Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
File: CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft (raw, json)
Hash identifier: JI2LGPuZUpI5x232ufdkefGvINxmN89zhg2CoyfUfpI=
Subject key identifier: 53:E7:79:55:33:DF:CD:B3:97:76:31:0A:F4:F5:FE:60:BF:34:AF:89
Authority key identifier: 09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
Certificate issuer: /CN=0966d239db4031fd6f147f601a2bb6b033314069
Certificate serial: 01A08B68B3D4D7B7136EDBE4777B0BB81360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
Manifest number: 0120
Signing time: Thu 10 Sep 2026 13:01:29 +0000
Manifest this update: Thu 10 Sep 2026 13:01:29 +0000
Manifest next update: Fri 11 Sep 2026 13:01:29 +0000
Files and hashes: 1: CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl (hash: MHvKq0xTPNtxL9pUbOdLBxFaPC6ZJUZYBYa0QZvLjRc=)
2: GZAShLfc8NeJgF1_NRDRN1m5XTs.roa (hash: lixfepr/Gg7h2VoWBQECGRTLGauSXIp4KHdFX4z+DOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:b3:d4:d7:b7:13:6e:db:e4:77:7b:0b:b8:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966d239db4031fd6f147f601a2bb6b033314069
Validity
Not Before: Sep 10 13:01:29 2026 GMT
Not After : Sep 11 13:01:29 2026 GMT
Subject: CN=53e7795533dfcdb39776310af4f5fe60bf34af89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:ba:3e:de:15:c7:8e:ce:d3:f7:d1:cf:59:
69:e1:80:1f:d5:7e:71:6a:83:04:97:37:7a:d3:f4:
04:67:9a:a1:b1:4b:06:de:93:08:31:03:99:2b:33:
fe:28:15:47:db:a7:2a:46:7b:0d:99:00:68:85:c9:
21:db:ef:e8:27:22:87:84:17:77:b8:91:3e:19:7b:
62:8e:11:ee:5c:3c:dd:1b:fd:11:04:3b:bb:6e:9b:
53:0d:99:e9:1f:b6:c5:02:67:9e:15:6e:3a:cd:97:
66:b3:c9:93:83:03:ad:3d:7c:c3:b3:09:ac:7f:ae:
04:9b:68:c7:70:5b:f5:d5:68:60:9e:70:8c:d9:50:
76:eb:e1:f1:fa:f1:87:ec:04:bc:5f:a5:ab:47:e5:
86:77:b1:f2:b0:83:8f:ca:e4:83:7d:00:05:f8:8e:
1e:b4:e5:20:c4:67:fd:57:2a:c7:84:fe:ee:bc:65:
40:fb:e4:59:59:95:59:3c:9a:9d:f9:08:91:b8:4f:
31:d6:78:67:1b:b9:3c:e8:84:1b:97:19:98:cf:fb:
80:d1:a0:f6:69:ea:92:b8:11:76:8f:ca:02:94:ff:
34:a0:56:69:5e:3f:be:b7:a5:f5:e0:07:c3:5e:56:
5d:ee:22:29:47:c6:27:2f:3b:c4:a5:6f:64:b4:70:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E7:79:55:33:DF:CD:B3:97:76:31:0A:F4:F5:FE:60:BF:34:AF:89
X509v3 Authority Key Identifier:
keyid:09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:96:8c:ff:bb:ad:22:4c:75:c8:ea:6f:cb:42:92:81:e8:
5d:1d:d4:5d:da:17:f4:c8:7a:78:e0:61:3f:ae:bc:0b:af:83:
cc:43:a6:3e:71:76:cf:35:68:38:df:bf:c4:61:0a:73:7e:47:
fb:d3:22:fa:27:e2:f9:2c:5a:5d:86:69:4d:68:aa:62:83:02:
76:1d:e5:1e:19:01:6b:06:bb:6b:3c:89:18:16:e4:4f:e8:d0:
02:63:13:1d:ee:2e:73:d9:4f:fe:a8:20:26:fd:98:b6:1b:91:
34:67:d9:00:ed:f3:1b:55:29:9e:a4:66:d1:d6:fd:4d:c8:d3:
9c:1f:02:bd:16:88:7d:a3:be:0f:06:ac:3a:35:75:68:30:1d:
3b:d9:32:60:4a:5a:78:f2:4f:a0:e4:b2:6d:2c:cd:c5:d2:1f:
19:a0:e3:49:ce:cd:2d:5c:75:88:d5:67:7f:4f:59:9e:bb:33:
14:14:87:76:07:b1:71:d3:a5:5b:47:d9:21:a3:64:ce:65:67:
c8:1b:0d:2b:23:07:fc:1c:66:cc:ea:89:c0:18:fb:9b:1d:c9:
e2:f4:7d:29:64:4e:82:46:f9:ad:3a:64:cc:04:7f:86:b4:7d:
59:ed:a8:d6:6d:0a:6b:1c:40:21:f9:11:a0:ac:32:c8:f6:ad:
82:57:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:44:56 2026 by rpki-client