Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier: NeWIBOV+q/YThYnkiB7GMKdIlceiw1edJRaGy86YfMc=
Subject key identifier: D4:5C:E9:2F:08:B1:2C:FC:F7:F9:75:38:30:4B:94:E5:DB:62:B0:27
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial: 019D284D3100741325C16614BFF49405B71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number: 150C
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: 9qzNBzRYAhBDv6NPAEqIjuwHNA1zPq/DRPtOG4o9dE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:31:00:74:13:25:c1:66:14:bf:f4:94:05:b7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=d45ce92f08b12cfcf7f97538304b94e5db62b027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:b6:8f:26:64:35:f3:e7:24:76:06:84:08:
93:2b:de:b2:56:f6:7c:50:32:2b:15:f7:ff:6d:45:
14:ab:cc:d2:aa:e1:08:ff:e4:f9:d3:49:e8:f6:ba:
86:3e:0f:37:11:10:13:8c:ad:a3:6f:23:56:8d:5d:
f1:2f:63:bd:64:91:f9:e5:2d:71:16:71:5d:e9:4a:
c1:a5:7f:d0:1f:14:5e:b9:46:33:be:db:20:4d:b3:
ed:63:92:90:50:d2:77:22:b7:eb:9f:87:99:be:a4:
62:99:9c:65:24:b2:07:48:60:fb:be:9e:1f:a9:9d:
7e:f7:be:ea:42:0b:a9:dc:c4:fd:e8:3b:ab:ca:a3:
fb:1b:01:55:74:cb:23:b0:6b:07:79:6c:66:bb:12:
76:8f:1b:d9:3d:51:f5:e3:38:85:da:fd:89:31:6b:
0f:10:d3:1b:c2:0d:35:74:63:e8:91:43:13:ac:ed:
15:41:1c:84:c4:f3:ae:95:8a:c9:fe:6d:2e:c8:cc:
05:3d:fb:d0:0e:7d:ce:85:da:c7:ed:c5:e8:14:a4:
38:37:78:90:34:bc:7e:36:f8:cd:61:a6:d4:a1:3b:
f3:e1:0c:af:eb:5c:a5:b3:d0:58:4a:5f:3d:86:c9:
cf:58:47:ce:69:5c:8d:1c:7e:87:b1:e5:f7:e5:78:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:E9:2F:08:B1:2C:FC:F7:F9:75:38:30:4B:94:E5:DB:62:B0:27
X509v3 Authority Key Identifier:
keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:43:7d:95:5e:6d:de:97:9d:90:39:28:3f:66:83:12:82:9a:
26:72:69:de:a6:fd:d1:5d:70:be:6d:22:5f:cf:3c:5c:33:5e:
ee:79:ad:d4:93:15:85:d9:02:0f:61:79:d7:06:f2:c9:b9:a0:
d1:52:57:60:f5:ec:fa:91:e6:66:36:5b:63:7b:f8:ea:2e:87:
c2:34:22:78:12:48:49:19:ad:0d:1c:84:c0:99:d8:3f:05:3f:
0f:d2:3b:62:a0:dc:ab:f7:f7:9b:59:45:1f:f7:c3:ac:0b:9a:
9a:a4:11:61:55:ab:18:ef:11:33:63:e9:e6:1b:70:47:f2:85:
2d:a1:2f:f4:e3:8a:76:79:c3:8c:dc:62:6e:18:f2:64:7f:63:
64:ae:df:8f:1b:fa:b1:b4:07:ef:2c:97:16:83:05:aa:67:9a:
01:2f:62:50:da:24:d2:7c:97:3c:03:7b:47:fe:6a:c4:c6:c6:
78:81:c7:cf:a3:6c:6a:b8:e1:30:7f:b3:d6:0d:db:2a:c6:7f:
79:9d:b2:5f:e5:0b:d9:d9:56:29:7a:43:fb:7d:a5:23:8c:10:
19:2e:d5:00:9a:12:54:9a:6c:31:75:b7:74:17:73:e6:a7:f0:
53:e2:6e:0b:41:13:04:f7:b6:f4:f3:c5:66:3e:37:5b:dd:2a:
80:ea:83:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:15 2026 by rpki-client