Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File: CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier: 3IZ+UXZQH2hVidzD0QStSzFvIOQSmR0hJ6FVKr+5I04=
Subject key identifier: 58:92:8E:73:0E:DF:5F:7B:E1:A0:5F:C6:14:02:10:D9:20:A0:BD:B4
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 019F84C35FFBC06D5C86AC3B3BFE28F469D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number: 0B27
Signing time: Tue 21 Jul 2026 13:00:24 +0000
Manifest this update: Tue 21 Jul 2026 13:00:24 +0000
Manifest next update: Wed 22 Jul 2026 13:00:24 +0000
Files and hashes: 1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: H/gdkawJwdzBPWgXSXNzzIPG+71ERQ556VqRwX8vmdw=)
2: RsTSr-3jTnG1CeXmaL5yjIv3e7A.roa (hash: U9h7mXi2TPfXP2mWBMjzpDcUhTXc3t6ZDS7Y90GMnqI=)
3: V2mAUhiuLSdY43WTX18t68JU52U.roa (hash: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM=)
4: ZYguphbq_OVZXqnSVXPcyY-MrWU.roa (hash: YBNSr4xuGhr4HSUuVKzH8avlZXqqbx+cNVBs9dQx+pg=)
5: kNW-FofDRFcYyJ6jdZntLsWi_kQ.roa (hash: vsRui+TumYQf+mEKOxKsjjJTMlbNB6Ytf/Fua/xhVUM=)
6: ksfa6RQDM_0VxmjR64arGWZD9rM.roa (hash: eBadilkI77a4zTmLhePWsFBGmFNKACYzx+SMzHBV/40=)
7: yNd_DMkIMvgYnrn_7Wsari1U2DE.roa (hash: IEhZvaGq91qhQu5JNN1NRfY/8v2XmumSPV2Zm2UUU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:5f:fb:c0:6d:5c:86:ac:3b:3b:fe:28:f4:69:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Jul 21 13:00:24 2026 GMT
Not After : Jul 22 13:00:24 2026 GMT
Subject: CN=58928e730edf5f7be1a05fc6140210d920a0bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:69:75:59:91:cc:ff:ba:47:d2:a5:8f:28:
6c:fb:fd:fa:c5:23:a5:58:c5:2e:81:11:56:0b:17:
89:6c:36:11:79:62:63:06:a3:7c:11:18:be:7d:89:
61:a7:75:ec:66:99:fa:7f:01:4d:75:2b:92:cb:76:
e1:d5:13:13:32:1f:44:bd:cf:17:57:59:fb:99:94:
7e:f2:ee:7f:30:a2:dc:09:11:84:9b:6d:25:32:7b:
9f:b2:34:78:3c:49:70:43:bb:cb:0f:2a:6b:c1:d7:
cd:ce:e3:b5:50:f7:cf:1f:33:cf:e0:e3:8a:0a:11:
cc:d5:08:c1:af:ec:39:2f:8c:c6:e0:38:3d:41:69:
a6:f0:b3:22:c4:3d:e1:39:76:22:fe:70:3d:4d:7b:
63:31:63:93:85:fc:79:a7:98:93:3c:09:0f:bc:01:
22:d4:df:4b:cd:38:d6:2d:f3:bb:f8:f1:db:ea:da:
19:bb:a4:57:54:1f:52:a6:44:89:00:1c:04:ad:8a:
6d:7c:6e:4e:e6:90:2d:cb:97:a9:04:4b:6d:a7:95:
9e:ef:61:ae:e1:2d:1a:1a:e7:44:b4:d6:09:c7:6d:
3b:0d:b2:51:cc:45:0a:eb:40:18:48:50:4c:10:1d:
