkYTlmYzdmMGE0MWI4MmNhNWVjMDVlOGMwZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24b/hpCqDOQIW9j8IzFzGXi7aLSl
y7e30TBJ/MRK4Si5a0V9EwMBWIKMHOYBEWfBbihFfn3SdamYkGJE8gC3jX1ByAK4
3r4dc1Iazp4+r0qjYP2vynZHhcyanJZrclZIPDK7nC56QZ5IpGhWBgxmuKCdM9A/
rv4KvCDdeh6nPH5FgUka9yXIdjTvr74B0YAzVu5hm9MqBzFCjCjawAxLwpDascNB
YYtCxDq83ZzaAVtUjJ6sr44dSogfS4YnS8M8/lwBDAUDhek+RN6jBDUMAG7Z3q6u
k51dndLb+BYNOw0WoyTZA5/n0anJx96f2GefypYbG11KRXy8wkShXI8C0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwGwwIB6dqfx/CkG4LKXsBejA5wMB8GA1UdIwQY
MBaAFAlm4F0VJ1Dfqt5fr3kbrTkdxtLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMt
NzIxYmI0ZmM4YzE2LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMtNzIxYmI0ZmM4YzE2
LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDvp52tP
PuGqfiaPvzmR6HECp34pm3rt3G3myqOAuCML0OAz3pu4DNEVymEkpPPjijkB5n+t
6DkEoUk60R8Djr39G+YpqBZLFudXo5n54TcKNtyPLPIaUeXEU5dCp7cJ11jsOfiN
RE1cEYTVPLio9GARD95yv3vDzbYnlqvGM8mSu6QwG/jCTmaI1+7dSaig4lO+/I8O
kduFlTEsS0c9tEw1fT/i0lG7Dl1ERvp5Lj5KAStQWVExcv/ReMbjmrMUa8gHza10
WQV1OdPUOa84B0VM3AWv5+Fy/mytdveGXD1eL9WAJ4KRDG8wdDXxDdiNaMT6wyqy
z9KhtZH6Fy1/9Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:41 2026 by rpki-client