Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: q0mlnLYQnGYDt0uBy7Av39rBoQNgfM8NvnGWoHVJDOs=
Subject key identifier: 0C:2C:C3:6E:ED:D1:BB:71:E9:D9:1C:F4:D9:95:02:1C:0C:70:4E:C1
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 01A002141D82BD72B105FBA7BE86E318E961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 21:01:07 +0000
Manifest this update: Fri 14 Aug 2026 21:01:07 +0000
Manifest next update: Sat 15 Aug 2026 21:01:07 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: xCkBXpnSOgovmzpKQqn2w0j/W7kpqCJlGAxxCbjHYYs=)
2: 1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa (hash: c8c2ZCfFSRIW6FylRlfxyknjH4TvpagO5fNnP9Ygg7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:1d:82:bd:72:b1:05:fb:a7:be:86:e3:18:e9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Aug 14 21:01:07 2026 GMT
Not After : Aug 15 21:01:07 2026 GMT
Subject: CN=0c2cc36eedd1bb71e9d91cf4d995021c0c704ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:22:34:93:04:fd:f1:19:00:8f:35:60:ac:
e4:00:4c:d7:ef:1a:69:08:bc:66:ff:53:06:95:64:
af:e0:b4:fe:ea:b6:39:f0:f0:1b:a7:d2:12:88:4b:
81:97:79:5c:d4:ea:6c:a5:6f:14:1c:0e:f7:93:70:
29:61:bc:a8:52:8a:a1:45:58:fe:15:49:c1:19:67:
8d:56:5f:4d:d8:63:de:18:b2:06:00:bb:0b:09:29:
9a:45:1b:ba:65:d4:1f:7c:40:29:f9:9e:91:e5:39:
66:ce:c1:5a:96:80:97:35:d9:80:05:40:2f:3a:f0:
05:13:19:55:e3:cf:f3:92:5f:c2:42:80:cb:b5:84:
52:ae:47:76:01:99:ce:d2:ca:af:37:89:b2:db:27:
c5:b8:b8:14:d1:69:d4:dd:9b:95:e1:c4:49:ca:27:
ba:d9:b9:24:d9:7e:de:db:24:5b:c6:40:e2:52:f9:
d6:14:a6:2c:58:18:28:b4:01:6e:34:05:ff:67:43:
09:e0:8a:80:66:6f:d0:be:1d:e5:a2:a4:19:b8:c6:
9f:9a:4a:16:17:18:4d:20:85:db:8e:21:05:72:68:
4d:63:2e:ce:7c:2a:a0:e9:94:bc:93:be:a7:a8:af:
71:4e:38:67:40:47:f8:68:ef:e2:23:2d:a6:70:4f:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2C:C3:6E:ED:D1:BB:71:E9:D9:1C:F4:D9:95:02:1C:0C:70:4E:C1
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:59:36:af:ec:b9:92:55:29:bb:de:b7:50:2c:db:66:5d:27:
65:4c:57:8c:56:f8:b5:f2:c0:80:09:89:27:e5:b6:ef:48:da:
04:a2:9b:38:e4:70:fb:85:8b:58:a9:08:82:97:de:e9:28:ce:
d6:9b:b1:b6:2b:9c:69:6c:8e:ad:52:2c:bb:00:cc:a8:53:4a:
aa:36:e8:b4:df:c0:74:e8:2e:12:de:fb:e4:93:e3:6d:a2:5e:
0a:90:a7:3d:d2:8d:59:68:17:d8:13:f8:bc:13:e1:20:72:bd:
fc:ff:36:5e:40:f1:76:dc:38:93:52:e9:07:06:1d:dd:1d:ce:
a2:52:d8:af:c1:61:07:ff:d3:cf:31:fb:46:2c:57:28:c9:34:
4c:22:81:d0:fe:73:d0:da:20:5e:4e:45:53:89:5f:a9:0f:9c:
58:26:d9:9c:f4:04:f3:ca:67:2f:f7:21:b9:9d:c3:e0:b6:49:
58:63:53:0d:4d:82:5b:94:53:e3:8f:52:e1:36:3c:81:87:8a:
5a:41:cb:83:42:c0:1a:fe:a9:4c:9c:5b:ae:f6:55:31:78:25:
53:4e:49:20:fd:9c:46:a4:2b:8e:1b:ea:e2:69:c4:57:1a:5f:
c8:c5:fc:98:2a:27:20:e2:ca:4a:d4:63:75:c0:aa:d5:23:99:
04:9b:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:56 2026 by rpki-client