Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: z5sRmDpKLI+3G/Y5jCXK9nMVrfcboJWfe2px70Cpozs=
Subject key identifier: 6F:70:54:D2:48:F7:7C:9B:57:28:44:F3:5E:BE:2E:7E:B1:AC:8A:EE
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 019D29293A53B6CD59D9DBBA54802B6748C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: 3TamifgCAm2kyu2nfWeW+yWuMjSAVcFFel9NGUCr8tw=)
2: F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa (hash: o3HWTI0PQBnlxwZ0HTjSHPzc9P+I/nJ/EvAewhiwD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3a:53:b6:cd:59:d9:db:ba:54:80:2b:67:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=6f7054d248f77c9b572844f35ebe2e7eb1ac8aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:e7:e8:b7:8d:27:71:c9:40:b0:7c:0e:97:
7c:5c:1e:70:d2:31:8c:90:b2:33:70:3d:02:c7:95:
44:23:90:b4:2d:50:b5:ca:9b:19:ec:78:dd:09:93:
d3:ee:62:c2:f2:57:c2:fc:7d:17:bc:00:6e:d7:a3:
54:89:48:58:e9:fa:0e:91:20:92:3c:ab:14:c8:ae:
83:d2:c1:aa:0c:e4:e8:03:ed:ee:4f:ec:aa:9c:29:
f6:b2:02:75:6d:55:d0:1b:3d:d7:40:42:fe:a6:3c:
ef:36:a7:7b:b9:16:49:c7:27:37:d7:51:ee:a2:ab:
b8:07:3f:de:e5:84:a6:ec:c6:3e:fc:f9:09:cd:2f:
97:10:b5:93:3d:0e:9f:ff:6c:6c:d4:b5:e6:a4:5c:
2f:cd:84:72:9a:14:eb:ee:62:f9:3f:4e:f6:a5:31:
92:86:af:b6:0a:17:4a:27:1b:b5:4b:1d:1d:9b:9c:
b3:c7:2d:5d:45:e7:3b:4d:51:c8:9a:92:c9:b3:a8:
ed:47:2c:6e:f8:c9:e7:d0:5c:df:e4:31:cf:1f:9f:
dc:c8:0c:eb:bf:83:b1:e6:3c:07:28:86:3b:4b:24:
c3:7a:da:b6:1e:6e:22:38:9e:24:99:36:25:c2:dc:
ef:9d:ff:49:50:1f:72:bd:c2:ba:07:f4:3e:69:f7:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:54:D2:48:F7:7C:9B:57:28:44:F3:5E:BE:2E:7E:B1:AC:8A:EE
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4e:0a:6e:ab:33:36:e6:05:4b:03:3c:63:d1:77:54:58:c1:
a6:a5:1f:bf:db:a6:84:52:52:d4:23:12:b7:df:fa:d2:e1:8d:
4c:cb:85:94:cc:29:63:1b:96:0c:1d:4b:1d:6f:eb:e5:a4:c6:
04:36:34:fa:7a:50:45:01:a0:13:a1:08:bc:d9:57:e2:a2:28:
b6:22:b5:7c:a8:6b:a4:38:1e:0e:3d:78:46:cc:f1:f9:d9:e0:
ba:37:7f:53:58:ca:ab:09:7d:e6:75:63:b1:d2:56:2b:02:5b:
23:da:74:23:70:01:08:57:ba:e3:5e:2e:3a:be:0e:01:31:63:
a9:e2:1b:c0:e2:da:d4:4b:3b:84:67:68:d4:2a:26:b3:df:93:
91:9c:06:e0:42:98:50:5d:3b:4d:59:7e:bd:cb:85:03:9d:31:
08:9d:00:96:a5:4f:be:28:f0:d4:2c:17:a5:95:df:de:be:84:
26:39:41:a0:de:5c:5b:16:2a:2a:ed:34:aa:ff:42:4d:e0:d8:
3f:75:69:09:4d:92:6d:db:0e:3d:ab:c5:bd:87:38:c2:c7:fd:
19:04:aa:c0:16:bd:53:bc:05:63:5c:72:e9:0b:18:8f:19:56:
bf:2b:35:62:9b:75:8d:91:2b:91:ee:ae:47:c3:d2:d2:99:70:
4f:53:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:57 2026 by rpki-client