Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
File: CWnLIVY-Ju22r7INHZLok6jduB0.mft (raw, json)
Hash identifier: S/9SFx+Y3DGPvcRxuilaGYuMwRp/fVgv2omX8ac/wOw=
Subject key identifier: 88:71:47:E0:AA:DC:D6:22:14:CD:A3:B5:DC:F6:B3:77:0D:F3:A8:50
Authority key identifier: 09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
Certificate issuer: /CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Certificate serial: 01A0D6F0E6023E9944F4DD89F7D9EB7F3284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
Manifest number: 061C
Signing time: Fri 25 Sep 2026 05:01:46 +0000
Manifest this update: Fri 25 Sep 2026 05:01:46 +0000
Manifest next update: Sat 26 Sep 2026 05:01:46 +0000
Files and hashes: 1: CWnLIVY-Ju22r7INHZLok6jduB0.crl (hash: 11UfvQE5bfjlh4MM6TRUfPUKZiauxAsnz4fvWVBZHpM=)
2: rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa (hash: 5haE3uSWqoSmkVp2C59/CSPiEElkrF1oivdNjZDrJeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:e6:02:3e:99:44:f4:dd:89:f7:d9:eb:7f:32:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Validity
Not Before: Sep 25 05:01:46 2026 GMT
Not After : Sep 26 05:01:46 2026 GMT
Subject: CN=887147e0aadcd62214cda3b5dcf6b3770df3a850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:d0:f2:7b:f2:00:df:5e:45:35:e0:ae:a6:
56:f5:d1:ab:d0:66:f4:b3:eb:87:9d:a3:54:89:43:
bd:09:45:bf:aa:f2:ca:73:0a:3d:bd:3d:c6:1c:89:
b8:42:2e:60:42:49:98:d5:00:4b:bb:d4:37:16:c0:
b2:10:be:3f:9c:ba:ab:80:58:25:06:0d:49:90:74:
2d:57:50:8a:07:90:ac:fe:c8:41:1d:1f:99:ae:8e:
0d:b2:67:41:52:b6:33:00:33:04:8d:16:8a:73:ec:
05:8f:1b:22:2b:06:a7:3f:fa:63:d7:14:80:5d:82:
5e:9f:a9:2f:c8:d3:a1:e4:59:95:c2:fb:04:89:dd:
a6:90:43:94:8d:5a:f0:c3:36:b4:40:9c:8c:5f:e5:
62:39:82:d2:a3:d4:3f:8f:89:23:09:2e:03:f0:e5:
d3:f5:5e:db:96:32:3d:5f:62:9a:d5:db:44:09:a5:
00:be:e0:5f:da:1c:dc:70:53:e8:0a:43:41:8f:39:
90:95:79:05:5b:3f:4d:c7:eb:76:2f:6e:be:04:ed:
23:79:59:f4:6c:80:e3:bf:43:a2:24:95:68:a7:65:
21:87:13:88:fe:1c:6a:4c:43:1c:76:92:e2:f3:1f:
2e:61:20:0b:40:4c:dd:2b:86:d5:61:8a:17:58:19:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:47:E0:AA:DC:D6:22:14:CD:A3:B5:DC:F6:B3:77:0D:F3:A8:50
X509v3 Authority Key Identifier:
keyid:09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4f:ab:e9:a2:0d:cb:48:3e:8e:94:2a:13:66:6d:49:51:b8:
35:0f:c3:cc:c1:ef:11:b0:b7:1e:7b:95:7a:2c:ab:96:2e:c3:
f8:ce:9e:10:3f:d8:40:43:47:dc:63:70:01:50:9c:71:f2:aa:
e8:f0:2f:53:33:92:1a:4b:a5:b6:9d:f4:8d:dc:47:6b:9b:64:
ac:65:fb:f2:f4:7e:c5:57:c0:66:2d:c4:ca:e6:88:f4:6d:b9:
94:fc:d3:ab:b1:70:44:de:a8:c9:b3:19:94:4a:39:4e:75:e8:
52:84:ba:26:fb:bb:1c:bf:53:a8:d8:84:03:cc:48:04:36:6e:
4f:d8:ef:ff:6a:3c:60:5c:6e:c9:49:4f:e6:a8:95:e6:14:77:
a4:0b:96:cb:fc:b4:aa:00:cd:b3:cb:3a:8a:0a:84:d2:b4:83:
8a:37:d5:d6:57:29:f3:e8:9a:22:7e:63:c1:43:83:33:2d:34:
9c:dc:0c:99:13:03:80:7c:00:f3:d5:3a:f2:7c:16:b3:36:0c:
64:29:db:5b:66:d3:48:69:a8:e3:02:30:94:2d:61:7a:33:b1:
62:13:93:99:9c:bb:39:28:b1:39:f5:bd:01:93:66:63:60:6f:
34:b6:fc:25:dd:22:a8:fd:42:96:bb:8e:7c:0f:f0:6d:21:69:
19:97:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:29:08 2026 by rpki-client