Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: Vy6Bwr33ic9MCV0ypNNsKU+4fRSfss5fMfEfZ0UE2X4=
Subject key identifier: 91:F7:1D:08:78:91:AF:3C:29:14:23:EC:6B:86:B7:29:93:A9:9E:A9
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 01A0DB725CF91D8B4905C4DFD40AD7324FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 02:01:40 +0000
Manifest this update: Sat 26 Sep 2026 02:01:40 +0000
Manifest next update: Sun 27 Sep 2026 02:01:40 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: orzKnPGqv7eTes9BPKVXbyOBQclqRc+N3Ig2N91U+TY=)
2: F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa (hash: o3HWTI0PQBnlxwZ0HTjSHPzc9P+I/nJ/EvAewhiwD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:5c:f9:1d:8b:49:05:c4:df:d4:0a:d7:32:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Sep 26 02:01:40 2026 GMT
Not After : Sep 27 02:01:40 2026 GMT
Subject: CN=91f71d087891af3c291423ec6b86b72993a99ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:80:df:a2:1f:1f:71:7c:4a:fb:be:87:88:
68:0b:0c:a7:55:f9:3e:38:73:97:5e:ca:c2:95:4c:
eb:5a:09:55:41:59:00:8a:c7:bf:62:4b:68:45:7f:
40:54:8a:51:60:dc:68:e5:6f:b5:ba:5a:9d:9e:2c:
79:ec:83:f4:e5:9a:14:29:9a:b3:9f:1e:39:86:2d:
17:cb:30:82:ef:b5:2c:48:c5:de:d8:c6:56:09:11:
7b:02:14:08:8e:4f:73:ca:20:53:35:31:83:54:f2:
da:25:3a:77:86:45:89:5d:7d:6d:97:8c:f0:e2:3e:
4f:e8:13:04:ff:58:c8:66:4b:28:f3:2c:b8:2b:61:
c4:23:6d:70:8a:8f:c5:56:f0:14:2b:1d:cb:ee:b3:
f7:98:44:8b:db:16:e5:16:2f:96:9d:c8:e6:43:00:
11:8a:d9:87:fb:09:c0:bd:c7:46:09:f3:45:a5:ff:
d3:b8:27:d2:4b:af:c2:eb:e5:3f:ff:f2:59:c7:ae:
43:e9:1d:68:4d:36:13:e8:06:13:97:b9:12:22:20:
c8:58:15:66:92:3b:54:7e:4e:1d:33:cb:0d:c4:4a:
8e:86:bb:ab:a6:42:99:ee:03:26:7c:e1:55:32:df:
a1:ef:75:3c:b3:96:b2:ca:58:80:0e:71:57:b5:a4:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F7:1D:08:78:91:AF:3C:29:14:23:EC:6B:86:B7:29:93:A9:9E:A9
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:57:d6:8f:7c:a6:a5:b7:a0:df:5c:83:ec:06:a7:7d:0b:96:
8a:03:c2:24:93:25:ea:46:eb:3c:8e:9f:80:38:64:5f:c2:9c:
e0:c1:91:7b:e4:06:b3:b9:d0:ae:dd:63:7d:2e:ff:c7:29:16:
81:4f:b4:d0:4e:af:5e:31:d7:c1:a5:d2:1b:ab:86:0e:30:03:
a7:0c:0c:06:1e:54:f1:71:c7:e9:02:44:fc:27:b0:7c:aa:e0:
b6:32:7a:51:01:c1:3b:ea:6a:e4:54:b8:d0:f9:ba:5d:02:bb:
c7:2f:d8:2a:e5:0d:21:bd:06:40:05:4b:94:38:e5:ab:81:02:
71:f4:c2:0f:e7:1e:12:1b:95:c8:f7:2b:82:db:cc:96:35:6d:
6b:39:02:5b:bf:30:1f:4e:a6:4e:5d:f9:d5:78:e5:3a:86:68:
6a:ee:3c:90:ca:57:58:7d:d9:5a:39:cc:81:3e:e7:9a:cd:1b:
fc:d1:3e:f2:e9:41:fa:e2:9d:de:fb:6b:ad:cc:e6:2b:f3:5b:
f7:a3:3f:18:0e:92:c0:87:72:c0:6a:5a:25:df:80:1f:a1:ad:
37:e3:10:ff:01:05:b1:20:01:8b:b6:3c:51:1f:06:73:47:8c:
9a:f5:58:8d:cb:4a:bb:03:3d:7d:e3:aa:12:f9:24:73:2a:bf:
81:90:f7:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbclz5HYtJBcTf1ArXMk+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMDgzODA4NzYzYzI2MjU0MTAyMGQyZTgxZGEzNGFhYTM4
MjgzYjcwHhcNMjYwOTI2MDIwMTQwWhcNMjYwOTI3MDIwMTQwWjAzMTEwLwYDVQQD
Eyg5MWY3MWQwODc4OTFhZjNjMjkxNDIzZWM2Yjg2YjcyOTkzYTk5ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLuA36IfH3F8Svu+h4hoCwynVfk+
OHOXXsrClUzrWglVQVkAise/YktoRX9AVIpRYNxo5W+1ulqdnix57IP05ZoUKZqz
nx45hi0XyzCC77UsSMXe2MZWCRF7AhQIjk9zyiBTNTGDVPLaJTp3hkWJXX1tl4zw
4j5P6BME/1jIZkso8yy4K2HEI21wio/FVvAUKx3L7rP3mESL2xblFi+WncjmQwAR
itmH+wnAvcdGCfNFpf/TuCfSS6/C6+U///JZx65D6R1oTTYT6AYTl7kSIiDIWBVm
kjtUfk4dM8sNxEqOhrurpkKZ7gMmfOFVMt+h73U8s5ayyliADnFXtaSVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH3HQh4ka88KRQj7GuGtymTqZ6pMB8GA1UdIwQY
MBaAFAsIOAh2PCYlQQINLoHaNKqjgoO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmIt
NDY5MjVjNTI0OWU2LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmItNDY5MjVjNTI0OWU2
LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1fWj3ym
pbeg31yD7AanfQuWigPCJJMl6kbrPI6fgDhkX8Kc4MGRe+QGs7nQrt1jfS7/xykW
gU+00E6vXjHXwaXSG6uGDjADpwwMBh5U8XHH6QJE/CewfKrgtjJ6UQHBO+pq5FS4
0Pm6XQK7xy/YKuUNIb0GQAVLlDjlq4ECcfTCD+ceEhuVyPcrgtvMljVtazkCW78w
H06mTl351XjlOoZoau48kMpXWH3ZWjnMgT7nms0b/NE+8ulB+uKd3vtrrczmK/Nb
96M/GA6SwIdywGpaJd+AH6GtN+MQ/wEFsSABi7Y8UR8Gc0eMmvVYjctKuwM9feOq
Evkkcyq/gZD3mg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:51:11 2026 by rpki-client