Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: jEHmz3YVMVfzdWcJQ11MYtrMBP9m31eq2vLN9biNTQg=
Subject key identifier: F9:AF:20:22:C0:6B:C8:43:BF:9F:09:DD:9F:D2:11:D6:22:E5:34:D8
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 019D28F2A3C6F1D37D853AD864E475044036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:23 +0000
Manifest this update: Thu 26 Mar 2026 07:01:23 +0000
Manifest next update: Fri 27 Mar 2026 07:01:23 +0000
Files and hashes: 1: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: HaV8fn5oLUfGlao6joDclaPhBEfIQX+GWIJ5V9xIYbI=)
2: eEPTZT6Cu9Z_P3_raMWIwWmS4XU.roa (hash: QSgLB7ALo1ZtZRISbHuHkO61FWxfLx7/83BtDc+Ihaw=)
3: vlffUXbbe03bAModfKshSSav8vw.roa (hash: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a3:c6:f1:d3:7d:85:3a:d8:64:e4:75:04:40:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Mar 26 07:01:23 2026 GMT
Not After : Mar 27 07:01:23 2026 GMT
Subject: CN=f9af2022c06bc843bf9f09dd9fd211d622e534d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:56:f7:c6:2c:cc:4b:f0:34:60:aa:5b:f9:
e8:73:f4:15:07:d5:4d:4f:af:74:77:94:cd:42:30:
16:48:bf:36:4d:bf:59:9c:6a:15:90:af:d6:fa:e7:
eb:aa:59:18:fb:bb:5a:e2:c5:92:a3:13:d3:fb:51:
86:27:b1:91:45:f1:43:4b:27:8d:d7:78:4d:8b:a8:
ac:2f:23:9b:7d:53:39:85:f0:6d:b2:1f:5f:3c:78:
e8:b5:80:71:0a:d1:b3:7c:d0:72:3f:de:9a:88:e8:
2d:04:3b:82:ac:1e:11:3d:98:d2:3a:78:71:fd:97:
e9:dc:04:0f:8a:76:00:0d:e4:ab:1f:65:4c:72:30:
cb:47:ef:f5:2e:cf:1a:a2:5c:81:88:2d:92:8c:3d:
3a:07:21:c6:1a:ec:e4:f9:48:d2:6b:66:9c:ff:04:
74:86:b5:1a:68:77:ac:90:01:3f:59:b2:3f:e9:2b:
2d:3e:30:f6:8a:69:62:2f:28:9a:5b:2b:82:ac:cd:
21:ba:cc:44:a3:7e:e4:57:15:c1:ce:a4:11:e0:a7:
92:e3:3c:9e:39:d0:0b:4c:82:26:41:d8:4d:b9:ee:
a1:04:48:0d:6a:ef:b8:fb:98:33:8a:f2:42:a4:20:
5b:c1:d6:16:7e:94:8d:97:2f:e3:6a:9e:f7:32:1c:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:20:22:C0:6B:C8:43:BF:9F:09:DD:9F:D2:11:D6:22:E5:34:D8
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d9:df:21:67:52:d3:e1:e8:2a:b9:ed:17:36:a3:10:71:86:
7b:f5:c3:be:8d:8b:49:06:43:83:b9:90:34:b8:f3:b5:99:19:
47:46:77:4e:06:9c:bb:ef:ff:b3:9c:b9:0d:14:a9:d5:59:6f:
5f:09:f5:eb:6d:73:96:4a:d7:45:8c:93:4b:aa:79:0b:d8:a2:
08:ac:72:64:de:9b:20:98:28:ec:b5:25:3e:65:65:f3:2e:55:
cd:f8:bd:44:ba:a4:9f:0e:2e:1a:83:d7:39:0b:79:9d:f2:82:
e2:ad:d9:c7:b2:a7:c0:12:64:c9:fe:a1:d4:f4:be:02:e4:63:
8c:59:82:90:c5:77:54:29:a6:b0:94:da:ad:42:f2:d3:73:96:
5d:67:56:e8:d6:eb:a7:6e:ee:0c:e7:4c:79:cb:f3:82:78:2b:
77:3a:74:b2:c3:9d:18:ed:5c:dc:bb:9f:96:5e:85:ae:03:69:
c5:15:b8:70:ac:ce:07:27:b3:ac:5a:b0:e7:b7:17:ae:82:b5:
3b:ef:b5:a3:fe:51:5b:49:f6:67:84:94:10:a8:1a:87:d7:94:
d5:2b:e5:2d:3f:e1:1f:b9:4d:d4:aa:28:70:4b:00:91:28:73:
82:20:09:89:71:01:b5:40:70:57:12:ce:41:f3:c3:87:66:3f:
ef:b8:c3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:29 2026 by rpki-client