Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: aSYxpEwEqJKAZQyDMNGvbhBiRerqUT2o5r3wASQohOg=
Subject key identifier: 61:6B:84:90:B0:BF:0C:A0:48:B0:F7:C9:12:0E:7B:0C:DC:F4:85:0A
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 019D38D2F511EF9E50137BE9AFCA4DD6CA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: 02F2
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: CEGd7CYqux6ItiEfxNHqqdG0avRWvbyJIgd+qC8rj1Y=)
2: M3DwLkdZ4U5SO6WeKhfSjchcFqQ.roa (hash: GytdW9ktv5N5mIUsOefVAFMWXbdLbqFMuWoFw+Cxm4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f5:11:ef:9e:50:13:7b:e9:af:ca:4d:d6:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=616b8490b0bf0ca048b0f7c9120e7b0cdcf4850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:35:e7:7b:93:67:98:75:ae:a7:62:ac:84:
5a:ce:dc:66:fd:92:74:8e:03:e2:cf:07:da:9d:49:
83:ca:7f:e1:cb:0f:35:03:d8:15:6f:87:3a:5b:d7:
3e:3f:30:b6:b5:86:de:98:d4:8b:00:1e:cf:fc:99:
85:2c:07:1b:15:86:a3:db:3e:3e:44:2e:49:d7:3a:
c3:5e:7b:79:d4:59:2d:3e:a3:3f:72:2e:09:fb:d2:
79:b6:31:54:a4:4c:8d:bb:f3:55:f8:47:d2:bf:96:
b7:73:a7:07:e2:a4:79:d4:dd:32:46:04:12:88:ce:
5a:2c:bb:4c:99:6a:6d:90:c7:5b:b5:d3:bd:ce:00:
ca:49:19:a6:d7:34:b1:0b:34:90:3f:0d:40:55:b7:
15:2e:46:cd:7e:91:d4:ac:8b:4f:d0:7d:46:62:0d:
e3:58:b7:bc:4a:1b:cf:97:cb:a1:4b:39:95:d8:7b:
11:13:6a:5e:10:48:5b:7e:20:d2:82:9a:d6:09:8b:
d1:d8:5a:06:6e:2d:87:0f:5c:10:0c:bd:a9:ae:69:
5a:45:a7:50:08:58:3d:cb:c0:1b:86:35:30:19:45:
a4:a3:85:7f:5e:36:d7:07:7d:52:b3:99:15:cf:f7:
69:71:e0:69:71:5a:06:a6:af:2f:b5:59:02:55:1f:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:84:90:B0:BF:0C:A0:48:B0:F7:C9:12:0E:7B:0C:DC:F4:85:0A
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:55:ec:b7:f4:0b:d6:7a:0b:6d:f8:9a:46:1d:d9:3f:20:
05:14:54:d9:7d:f1:55:9c:b3:3d:32:4c:16:5f:5b:a5:64:4d:
fb:a0:d4:83:dd:18:fe:e2:c5:dd:6c:c6:68:f7:86:14:94:96:
84:3d:16:9f:1e:34:01:1d:3c:88:1f:32:7d:26:b2:8f:d7:67:
24:3b:4d:99:45:79:d9:78:a6:20:17:ff:44:aa:bf:06:e4:a2:
89:d4:c2:26:68:47:73:c1:16:ed:d3:f4:57:8a:01:33:78:1a:
51:d1:77:67:be:51:79:1e:d5:b9:c2:a4:78:fa:53:03:52:5e:
94:c8:75:c1:c0:1b:9a:d0:0e:b9:0b:d0:cd:fa:6f:54:3e:4d:
26:fc:99:71:49:eb:df:b5:b9:ae:31:77:c7:5b:27:f0:87:41:
c8:fe:6c:1b:41:9b:48:f6:e7:d2:d5:e1:3a:18:1b:c8:61:3b:
25:ee:6e:01:65:0d:2b:64:7f:81:c6:d0:cf:cd:3f:9a:93:33:
e7:73:ee:8d:89:29:ca:43:f7:7b:8c:43:55:97:af:7e:c0:79:
97:9d:c7:b2:a6:a6:7d:99:52:e6:12:b5:c3:94:f1:6e:9f:c7:
a9:21:8c:33:b4:bb:65:4c:84:7b:3e:00:2f:e0:8a:b5:d6:c9:
8c:82:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:12 2026 by rpki-client