Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: mpOYu7C4HAiE2kxaunuAn3qKDZYAs67+DU9YxH1ub68=
Subject key identifier: 34:3F:11:AA:C4:C2:4E:90:67:F4:F2:B8:35:04:49:73:A4:31:42:3B
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 01A0D315A379E2B245EB53C5D070D77DA3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 11:03:25 +0000
Manifest this update: Thu 24 Sep 2026 11:03:25 +0000
Manifest next update: Fri 25 Sep 2026 11:03:25 +0000
Files and hashes: 1: 3pHQTzxvnePiZsDxPy-BBwbaxHE.roa (hash: Y44S6ZmGxtTJuSR6q9viqsdpr1+gHx7RTzN1MdK3yOs=)
2: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: jxOpTg3sdj10YOzlHYJH749FyzR+Qw490sqDFNZyV3Y=)
3: i9JuOf_lil0vGpP_qnq87ScuDA8.roa (hash: 37O6D5o8eMGGFdDLmGcDaN3OTpRDH6Fu/HOaTp1mFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:a3:79:e2:b2:45:eb:53:c5:d0:70:d7:7d:a3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Sep 24 11:03:25 2026 GMT
Not After : Sep 25 11:03:25 2026 GMT
Subject: CN=343f11aac4c24e9067f4f2b835044973a431423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:10:0b:b6:3b:43:55:c8:1f:30:31:52:97:
a9:a6:13:7b:55:07:30:b2:14:87:80:87:84:79:17:
8d:ed:11:3d:9d:b4:19:c6:be:f7:e5:51:85:f9:04:
65:e0:5b:2b:93:07:c9:62:32:3a:8b:d2:0f:d0:5b:
1d:42:fa:81:65:a7:87:c0:af:9a:46:71:29:8c:e9:
f2:3c:ed:79:d6:50:7a:bb:9a:64:a6:89:3e:93:38:
40:bf:87:5b:6a:76:a2:ca:22:fa:1f:ba:66:43:0f:
47:25:c9:1e:e6:0c:a5:4d:7f:9b:76:ca:62:9e:6f:
2b:66:cd:a8:c3:ca:67:1a:e8:35:a5:43:ff:e2:2e:
0a:4d:49:40:7b:e8:48:86:07:7f:3d:95:5f:7a:b9:
a5:20:90:d5:be:1b:ba:ec:1d:45:2b:d0:91:18:43:
b6:23:b5:93:01:b9:7d:0e:67:37:19:e0:03:bd:06:
15:51:55:9d:ef:42:26:5b:f0:8c:61:e1:01:01:4a:
06:d7:d1:f4:ad:26:1c:89:17:25:30:4c:f4:2f:24:
ef:d4:b2:13:6b:2d:12:5b:d5:aa:fd:2f:3b:65:37:
36:f9:c1:01:f8:b6:4a:d2:37:74:7c:87:0e:a2:bb:
0a:67:fe:29:23:46:70:92:3b:a9:d5:da:52:82:13:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:11:AA:C4:C2:4E:90:67:F4:F2:B8:35:04:49:73:A4:31:42:3B
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4f:5d:d6:68:80:17:91:90:32:39:0d:f2:0e:58:34:e8:2d:
61:63:97:d5:7f:de:62:7b:4f:64:45:4f:47:1c:6b:31:16:bb:
dd:52:a6:ef:97:d9:3f:28:04:6b:c3:89:57:22:bb:d9:1a:74:
24:a8:b8:9a:db:e1:36:8f:df:f9:e9:2e:b5:3e:d6:c2:34:d4:
e9:2c:d6:9b:5b:e9:67:24:cf:02:4a:d9:2d:56:73:22:fc:df:
4c:fe:3f:8d:12:29:2b:f0:c9:cc:c0:52:38:7c:f9:79:2d:ad:
a1:13:f4:d0:73:91:24:5d:16:13:78:9e:63:3a:5e:5a:a8:2c:
db:27:69:af:d3:95:61:2b:23:c0:74:3a:fb:56:32:f3:07:39:
b8:90:bc:f3:dc:d6:21:98:d7:a8:10:3f:17:28:6b:bd:d4:1c:
dd:09:17:23:53:ca:55:e5:b5:2d:03:e2:06:c2:a6:28:31:e9:
aa:c2:8b:e7:e7:1f:76:df:b8:da:27:12:38:fb:57:c2:34:5b:
f1:78:d7:24:12:16:af:1c:69:9f:ea:ac:c3:d1:1b:a6:01:b6:
ba:f8:29:2c:86:9d:ae:04:c3:e5:08:fc:6a:62:fd:2e:2c:99:
f7:92:38:4b:06:6a:14:48:38:96:bd:28:fa:c8:1d:57:b8:19:
df:06:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:01:10 2026 by rpki-client