Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
File: CWjayzRLTY31SqN4ZT9xsL8g2l4.mft (raw, json)
Hash identifier: lU7FAFAqQNP1bFTJfpF/x2z3LidjBBNhf0ftEeM4vk4=
Subject key identifier: A9:A0:4B:4A:90:2E:2F:72:88:7E:1B:13:FF:13:80:1A:90:FB:5F:FE
Authority key identifier: 09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
Certificate issuer: /CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Certificate serial: 019F916D9BF76D8D61C8C6E5B06ED936D299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:47 +0000
Manifest this update: Fri 24 Jul 2026 00:01:47 +0000
Manifest next update: Sat 25 Jul 2026 00:01:47 +0000
Files and hashes: 1: 1-xhLo3rBqSzMfxZ6-dFpNc1K-1s.roa (hash: LihR1HIwAQbrQbXQbPoW+Yyclv5FEy13WokvKT/AAR0=)
2: CWjayzRLTY31SqN4ZT9xsL8g2l4.crl (hash: a39QESpyt6L+8s+qm9OiecIho41wIZ24f/k5XyvRfhs=)
3: YiurtmEVnKJWoMXP_xjKmjxmVoI.roa (hash: 4ukDIvZ14L+cMrpj8UGfHFDzDuRtwpZja3ebZIwrqB0=)
4: rxsOsAfQCfpnPygBJXkmNU9TrA0.roa (hash: BzGan6UkCmSqoT0RpnvMGKr4jj9Z7q6ZylCSqpz2CVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:9b:f7:6d:8d:61:c8:c6:e5:b0:6e:d9:36:d2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Validity
Not Before: Jul 24 00:01:47 2026 GMT
Not After : Jul 25 00:01:47 2026 GMT
Subject: CN=a9a04b4a902e2f72887e1b13ff13801a90fb5ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:eb:8d:cc:af:63:fa:d8:d8:be:22:8b:3f:
db:be:64:5a:10:4c:5e:d3:3b:9d:ea:c3:52:59:2c:
32:7b:82:41:0b:d6:32:e3:67:25:23:12:fb:1c:d1:
3a:83:51:af:e6:9e:5b:f0:b6:e1:91:be:a7:ea:46:
d9:eb:e2:e2:08:8d:ec:44:81:79:c1:bd:33:3c:f7:
10:5a:68:b7:04:3f:19:a6:5c:61:eb:e2:c8:a7:5b:
36:9f:c8:92:32:46:84:56:a1:aa:89:06:5c:5e:d5:
87:be:5a:74:38:f1:66:7b:47:ee:ab:a8:01:7b:51:
9c:15:4d:93:98:04:13:25:f0:f7:94:95:f2:18:e4:
1e:7d:67:24:3f:42:fb:2b:f1:c8:54:0c:e9:21:ae:
9f:c8:39:1f:03:82:74:69:79:24:7a:8f:97:a3:c6:
8c:d8:5b:0a:02:46:ae:a8:5f:2d:71:0b:b2:92:08:
cb:18:8d:b6:2b:32:6c:93:54:07:8c:64:7c:21:40:
59:96:09:12:7f:0c:21:39:de:d1:71:b1:b8:e6:86:
2e:f2:c3:31:bd:f8:7b:e9:f8:12:7b:4b:b6:2b:3f:
cf:b4:b4:e6:80:fd:ea:95:3b:35:d9:a9:60:36:f2:
63:f6:0f:52:55:2d:f8:ec:63:55:42:95:b3:5c:f3:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:4B:4A:90:2E:2F:72:88:7E:1B:13:FF:13:80:1A:90:FB:5F:FE
X509v3 Authority Key Identifier:
keyid:09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3d:bc:10:98:22:1f:53:96:d4:36:e6:00:54:14:60:ff:4e:
9b:54:9e:2d:23:94:af:67:fc:6a:31:f2:c9:37:ba:1b:d4:ef:
c6:4a:f6:89:10:5e:15:ec:4c:60:9d:e5:f7:c5:51:7c:73:6e:
79:92:57:6c:e2:dd:f1:b1:8e:26:76:4b:d0:ea:2a:87:22:65:
a7:46:e4:f0:35:a9:c3:cd:58:d3:69:55:6a:b4:87:aa:b9:5c:
b6:31:f9:c3:b3:cc:4a:0d:31:66:c4:0d:d7:2c:fb:55:e7:70:
dd:18:66:81:6a:8f:57:8d:b8:3d:03:0a:37:f0:cf:ed:74:6e:
7d:9b:44:7a:61:72:42:be:ec:f0:5d:9b:ba:4b:d3:b1:f6:f5:
36:37:3f:e0:84:62:9e:97:2e:6a:ee:2e:6a:06:26:42:19:a3:
03:c4:cc:21:1c:6d:72:42:b6:79:83:f5:2a:04:0a:b7:40:c1:
e9:96:5a:6b:a5:e5:d8:36:00:22:83:06:5a:9f:84:b8:e6:b9:
b7:9a:a4:8f:f9:70:56:6a:0a:ba:5f:a8:b2:5a:78:a5:38:0b:
e2:ff:ad:24:22:a7:b8:98:db:22:78:2b:df:8c:a1:32:e1:03:
f0:8d:c0:96:68:70:d9:68:29:d1:30:98:f6:d0:2a:c7:25:7b:
82:b4:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:51 2026 by rpki-client