Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: YTtb53EQqWaY4cFmjvX/MVHP1+AoRWs/8O8d7DD7mJg=
Subject key identifier: F3:81:21:50:9B:DF:95:36:C2:8E:1B:DB:95:79:D9:1C:52:DC:5B:C7
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 01A0CC6C0D9FE1A489D4C67846D2A22E68E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 12AB
Signing time: Wed 23 Sep 2026 04:00:28 +0000
Manifest this update: Wed 23 Sep 2026 04:00:28 +0000
Manifest next update: Thu 24 Sep 2026 04:00:28 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: 3Pd3LECJ95rQjC5Z0GMt1YLoJPJCACLo6OHJfbCElP8=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:0d:9f:e1:a4:89:d4:c6:78:46:d2:a2:2e:68:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Sep 23 04:00:28 2026 GMT
Not After : Sep 24 04:00:28 2026 GMT
Subject: CN=f38121509bdf9536c28e1bdb9579d91c52dc5bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:9b:b5:62:8f:07:45:f1:e9:ca:b1:90:58:
06:bb:11:15:c2:6b:35:9c:fe:8d:bb:04:2a:cc:19:
b8:e6:61:71:ae:f1:1f:87:f7:03:4b:dc:68:9d:20:
71:2a:a4:48:5f:f2:61:85:8b:ea:86:56:ad:bb:70:
67:36:c0:61:4b:e3:e9:0d:2d:8b:73:f8:dd:3a:93:
44:51:64:8e:56:19:2c:8d:8b:f7:72:f4:d9:bb:e9:
8c:0d:93:3b:5f:68:1c:1f:54:ae:71:9e:4a:d9:2e:
a7:1f:45:fa:8d:f2:fd:6c:9f:23:8e:7f:85:9f:51:
f7:c1:50:70:0f:91:99:fc:3b:ec:ce:9b:9f:b1:00:
49:02:f6:8b:a4:08:9c:40:30:e7:85:42:cc:8c:97:
64:ea:b9:64:81:f8:99:72:bd:56:33:88:a6:fa:9e:
43:98:df:22:f5:4e:31:b5:38:31:7d:cd:9c:4b:06:
0b:3c:75:7e:5e:60:00:f8:db:cc:2f:a3:34:f5:8a:
55:0f:b9:91:9d:8d:9a:43:e9:28:2d:fb:ad:23:74:
37:e0:cd:b3:00:4b:1e:96:21:45:9c:2e:1e:fd:9b:
e3:5b:49:9f:de:a7:49:6f:ab:ba:9b:dd:d1:97:31:
9d:c4:31:1b:70:ec:29:62:5e:e6:73:67:89:73:10:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:21:50:9B:DF:95:36:C2:8E:1B:DB:95:79:D9:1C:52:DC:5B:C7
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b1:c4:1e:b9:d8:47:b9:03:5a:c7:65:12:e9:20:22:c9:bc:
6d:70:7c:42:00:65:6c:33:b6:97:17:b2:69:7a:b2:82:b9:c9:
50:92:ad:31:43:e7:f8:81:c0:92:4f:08:05:b1:1c:cc:65:bc:
70:38:83:f1:44:1e:1f:86:30:6f:e4:06:17:94:8d:ee:46:d7:
e1:56:5e:17:40:f7:d7:31:68:27:8a:04:98:68:a5:ee:d3:9e:
b2:28:f4:69:c4:14:86:00:67:c7:2c:44:4a:0a:46:39:7f:88:
a2:12:79:87:e1:54:7b:56:ce:13:95:2d:44:7d:c8:5c:24:49:
17:2d:94:7c:3f:b0:e5:ec:f0:c3:12:7c:50:a4:7e:37:9b:06:
73:7b:f8:06:67:d5:33:7b:63:78:ef:9f:8f:c8:fe:0b:5a:45:
df:aa:08:32:24:56:46:81:1d:82:44:c1:5e:97:00:b5:fd:eb:
32:60:7b:c1:b5:04:ee:64:10:b8:d1:66:c6:06:a8:a8:ca:65:
bd:3f:45:44:c2:61:9a:41:f3:55:f2:57:fd:8b:9b:40:f2:60:
6c:2e:ae:d5:a8:58:0d:a8:4a:e5:11:7a:04:ba:44:18:09:42:
2c:c7:9f:16:bd:cc:eb:b4:50:6e:e3:ce:e4:42:cc:dc:33:69:
41:ad:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:05 2026 by rpki-client