Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: RWRtobpsOk7PZO4O17jKbW6arOSHiNXG4rr1405wc0Q=
Subject key identifier: E5:C9:0E:3A:D0:38:DE:7E:8C:40:1C:0A:84:57:0C:7F:01:0B:8E:3F
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 019F92481743BB1CFE3A8F9F5E023E48AD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0EE9
Signing time: Fri 24 Jul 2026 04:00:25 +0000
Manifest this update: Fri 24 Jul 2026 04:00:25 +0000
Manifest next update: Sat 25 Jul 2026 04:00:25 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: TVhkJ5nBzC+1LSKhUryGPsYVF+rmM54XZyZWsQVEk1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:17:43:bb:1c:fe:3a:8f:9f:5e:02:3e:48:ad:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jul 24 04:00:25 2026 GMT
Not After : Jul 25 04:00:25 2026 GMT
Subject: CN=e5c90e3ad038de7e8c401c0a84570c7f010b8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:8b:3d:ad:83:8e:4d:00:a7:7b:4d:5c:85:
33:02:41:69:d8:ff:d9:d9:27:d0:57:8e:cf:48:a3:
fa:54:7e:8b:47:3e:df:45:f8:95:e5:ae:ad:5c:22:
ad:51:a3:29:2d:88:c9:5b:a4:1f:2c:4c:b8:9a:e9:
4d:10:48:0e:35:9c:11:11:3d:41:b5:2f:cb:ff:41:
e9:bb:cf:61:a2:c5:bf:e0:a0:d1:95:cb:8c:ff:ba:
fa:e7:ab:f0:2b:62:3f:81:ad:c0:de:c1:88:db:77:
c3:fb:5b:6c:b6:d9:a3:b1:a9:fc:2d:6d:c1:f3:0a:
f6:1f:f9:ee:c4:b3:99:aa:3e:58:47:cc:be:33:30:
7e:f3:15:f6:b8:95:45:2d:e1:dc:c7:51:0b:f0:84:
64:e2:53:70:4b:06:d9:cc:cb:00:6b:82:79:09:8c:
b5:80:a6:9b:bc:0e:81:35:dd:f1:1a:4b:b5:91:51:
44:c4:51:2c:80:41:da:61:f9:ce:90:3d:fd:a3:66:
d5:fd:14:9e:ee:62:89:89:b5:65:1f:b6:28:04:43:
4f:1e:66:7b:9d:44:6c:e6:b2:e2:9a:70:8f:59:fa:
75:26:64:d8:a7:05:8a:4e:89:e1:9a:3b:66:c5:5e:
17:8f:e8:94:77:03:05:31:f5:e5:c2:fb:ce:50:40:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:0E:3A:D0:38:DE:7E:8C:40:1C:0A:84:57:0C:7F:01:0B:8E:3F
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d1:6c:12:be:c8:8b:01:e7:ef:8e:23:79:2e:2d:ea:a0:1b:
76:d6:76:0a:a7:a7:d2:11:9c:18:6c:02:d7:4b:92:72:1f:06:
39:a9:b2:99:1d:83:8a:13:0e:88:86:25:44:14:68:24:91:a4:
51:28:d1:89:9a:0c:61:cf:03:01:fd:25:44:24:db:36:86:19:
f9:07:b6:44:82:07:75:d3:a8:fc:d0:69:aa:02:17:d5:e6:9d:
2f:25:a9:bd:0b:bf:9a:ac:29:65:b8:5b:6f:5f:93:1c:63:cb:
83:a0:2b:1f:43:de:27:ce:b7:5a:52:4d:82:f9:01:87:a3:b7:
12:4b:c6:fb:d8:5a:0d:81:fc:cc:08:6c:8d:8c:cd:77:f7:d3:
3e:a1:79:da:4d:c5:91:8a:3a:83:44:2c:df:33:2c:3c:8a:e6:
85:cf:db:8a:f8:75:47:f5:ed:6e:c3:95:b1:ab:e1:cb:73:03:
e2:36:12:b7:bb:f8:0f:43:0e:43:f9:6e:56:ab:ab:35:66:ea:
4b:32:7c:e4:d5:d1:7c:4b:da:6e:d7:f2:48:26:a8:77:1c:b1:
32:14:c9:ad:5b:57:23:5b:dd:64:87:ba:5e:19:65:5a:5d:9e:
37:3a:ab:2a:7f:e1:d0:3c:06:25:a2:86:5f:eb:a0:51:f4:99:
77:38:a4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSBdDuxz+Oo+fXgI+SK2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNmY2ZDExZjBjZTYzMjMwMTgxYTczZjg1YTY2NjE3MGY3
Mzg5YmQwHhcNMjYwNzI0MDQwMDI1WhcNMjYwNzI1MDQwMDI1WjAzMTEwLwYDVQQD
EyhlNWM5MGUzYWQwMzhkZTdlOGM0MDFjMGE4NDU3MGM3ZjAxMGI4ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqKLPa2Djk0Ap3tNXIUzAkFp2P/Z
2SfQV47PSKP6VH6LRz7fRfiV5a6tXCKtUaMpLYjJW6QfLEy4mulNEEgONZwRET1B
tS/L/0Hpu89hosW/4KDRlcuM/7r656vwK2I/ga3A3sGI23fD+1tsttmjsan8LW3B
8wr2H/nuxLOZqj5YR8y+MzB+8xX2uJVFLeHcx1EL8IRk4lNwSwbZzMsAa4J5CYy1
gKabvA6BNd3xGku1kVFExFEsgEHaYfnOkD39o2bV/RSe7mKJibVlH7YoBENPHmZ7
nURs5rLimnCPWfp1JmTYpwWKTonhmjtmxV4Xj+iUdwMFMfXlwvvOUEBrXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXJDjrQON5+jEAcCoRXDH8BC44/MB8GA1UdIwQY
MBaAFHFvbRHwzmMjAYGnP4WmZhcPc4m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTIt
ZTNmNDlhYzQ5NTYwLzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTItZTNmNDlhYzQ5NTYw
LzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntFsEr7I
iwHn744jeS4t6qAbdtZ2Cqen0hGcGGwC10uSch8GOamymR2DihMOiIYlRBRoJJGk
USjRiZoMYc8DAf0lRCTbNoYZ+Qe2RIIHddOo/NBpqgIX1eadLyWpvQu/mqwpZbhb
b1+THGPLg6ArH0PeJ863WlJNgvkBh6O3EkvG+9haDYH8zAhsjYzNd/fTPqF52k3F
kYo6g0Qs3zMsPIrmhc/bivh1R/XtbsOVsavhy3MD4jYSt7v4D0MOQ/luVqurNWbq
SzJ85NXRfEvabtfySCaodxyxMhTJrVtXI1vdZIe6XhllWl2eNzqrKn/h0DwGJaKG
X+ugUfSZdzikXg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:47 2026 by rpki-client