Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: cVq65ZkGEXr2ZvFQ8xo2GCvFz1U5JFuw6r4tR39iqos=
Subject key identifier: 6A:DF:AF:AF:B9:4E:26:84:35:9A:F2:30:29:5B:FD:00:9F:6E:84:78
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 019D25BA3B3D112EE885B2ED0F77B764402D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 0B13
Signing time: Wed 25 Mar 2026 16:00:54 +0000
Manifest this update: Wed 25 Mar 2026 16:00:54 +0000
Manifest next update: Thu 26 Mar 2026 16:00:54 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: VyLn2k9+Tja9lOfb6PMdE2hh9a0GtSW+BGyRyBLvhO8=)
2: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (hash: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:3b:3d:11:2e:e8:85:b2:ed:0f:77:b7:64:40:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Mar 25 16:00:54 2026 GMT
Not After : Mar 26 16:00:54 2026 GMT
Subject: CN=6adfafafb94e2684359af230295bfd009f6e8478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:71:ae:f1:82:70:32:ea:16:c4:ab:84:23:
cc:55:3a:08:a9:db:d5:06:07:2c:94:eb:61:a8:11:
85:2c:48:86:e5:45:26:6d:00:13:53:6b:13:af:26:
0b:b9:a0:e2:00:41:98:56:d6:46:7c:ef:2f:96:f3:
6e:be:47:91:41:3c:e2:f6:4e:0f:6e:c2:e3:72:fd:
75:47:66:1a:55:c7:78:97:f5:19:02:2f:b6:e2:04:
b3:13:42:b0:7e:d4:81:f3:d1:91:b4:71:55:d6:a8:
8f:18:2d:21:b9:d1:c3:2b:1a:02:21:60:42:8f:5d:
45:3d:33:4e:2c:39:5f:09:1c:0a:1d:3a:8b:6b:26:
c2:b5:03:77:33:f6:0d:02:33:ec:00:04:bc:84:73:
88:38:d3:0e:f1:6a:b0:a4:64:d0:fe:db:47:e7:e6:
fb:88:ab:55:dc:b6:40:97:00:15:b2:90:82:be:32:
12:63:d8:7e:9a:e8:35:3d:6d:17:de:ba:02:23:da:
97:4a:95:0f:d5:a3:62:d7:50:3a:0a:5f:94:da:6a:
44:33:be:9c:23:f8:51:ad:32:27:03:2a:bc:c9:31:
aa:ef:e2:dc:63:ba:5b:0b:86:db:66:81:f3:d2:a8:
57:6d:b6:66:13:41:79:fc:23:64:bd:1d:fe:ad:04:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:AF:AF:B9:4E:26:84:35:9A:F2:30:29:5B:FD:00:9F:6E:84:78
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:00:13:35:35:cc:51:df:3e:4a:1c:ba:fc:3c:f9:1f:63:
f9:f8:84:5d:67:2c:9a:a0:58:64:83:69:16:2a:3a:3e:c2:4d:
ab:91:4e:5e:08:86:b1:23:00:5e:46:33:4f:7d:b6:43:3a:62:
03:9e:c6:9c:42:c5:05:f3:fc:d6:cf:0b:be:09:98:c8:31:e3:
60:01:bc:71:56:5c:ed:51:7f:ca:2a:37:1a:8b:bd:58:6f:6d:
45:32:17:46:c3:f1:0f:1e:4d:e0:9c:74:45:74:64:dc:6c:e3:
3e:95:c7:6a:2f:9d:e6:cf:2f:a8:2c:f1:1b:7a:52:41:7f:c2:
cd:24:aa:2e:11:14:eb:5b:73:9c:37:ef:4d:6c:be:3d:8b:bf:
a8:52:64:a4:51:ad:08:13:35:65:5c:8a:ca:3d:f2:a9:57:af:
6c:1a:6b:ef:2e:d0:e7:56:54:f1:1c:8b:61:99:e8:1b:13:80:
87:3c:d8:e4:c6:ad:8d:10:ee:a8:0c:1c:0d:b9:c5:9a:ff:e6:
ac:0f:26:76:f6:f4:e4:f1:d3:07:e7:f9:46:0b:29:b2:b2:bf:
7c:81:15:08:b8:71:66:56:6b:6e:bc:01:b9:89:dd:d9:4a:bf:
e8:e8:1b:c6:76:9e:f6:12:e4:dc:5c:54:41:17:c8:5e:8e:01:
22:ad:57:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lujs9ES7ohbLtD3e3ZEAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMGE5NDBjZmQyZWVmZTgyZjU3MGZhZmM0ZmRjNWJkMDc5
NDFhMDYwHhcNMjYwMzI1MTYwMDU0WhcNMjYwMzI2MTYwMDU0WjAzMTEwLwYDVQQD
Eyg2YWRmYWZhZmI5NGUyNjg0MzU5YWYyMzAyOTViZmQwMDlmNmU4NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGZxrvGCcDLqFsSrhCPMVToIqdvV
BgcslOthqBGFLEiG5UUmbQATU2sTryYLuaDiAEGYVtZGfO8vlvNuvkeRQTzi9k4P
bsLjcv11R2YaVcd4l/UZAi+24gSzE0KwftSB89GRtHFV1qiPGC0hudHDKxoCIWBC
j11FPTNOLDlfCRwKHTqLaybCtQN3M/YNAjPsAAS8hHOIONMO8WqwpGTQ/ttH5+b7
iKtV3LZAlwAVspCCvjISY9h+mug1PW0X3roCI9qXSpUP1aNi11A6Cl+U2mpEM76c
I/hRrTInAyq8yTGq7+LcY7pbC4bbZoHz0qhXbbZmE0F5/CNkvR3+rQSEhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrfr6+5TiaENZryMClb/QCfboR4MB8GA1UdIwQY
MBaAFAsKlAz9Lu/oL1cPr8T9xb0HlBoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUt
NmU0Y2Q4MzZjN2NiLzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUtNmU0Y2Q4MzZjN2Ni
LzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkUAEzU1
zFHfPkocuvw8+R9j+fiEXWcsmqBYZINpFio6PsJNq5FOXgiGsSMAXkYzT322Qzpi
A57GnELFBfP81s8LvgmYyDHjYAG8cVZc7VF/yio3Gou9WG9tRTIXRsPxDx5N4Jx0
RXRk3GzjPpXHai+d5s8vqCzxG3pSQX/CzSSqLhEU61tznDfvTWy+PYu/qFJkpFGt
CBM1ZVyKyj3yqVevbBpr7y7Q51ZU8RyLYZnoGxOAhzzY5MatjRDuqAwcDbnFmv/m
rA8mdvb05PHTB+f5RgspsrK/fIEVCLhxZlZrbrwBuYnd2Uq/6Ogbxnae9hLk3FxU
QRfIXo4BIq1Xkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:18 2026 by rpki-client