Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: 8oriRHB+ocKt+2EiW3heGYdaou+8I7An0CJ+DOTdfHQ=
Subject key identifier: 3A:C5:F2:61:7D:B1:A7:87:33:D8:88:E2:B2:52:5D:CD:8C:0A:E0:96
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 01A1DD948CC6CDDCDDE4ED2D8659A8E51BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 05:01:02 +0000
Manifest this update: Sun 15 Nov 2026 05:01:02 +0000
Manifest next update: Mon 16 Nov 2026 05:01:02 +0000
Files and hashes: 1: 3pHQTzxvnePiZsDxPy-BBwbaxHE.roa (hash: Y44S6ZmGxtTJuSR6q9viqsdpr1+gHx7RTzN1MdK3yOs=)
2: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: n1HMknT6esNA87RHwfpq9qJHfMhEkbXBjtOsfMQfG7w=)
3: i9JuOf_lil0vGpP_qnq87ScuDA8.roa (hash: 37O6D5o8eMGGFdDLmGcDaN3OTpRDH6Fu/HOaTp1mFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:8c:c6:cd:dc:dd:e4:ed:2d:86:59:a8:e5:1b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Nov 15 05:01:02 2026 GMT
Not After : Nov 16 05:01:02 2026 GMT
Subject: CN=3ac5f2617db1a78733d888e2b2525dcd8c0ae096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:d6:cc:d3:ed:61:61:6e:ab:c5:61:12:96:
ae:82:70:60:42:6d:44:3d:3e:61:f8:c5:08:3a:9a:
4d:90:c4:9b:98:14:aa:1f:5d:05:aa:4e:8c:f9:15:
06:65:78:21:b4:53:f2:08:96:89:48:e4:ff:ca:80:
ce:f5:6d:97:ae:59:cd:60:f2:6e:99:dd:35:7f:ec:
2b:07:bb:da:57:9e:a1:ee:a5:f7:83:1a:ed:90:cd:
2e:31:a2:04:e9:08:9c:54:b3:24:5c:ce:f9:af:2f:
ef:0a:ae:92:51:34:f1:67:23:37:15:33:64:4e:3a:
d0:9b:a4:54:d5:83:9b:87:0b:20:43:02:b5:d8:a4:
c2:7a:ec:ff:cc:c8:3e:a2:f1:f4:5c:04:c4:c0:fd:
9e:16:ea:24:cb:ad:b7:8e:28:88:5a:ce:44:fb:d2:
f5:ec:06:8a:db:99:91:cc:c0:74:f8:04:36:1a:dc:
87:d6:8d:08:19:22:75:b7:ff:ee:90:d4:71:84:20:
ec:6c:72:c5:c9:fd:55:26:8f:be:fc:aa:6d:f0:40:
e4:a6:bc:d0:a9:a8:bf:53:3d:ec:32:70:0f:71:0d:
47:be:af:24:56:27:ce:45:57:6e:8b:05:a3:07:b7:
42:31:3b:a5:93:62:d5:1f:dc:5e:36:a4:b5:55:89:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:F2:61:7D:B1:A7:87:33:D8:88:E2:B2:52:5D:CD:8C:0A:E0:96
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:96:81:f1:aa:68:96:15:d1:e6:78:08:ab:ed:49:82:28:d9:
13:f8:8e:15:4b:c7:34:ae:e6:1d:b4:6f:5c:0d:f9:cc:3d:e4:
1e:35:c2:fe:db:18:e1:d9:53:82:d4:d9:5c:ec:5c:15:4a:45:
e7:4a:71:64:69:0a:5a:1f:de:76:18:93:98:47:14:9d:5d:8e:
72:49:c0:f5:0e:8b:3f:8e:31:a9:89:60:87:0e:e5:57:6d:39:
8c:ef:c4:0c:fa:b8:06:37:bf:46:77:d9:06:37:5c:5e:2f:47:
ff:d8:76:fa:9a:65:bc:5a:4c:c2:a1:95:54:cb:1a:28:0d:fc:
a6:db:a1:0d:8a:a2:9b:8c:fb:0a:e2:3f:d1:6e:f4:89:52:45:
2a:c6:1f:ab:3e:a7:a6:45:70:49:74:e8:6f:09:0f:0d:2a:7d:
2c:8e:a2:bf:05:b3:fe:17:fa:e3:b3:01:1e:27:b2:aa:78:37:
ae:50:dd:ca:55:3f:99:44:21:45:ad:d5:6b:5a:52:01:ea:4c:
5e:38:e4:9b:a4:cf:39:8e:67:a4:e7:ca:7b:16:69:04:b1:b2:
1a:0a:41:4c:50:9c:2b:c0:8e:bd:5b:9e:b2:90:7e:99:79:05:
a0:6a:ca:56:21:ff:9e:43:73:21:77:c0:fc:8c:f2:58:25:10:
c8:0e:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:25:26 2026 by rpki-client