1c:61:15:ea:9c:a4:b4:da:ac:96:5d:60:ca:24:22:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:8E:73:0E:DF:5F:7B:E1:A0:5F:C6:14:02:10:D9:20:A0:BD:B4
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:74:f5:6a:6b:c9:b5:05:a1:f7:7c:07:1d:24:6c:64:43:
e2:03:be:3b:00:73:e3:8b:7a:ed:a8:e6:60:f1:fb:b4:12:da:
e6:89:70:c7:14:79:4a:f9:e2:b6:d1:c6:ad:12:dd:81:58:2f:
e2:2e:d9:f4:7f:a1:4d:9e:ec:c4:39:ae:c4:19:96:4b:d9:d2:
ae:ea:ed:2e:18:b7:72:f0:d4:22:6e:4f:7a:d7:91:41:aa:41:
86:8a:58:be:df:58:37:75:0d:e6:29:4b:6e:2c:2c:fa:44:2d:
f1:ae:ba:ee:a2:52:c5:f9:a3:25:01:f0:9b:6f:75:0a:11:25:
2b:b4:49:75:8d:aa:73:dc:cb:ee:50:bc:57:9a:64:75:2b:8e:
8a:34:f2:52:1b:b4:87:fc:ce:ed:54:bd:bc:1a:1d:5b:8d:f3:
00:21:e5:31:4d:66:0e:ec:d1:10:be:ba:25:f6:d9:8e:60:4d:
f1:df:a2:1c:a9:5d:53:bb:4f:16:f8:d5:df:5e:0c:f8:0f:e8:
4e:e3:fc:ec:e9:3b:aa:21:22:33:08:df:b2:61:65:ae:e8:f4:
1e:55:e0:d4:2a:c8:50:68:63:02:03:fa:57:74:35:6f:8b:10:
60:cf:a5:e0:12:e9:2e:cf:2a:d7:c4:1c:13:29:62:fc:7c:25:
fc:c8:fa:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew1/7wG1chqw7O/4o9GnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz
M2I1MzMwHhcNMjYwNzIxMTMwMDI0WhcNMjYwNzIyMTMwMDI0WjAzMTEwLwYDVQQD
Eyg1ODkyOGU3MzBlZGY1ZjdiZTFhMDVmYzYxNDAyMTBkOTIwYTBiZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw5pdVmRzP+6R9Kljyhs+/36xSOl
WMUugRFWCxeJbDYReWJjBqN8ERi+fYlhp3XsZpn6fwFNdSuSy3bh1RMTMh9Evc8X
V1n7mZR+8u5/MKLcCRGEm20lMnufsjR4PElwQ7vLDyprwdfNzuO1UPfPHzPP4OOK
ChHM1QjBr+w5L4zG4Dg9QWmm8LMixD3hOXYi/nA9TXtjMWOThfx5p5iTPAkPvAEi
1N9LzTjWLfO7+PHb6toZu6RXVB9SpkSJABwErYptfG5O5pAty5epBEttp5We72Gu
4S0aGudEtNYJx207DbJRzEUK60AYSFBMEB0cYRXqnKS02qyWXWDKJCIOfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiSjnMO31974aBfxhQCENkgoL20MB8GA1UdIwQY
MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt
NDE0OTA4NzJmYzRlLzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl
LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiR09Wpr
ybUFofd8Bx0kbGRD4gO+OwBz44t67ajmYPH7tBLa5olwxxR5SvnittHGrRLdgVgv
4i7Z9H+hTZ7sxDmuxBmWS9nSrurtLhi3cvDUIm5PeteRQapBhopYvt9YN3UN5ilL
biws+kQt8a667qJSxfmjJQHwm291ChElK7RJdY2qc9zL7lC8V5pkdSuOijTyUhu0
h/zO7VS9vBodW43zACHlMU1mDuzREL66JfbZjmBN8d+iHKldU7tPFvjV314M+A/o
TuP87Ok7qiEiMwjfsmFlruj0HlXg1CrIUGhjAgP6V3Q1b4sQYM+l4BLpLs8q18Qc
Eyli/Hwl/Mj6Lg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:17 2026 by rpki-client