Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: GUMFpGS1b2RLHNHPAt1aFt/ivnjXOQvjIe4QeeiLjxw=
Subject key identifier: 7C:56:15:D4:1B:4F:70:E8:7C:92:BC:79:A5:B5:88:B5:66:21:45:CD
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 019D2703DCECE5F6DD5D88BD8E5D79E8C4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 13AE
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (hash: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: K7Dvh2pGDcY8yfq6xTqpMlE9GKVohT9j0dHpKAxIK14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:dc:ec:e5:f6:dd:5d:88:bd:8e:5d:79:e8:c4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=7c5615d41b4f70e87c92bc79a5b588b5662145cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:05:4f:6a:87:a8:6c:88:76:3c:9e:26:93:
dd:ad:e6:42:ab:2a:c5:54:3b:89:f9:28:02:87:23:
1f:21:06:05:e3:a0:fc:38:ee:6f:9b:01:fa:56:ff:
88:e9:13:df:b4:46:d6:65:be:0e:a9:b2:fb:10:84:
a6:b6:36:91:15:bd:59:56:8e:67:c4:e3:14:02:e0:
f4:69:b4:d7:bb:8b:a6:8e:59:cb:a5:02:ef:83:28:
69:8a:d9:12:30:07:79:a0:43:17:e7:55:ce:05:de:
66:f9:06:c9:49:d0:98:0e:58:5f:31:5c:81:f6:ab:
c8:9d:11:12:a2:f4:3a:39:46:66:c5:66:4a:0f:ff:
04:4e:4c:a1:35:8e:0e:ee:75:c7:49:60:bf:ab:e9:
a6:aa:a1:49:6b:74:60:4e:0d:06:e4:2f:a5:30:d9:
29:a2:f0:10:45:19:31:09:b0:3c:19:59:94:09:12:
14:19:92:06:09:38:b6:04:19:37:06:e6:64:43:d2:
bd:b4:d1:d4:07:f0:99:de:d3:07:a6:c9:5a:24:0a:
1f:24:e9:9c:93:4d:19:ef:d1:a1:32:7e:e5:22:30:
ee:20:a5:cb:da:d6:c5:c0:79:8e:8a:30:88:84:08:
49:7f:56:12:3b:9d:99:17:4a:eb:f6:c5:ae:a1:a9:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:56:15:D4:1B:4F:70:E8:7C:92:BC:79:A5:B5:88:B5:66:21:45:CD
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ff:d7:e0:c3:2e:3d:81:69:87:cd:45:3d:60:23:56:25:d7:
e8:aa:52:a5:39:64:78:0d:b5:21:d4:a0:b6:68:b8:22:21:65:
88:8d:b7:c2:c9:f5:ec:87:e1:30:33:70:6b:ca:e5:ff:9b:9e:
39:99:9e:0d:f0:73:2b:65:10:7d:8e:01:02:3c:c2:1a:fb:3c:
b4:8e:59:7e:23:c3:20:09:36:5b:24:bb:31:15:ae:7a:84:d1:
66:ed:8f:7a:08:eb:df:a3:b3:dd:20:7b:f5:5e:80:aa:fc:ed:
97:b2:1f:4d:00:94:78:24:e1:62:f3:98:ea:1a:be:f4:b9:c5:
9a:ec:49:20:c4:e9:4b:c1:8c:e8:bf:e9:dc:9a:67:18:cb:b8:
2d:a2:8f:b3:2c:ef:83:26:f4:0f:3a:5d:2f:30:39:20:b3:72:
91:62:e8:45:f5:f2:67:40:fe:20:9a:3f:74:b0:17:e3:04:57:
8b:25:94:2d:e0:95:76:e9:3d:0b:8d:a7:3b:8f:1f:93:bb:ac:
71:c7:37:e3:04:01:6e:88:d1:79:66:43:73:b1:24:ad:c7:b7:
92:d0:74:aa:30:60:c5:2c:04:8d:3b:f4:0c:46:0d:44:50:4f:
d8:a9:06:c7:88:71:cd:aa:63:12:6c:da:5c:3c:b9:d1:b9:c6:
4f:e5:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:13 2026 by rpki-client