Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
File: CWnLIVY-Ju22r7INHZLok6jduB0.mft (raw, json)
Hash identifier: 4OK+4mCmXK594fC28l4m4mxhuW1xtvUJ/idKaLM6A54=
Subject key identifier: 3B:34:76:B1:4A:0D:74:9C:F4:AD:9E:A8:D0:F7:09:85:31:0B:E7:03
Authority key identifier: 09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
Certificate issuer: /CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Certificate serial: 019F90911F938A921D8BF4293A9AD6C504A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
Manifest number: 0573
Signing time: Thu 23 Jul 2026 20:00:57 +0000
Manifest this update: Thu 23 Jul 2026 20:00:57 +0000
Manifest next update: Fri 24 Jul 2026 20:00:57 +0000
Files and hashes: 1: CWnLIVY-Ju22r7INHZLok6jduB0.crl (hash: AjA6shsJnHzV0bdwfP7c+5HVqkJBQWRiXqZpKRaAVC4=)
2: rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa (hash: 5haE3uSWqoSmkVp2C59/CSPiEElkrF1oivdNjZDrJeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:1f:93:8a:92:1d:8b:f4:29:3a:9a:d6:c5:04:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Validity
Not Before: Jul 23 20:00:57 2026 GMT
Not After : Jul 24 20:00:57 2026 GMT
Subject: CN=3b3476b14a0d749cf4ad9ea8d0f70985310be703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:b5:26:68:bf:21:5e:6d:b2:9a:5d:2f:63:
0d:67:95:e5:60:3c:77:0b:0f:f5:4c:4a:7a:f8:5b:
91:82:c8:3f:e9:fb:e3:96:9b:42:87:b9:a4:48:e4:
50:15:07:2f:f8:50:37:a6:a2:18:fe:fa:31:f9:8f:
49:e2:f2:04:f4:c8:4c:62:49:5c:fb:0a:79:0b:17:
0a:9d:d2:b9:f5:d1:2a:a6:5c:68:32:45:5c:c1:83:
bf:59:71:de:6c:f2:6c:45:57:d4:34:2d:d5:6e:a1:
e9:da:c6:35:e2:fb:49:5f:dd:7d:29:cd:8c:db:45:
51:a2:23:5e:16:b2:16:75:83:48:3e:b5:af:92:7c:
2d:02:ba:c0:18:b1:f9:eb:21:55:27:e4:14:6e:51:
13:29:fc:0b:c2:38:c5:eb:d5:32:57:c9:a3:76:61:
65:f5:66:f0:22:f4:01:08:3b:f0:b7:8a:05:36:72:
b8:45:b5:db:49:b1:b8:c8:22:e4:35:74:a5:ab:8b:
70:f5:fb:68:64:88:14:24:3e:4d:43:09:6b:08:b1:
22:47:e9:ab:bc:3e:a3:64:b3:3e:63:bd:3b:32:74:
87:da:0e:76:5d:77:c9:f2:50:6d:14:d7:f1:16:1f:
96:e1:72:8d:a9:b3:27:30:e3:7c:a9:f9:df:97:03:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:76:B1:4A:0D:74:9C:F4:AD:9E:A8:D0:F7:09:85:31:0B:E7:03
X509v3 Authority Key Identifier:
keyid:09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1c:b3:63:c2:c8:8b:1e:50:ca:32:8b:c4:ef:17:66:f4:ce:
b9:54:8b:72:62:fc:a9:b3:9a:00:f8:04:89:7a:1d:54:f6:65:
19:4d:7b:3b:a7:db:9a:51:2b:6b:d7:3e:a2:85:dd:8b:20:c2:
d4:ad:c7:b9:22:03:a6:ba:22:45:bb:e2:d9:d4:42:18:f3:bd:
d8:7b:d2:6d:d6:d5:81:8d:3b:74:f5:42:5f:7b:1f:a4:6d:b8:
e3:c3:d5:2b:2e:bb:d2:ec:cb:a3:4a:15:3e:ad:3a:9d:98:1f:
e3:e9:a1:a0:c1:cc:78:4e:67:53:24:e6:9e:15:38:01:37:ff:
28:ae:7d:24:01:5c:7e:b2:b3:0b:d6:4f:04:e6:3e:ba:52:30:
fa:30:69:c7:ff:9e:3d:23:3a:88:d1:6a:00:08:46:a4:25:15:
55:51:06:a6:e0:58:2c:ef:d7:71:4f:e2:e1:f2:3a:31:40:c6:
76:72:4a:8c:4d:9d:99:c9:a7:f1:50:2c:01:7c:3e:47:6c:6f:
98:ee:27:1b:fd:e4:c4:82:6a:12:92:c8:4a:b3:f3:5f:c4:39:
e0:56:0e:2b:36:9f:9c:31:be:c9:22:a3:c7:9e:b7:6d:6b:15:
0d:35:b2:8f:08:23:77:14:6f:ab:7d:f6:c8:57:a5:56:bc:08:
b5:dc:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:23 2026 by rpki-client