Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: suFQ+PPtjUUUVNcgLWm3RZye/3YwID0CKY1jxsUZ+14=
Subject key identifier: 5B:08:5A:01:A7:94:D8:A6:6F:A9:89:CF:D3:CF:29:02:8F:52:3C:55
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 019F90FEE2C491A3FDDD17B09C3179ABF87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 14EE
Signing time: Thu 23 Jul 2026 22:00:50 +0000
Manifest this update: Thu 23 Jul 2026 22:00:50 +0000
Manifest next update: Fri 24 Jul 2026 22:00:50 +0000
Files and hashes: 1: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (hash: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: HoULik4Ec3NWA+BTE4KVZx5zD7eYwS7KMD/yAv6zqHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:e2:c4:91:a3:fd:dd:17:b0:9c:31:79:ab:f8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jul 23 22:00:50 2026 GMT
Not After : Jul 24 22:00:50 2026 GMT
Subject: CN=5b085a01a794d8a66fa989cfd3cf29028f523c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:92:33:08:07:14:e9:ef:fa:20:f5:d8:f6:
0d:97:af:29:63:69:26:b6:d1:f9:b4:a2:d5:e1:ab:
b3:df:ef:27:cc:e9:e0:88:ab:66:1e:2c:43:07:26:
05:d1:a8:fe:98:61:4b:69:55:00:b0:b1:76:66:94:
5b:38:c5:22:7f:b3:96:dc:ac:c5:95:69:b0:c5:e1:
d5:8f:b1:dc:23:86:1c:0b:4c:4c:33:be:9a:47:fd:
c8:79:07:4a:bb:4d:65:47:39:24:18:02:e7:26:e9:
ab:11:f7:76:9b:9c:1f:48:53:b7:cc:27:eb:63:40:
62:20:da:d0:a9:0a:ec:89:e5:9c:c1:20:e2:15:90:
4e:66:03:11:aa:d2:5b:3e:42:a6:4c:97:5d:39:0a:
53:3d:0c:03:e3:42:9b:fe:89:cf:c3:ed:28:b4:45:
e7:fa:d0:4f:a0:25:2f:d1:3a:07:70:b8:d8:fa:85:
15:02:a1:af:44:bb:32:c9:d3:27:af:3a:c1:3b:9e:
c1:e6:6a:da:69:3e:53:c5:84:5b:d3:63:eb:5a:b8:
01:c1:bd:ba:2c:cd:8a:de:3d:33:ff:65:11:f5:98:
6f:9c:ba:a7:66:e2:a4:44:02:e9:45:e0:3d:6c:14:
0f:a0:86:20:e6:51:1d:3a:8b:53:54:f0:2a:f8:02:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:5A:01:A7:94:D8:A6:6F:A9:89:CF:D3:CF:29:02:8F:52:3C:55
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cb:e5:74:92:f6:4e:6c:3d:cc:76:13:a3:79:ae:00:77:05:
95:5f:c1:bc:b4:c1:f3:2f:98:c6:59:a0:e3:e3:27:07:53:f2:
e7:ff:0a:0f:44:5f:a5:ac:f8:c3:e6:62:83:0f:e0:d4:78:7f:
11:6f:83:1b:76:fb:bc:e3:e6:79:73:57:57:ce:23:c5:64:b2:
d2:89:fb:27:d7:61:b4:a7:e3:6d:e5:93:ff:53:b3:d6:b4:60:
c4:78:00:ee:5b:ef:59:ea:09:9c:c1:f3:35:22:22:0f:06:6c:
73:e5:f8:01:e0:64:1c:42:66:88:8a:cf:3d:a0:4a:d9:71:30:
e3:7d:c9:c5:25:9c:c3:5e:84:28:19:a7:01:12:1b:63:9a:13:
c2:ce:83:59:a5:17:99:45:a8:d2:fc:92:cf:1d:13:18:68:4a:
69:ce:f9:eb:ef:2b:df:b4:c6:7d:d6:8f:84:2c:01:05:6a:73:
9b:a6:f0:d0:ae:5c:5c:e8:1b:7b:90:39:7c:74:23:fb:e2:ee:
62:e2:6e:e8:fe:ad:e7:12:2f:b7:27:84:b8:ca:9b:a0:ed:55:
cf:28:a9:a8:e9:e4:a1:ef:f7:2c:e1:b6:51:a5:6b:9c:f0:50:
7f:ec:d9:38:d8:56:56:4d:50:b2:dd:9c:86:ac:f0:4e:aa:a8:
cf:64:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:43 2026 by rpki-client