Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
File: CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft (raw, json)
Hash identifier: XB1lJU7vAiFN8hixjJv1CAieK4RiCd8183iODouK6Zw=
Subject key identifier: 9A:C3:C8:5D:A4:B5:EE:A0:C3:73:18:C5:E5:CF:66:86:66:66:2F:54
Authority key identifier: 09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
Certificate issuer: /CN=0966d239db4031fd6f147f601a2bb6b033314069
Certificate serial: 01A18C4170CFE876940D24058131D97564D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
Manifest number: 01A5
Signing time: Fri 30 Oct 2026 10:01:01 +0000
Manifest this update: Fri 30 Oct 2026 10:01:01 +0000
Manifest next update: Sat 31 Oct 2026 10:01:01 +0000
Files and hashes: 1: CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl (hash: jRTfICcZlG7c0CEgDz9wsstHSzsE/PvkVXSSucSvspU=)
2: GZAShLfc8NeJgF1_NRDRN1m5XTs.roa (hash: lixfepr/Gg7h2VoWBQECGRTLGauSXIp4KHdFX4z+DOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:70:cf:e8:76:94:0d:24:05:81:31:d9:75:64:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966d239db4031fd6f147f601a2bb6b033314069
Validity
Not Before: Oct 30 10:01:01 2026 GMT
Not After : Oct 31 10:01:01 2026 GMT
Subject: CN=9ac3c85da4b5eea0c37318c5e5cf668666662f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:2a:e6:fd:cd:f3:f8:5d:58:e7:18:99:bc:
b4:c2:30:13:2b:43:0b:c3:9d:e5:0f:93:c1:2a:cd:
da:ba:d1:1a:48:d3:b6:ac:c3:9c:e4:67:19:22:67:
7a:da:03:18:8a:2c:89:ba:64:a8:a5:91:f5:f3:3e:
0e:68:db:04:08:59:ad:c4:cf:73:17:b8:aa:e0:50:
88:1f:9f:b1:61:d4:e5:fb:04:15:5a:65:78:d0:8e:
2a:12:4c:e8:d1:e4:01:46:a9:a5:e2:fd:8b:3d:e6:
78:d9:ed:4b:8f:79:f7:32:19:6d:70:60:61:98:e9:
56:58:67:80:1a:84:57:a6:50:7a:7c:b4:2e:72:a4:
02:3f:18:18:68:c5:cc:af:48:a2:3c:d0:7b:41:d5:
20:6f:59:f6:fa:9f:cf:ad:da:c2:32:8e:9b:70:a9:
c1:b8:df:fd:2e:ac:bc:97:60:3b:47:34:77:cc:69:
89:ba:ef:c2:08:b5:42:4a:84:67:a4:22:11:83:9e:
a0:b5:ea:63:29:7d:88:01:c0:f3:35:5c:b2:47:c4:
8a:33:f2:68:92:31:ec:0f:70:19:0f:f7:6d:19:6d:
1e:4c:d5:31:3c:7a:82:d7:6e:f5:e1:fd:ed:52:9f:
96:34:52:47:f5:cc:bb:eb:1d:2e:1f:4c:16:97:7e:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C3:C8:5D:A4:B5:EE:A0:C3:73:18:C5:E5:CF:66:86:66:66:2F:54
X509v3 Authority Key Identifier:
keyid:09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b5:6a:93:0b:1a:fd:6b:08:a5:10:7b:78:37:a6:03:fa:c6:
3b:ae:fd:78:c7:a4:12:0e:84:93:c3:98:1c:24:15:4f:c3:0b:
02:b5:6a:8d:b3:61:0c:17:c2:64:78:b5:c1:e2:1d:c0:33:35:
de:6f:65:d7:45:a3:27:fd:50:32:28:6a:fe:d9:a4:2e:50:25:
85:3e:51:ea:cb:68:af:1d:0e:1a:eb:47:be:bf:07:25:8b:d5:
c6:e6:fe:e3:f5:9b:89:c7:ef:1c:82:26:ed:28:f7:0e:9c:86:
1d:84:f3:f1:da:af:b0:45:1a:17:19:cd:01:28:44:86:8e:23:
87:97:b0:76:68:b9:e0:f5:d6:3f:bb:fc:bb:16:db:ff:a0:88:
44:37:0b:7e:68:46:2d:60:1f:0e:dc:20:65:93:7d:db:c2:c7:
55:48:9b:ea:39:76:31:d4:10:cc:c1:ad:43:48:4f:cd:f8:e7:
c9:17:e7:3e:ae:0f:63:72:0e:e5:a6:66:68:4f:2c:22:b4:dd:
61:70:ad:d8:86:8f:1d:e7:43:5e:00:dd:4e:40:10:42:a6:78:
bc:cc:4f:7a:af:cd:5b:eb:dd:95:a4:09:a9:58:44:ae:30:85:
25:da:9c:0a:02:47:ce:08:a3:bc:df:4a:bd:84:c2:95:b7:ca:
32:d0:b2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:57 2026 by rpki-client