Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: zXmkz2XDQDXgVkXWrbUuVo4lHQ1Mr4wd2vPXf5JFftQ=
Subject key identifier: F1:BD:24:D6:CD:99:49:DA:46:3F:83:37:5C:73:5F:A5:4A:82:87:ED
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 01A0D383C44DB3C94D70BA6EF554A65C5396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 1595
Signing time: Thu 24 Sep 2026 13:03:43 +0000
Manifest this update: Thu 24 Sep 2026 13:03:43 +0000
Manifest next update: Fri 25 Sep 2026 13:03:43 +0000
Files and hashes: 1: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (hash: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: fVGx2jCUDfTHMy63JpiOdlR9miNsYaBocVI2CfrL7ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:c4:4d:b3:c9:4d:70:ba:6e:f5:54:a6:5c:53:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Sep 24 13:03:43 2026 GMT
Not After : Sep 25 13:03:43 2026 GMT
Subject: CN=f1bd24d6cd9949da463f83375c735fa54a8287ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:36:7d:8d:56:3c:fa:4e:47:fa:e5:e3:c9:
b9:4f:1e:1e:db:ae:de:80:ad:d2:3f:c3:b8:41:f1:
da:e9:1f:a7:b3:38:eb:a8:1f:63:e8:5f:e7:cf:9f:
03:4f:64:61:bc:03:fd:b8:d0:7b:37:4f:0f:30:d0:
e9:d1:89:7b:59:5b:bd:c4:a2:21:ab:2e:71:bd:82:
a7:86:b0:5d:cb:70:94:55:13:60:ed:97:7d:c7:cf:
4d:b1:86:a0:f2:b1:73:7b:3d:55:48:c8:de:d9:9f:
79:01:ef:15:c7:91:3a:44:73:fa:9e:d6:e6:57:83:
a4:db:89:0f:23:54:65:c0:1e:b8:65:66:dc:f0:e3:
ca:ea:eb:9c:d4:3d:d1:82:30:19:fe:4e:c2:5f:cc:
b2:65:e7:b0:7e:e9:76:78:13:8a:ce:c8:89:e7:d4:
b2:7c:26:27:ee:c9:1c:d3:53:52:50:76:c5:be:20:
a3:fb:0c:97:b6:1c:65:dc:e0:9e:f8:27:41:9b:be:
59:75:88:77:ef:e8:a2:e2:40:e3:9c:d1:53:8f:0b:
44:9e:05:3d:d0:5a:b4:92:b5:f2:c7:97:5b:13:72:
d1:4f:92:17:e5:19:11:df:9c:95:dc:c0:1e:11:12:
a0:7f:92:d4:de:b2:e1:61:bf:2e:3a:3d:88:b1:f4:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BD:24:D6:CD:99:49:DA:46:3F:83:37:5C:73:5F:A5:4A:82:87:ED
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:89:40:4a:d3:8d:ed:e1:8a:aa:98:b0:c2:9d:c7:28:91:2a:
26:56:4f:62:5e:a0:b4:c4:d5:04:6c:6f:56:5e:19:28:61:8a:
f8:63:26:83:e6:66:28:67:9c:af:25:6b:8e:ee:4a:90:4f:d8:
3e:3f:f3:ed:79:d4:42:b0:91:de:cf:d9:90:29:d6:b4:00:3d:
cb:d7:61:e9:25:be:d5:62:03:c4:94:a5:3e:19:96:eb:20:34:
2a:db:b1:6a:24:12:2c:58:6e:61:fb:8c:e5:f7:f8:be:a4:5a:
93:7f:d9:73:9c:67:3a:ab:69:98:7b:10:23:be:cf:3e:89:ee:
7e:84:a7:53:ef:e3:2e:58:c2:f4:96:ca:7d:a0:c0:77:1b:c3:
0f:b3:dc:41:29:07:f3:16:ec:aa:25:6b:68:2e:c6:27:70:f6:
ec:24:be:f9:3d:38:ef:bc:13:a0:bb:fb:56:a9:6f:c9:15:dc:
bd:07:9b:b0:d3:5c:1b:a4:cf:cd:dd:aa:ad:cb:fa:b1:a0:88:
2f:63:f7:98:72:1a:80:9e:a3:7b:1e:69:dd:b0:55:b2:4f:87:
fe:6c:19:33:22:69:f9:7c:d5:32:35:1a:76:e4:88:28:ab:cc:
4b:4b:a4:e8:9c:27:40:b3:fe:b7:38:82:18:80:59:08:5b:d2:
6b:48:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:39:55 2026 by rpki-client