Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
File: CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft (raw, json)
Hash identifier: QWhsNp1bJPlMPBcWkDbtSYvkZDUwv5gbf0wOoFLhAts=
Subject key identifier: 3D:55:7E:ED:2A:F4:A2:84:DA:D0:BC:D0:8F:07:9E:2C:AB:D4:46:28
Authority key identifier: 09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
Certificate issuer: /CN=0966d239db4031fd6f147f601a2bb6b033314069
Certificate serial: 019FA1BBC673CDBCC3FB05F4B8354FF53290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
Manifest number: A7
Signing time: Mon 27 Jul 2026 04:01:05 +0000
Manifest this update: Mon 27 Jul 2026 04:01:05 +0000
Manifest next update: Tue 28 Jul 2026 04:01:05 +0000
Files and hashes: 1: CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl (hash: o/or66MMs5agyMarnll5NtortqTZLOrPCT55G95T8Zk=)
2: GZAShLfc8NeJgF1_NRDRN1m5XTs.roa (hash: lixfepr/Gg7h2VoWBQECGRTLGauSXIp4KHdFX4z+DOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:c6:73:cd:bc:c3:fb:05:f4:b8:35:4f:f5:32:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966d239db4031fd6f147f601a2bb6b033314069
Validity
Not Before: Jul 27 04:01:05 2026 GMT
Not After : Jul 28 04:01:05 2026 GMT
Subject: CN=3d557eed2af4a284dad0bcd08f079e2cabd44628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:19:28:7b:b8:55:dc:f6:28:50:4c:14:64:d3:
80:50:e3:e4:da:79:32:32:63:24:73:bb:6c:d3:0c:
c3:23:1c:c8:31:91:e4:90:4d:e6:ae:67:0d:61:21:
36:3c:1c:b2:d6:a0:0b:a1:dd:25:bc:c4:91:c4:d4:
d1:e8:0f:9b:bb:8d:21:7a:09:c4:50:a2:9b:5c:33:
16:3a:6f:fe:e1:98:52:61:04:24:48:32:20:93:c2:
ef:51:25:47:5b:2f:73:16:21:63:59:d8:78:9c:a8:
c9:62:d8:23:34:4d:da:df:9f:b6:e6:cf:04:28:e2:
54:e7:d5:46:af:a3:7e:b5:35:f7:fa:4d:22:e5:fb:
e5:0a:eb:26:5d:9e:38:f8:3d:18:75:b7:be:af:42:
de:5b:26:a0:49:90:de:0c:6e:c3:a4:72:16:99:6d:
4f:68:a4:76:1d:d6:76:e4:25:a1:25:f3:49:0f:42:
9e:b7:94:b3:60:93:18:88:10:df:03:ea:b2:28:1b:
95:74:0b:66:62:de:5f:b6:06:22:01:ff:64:25:87:
f8:f9:cb:9e:39:b7:30:96:7b:95:49:63:c7:a1:1e:
63:f3:35:c8:c2:06:84:3d:2d:e0:6e:69:73:49:77:
2a:87:2d:49:75:67:3a:09:ee:15:73:84:2c:a2:31:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:7E:ED:2A:F4:A2:84:DA:D0:BC:D0:8F:07:9E:2C:AB:D4:46:28
X509v3 Authority Key Identifier:
keyid:09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:96:d6:c8:20:21:30:36:a7:3c:5b:db:8a:e0:dd:1a:64:c3:
96:b2:7c:2f:68:44:4a:ef:fd:3e:2c:93:a6:bb:4d:80:d5:a7:
39:e5:2a:0f:0c:53:dd:02:e3:81:df:9b:81:e9:21:9b:b4:36:
c6:f6:38:fa:a7:97:a3:f7:7d:5b:3f:9d:39:5c:23:3d:77:91:
58:7e:c0:2d:6b:6b:a5:7b:f8:25:e0:af:46:51:48:d0:79:17:
ce:8e:f5:d2:c6:23:ca:1e:36:8c:b7:5c:e7:d9:b7:99:48:a6:
20:0f:cd:bc:14:b2:af:ea:be:99:42:42:1b:59:c5:da:ae:10:
7b:80:8e:7b:fe:4a:eb:b2:58:cf:77:77:1c:e5:d9:df:3c:54:
9b:10:c6:02:0f:e8:be:83:4b:76:02:5b:ef:37:10:31:0a:fc:
bc:13:42:be:36:f1:22:15:4e:bc:fc:a6:ab:2c:9e:54:cc:df:
ab:ea:ac:ba:b4:dc:80:fe:37:fd:ed:e9:06:76:a7:73:cf:19:
ab:08:8e:51:c9:a8:75:14:84:bf:f8:07:51:75:43:6c:f3:da:
86:3c:76:21:5e:b9:16:d3:5f:16:2d:a1:ee:d2:9f:88:c8:06:
ca:8a:31:e3:44:2b:c3:22:98:7f:6a:da:55:80:cc:96:a5:fc:
80:b5:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:21:57 2026 by rpki-client