Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: /YNup318ccuAniZqQFf/5JctiustNx5CIKCgNvM4qV0=
Subject key identifier: 73:A5:58:3C:B5:36:3D:B0:EA:78:38:97:B0:70:27:C9:23:4C:B9:C0
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 019F17F9D161333AB7B905ADFE5DEE31A953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 11C9
Signing time: Tue 30 Jun 2026 10:01:15 +0000
Manifest this update: Tue 30 Jun 2026 10:01:15 +0000
Manifest next update: Wed 01 Jul 2026 10:01:15 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: VrUCq2294a8juVevADROm7TtpoPv/QGJKCRdLqMce0U=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:d1:61:33:3a:b7:b9:05:ad:fe:5d:ee:31:a9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jun 30 10:01:15 2026 GMT
Not After : Jul 1 10:01:15 2026 GMT
Subject: CN=73a5583cb5363db0ea783897b07027c9234cb9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:f5:45:e1:89:1c:8b:57:6d:fb:de:bc:02:
6f:cb:b9:84:ea:43:3e:d8:de:e9:33:7c:04:4b:de:
bf:4d:1e:f8:33:dd:50:23:c4:ad:e5:47:8e:5b:c2:
2e:b4:86:d7:fd:2d:d4:a6:29:b7:9a:2b:80:b7:06:
0d:d1:16:46:ef:57:c2:bb:7a:95:04:c5:e3:b7:25:
7a:0e:3b:3d:e4:93:ff:c0:da:40:7e:b0:42:ed:01:
83:85:07:a4:3b:98:35:fe:59:4b:53:eb:7e:08:04:
e8:d1:1f:32:b1:3b:a8:8b:89:9c:6a:2a:a4:6d:af:
4c:43:04:a2:6f:45:09:de:fe:a7:13:2a:cf:8c:7f:
8b:61:c2:42:b0:e0:27:90:f0:27:11:2d:72:19:d9:
17:0e:49:14:34:ff:27:b1:2b:81:58:0c:3e:96:07:
2d:21:23:71:46:f3:a7:6f:bc:87:36:cf:ee:84:3f:
d0:75:89:18:cc:c7:53:e4:e0:cc:bd:7d:fa:6a:a8:
c6:0c:05:82:a6:09:86:2a:ac:c7:1b:72:60:98:a3:
99:3d:ce:74:26:2b:9b:69:27:af:34:a8:dd:b2:f6:
cc:42:0b:02:d7:88:50:e8:de:90:ad:40:c3:43:c7:
49:a4:21:38:44:8a:ec:21:9a:42:fb:84:e0:28:89:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:58:3C:B5:36:3D:B0:EA:78:38:97:B0:70:27:C9:23:4C:B9:C0
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:f4:1f:35:75:4b:1b:47:ff:67:e2:8e:79:d7:8d:69:81:
a8:1d:59:88:8f:1e:fd:92:c7:c6:76:18:5d:db:cb:c5:50:54:
90:13:e1:9d:b6:33:5f:74:88:79:a1:4e:55:63:ea:bf:2b:45:
59:af:2f:99:b2:9e:7c:49:79:79:67:0f:08:22:91:79:ce:3f:
cc:95:7f:a1:79:08:ba:eb:f9:3f:88:08:34:a8:a5:6d:93:bc:
45:0d:40:e1:a6:f6:81:82:bf:d0:bd:1c:50:06:e6:1a:66:f2:
ec:89:bd:16:20:0e:7b:c3:f9:3c:42:45:83:31:09:a7:42:f1:
e2:96:18:81:b9:a4:32:22:66:cd:53:5c:c1:29:08:12:04:dc:
68:d2:f4:c2:25:01:f5:1b:09:5c:c8:35:aa:cb:4f:25:a0:08:
a3:d2:18:24:5e:2f:ab:aa:3b:ff:df:3c:de:35:d6:28:26:ca:
cc:c5:73:77:9e:87:86:32:70:c3:57:59:72:bd:ee:17:47:eb:
b8:5f:eb:c0:97:70:11:82:e9:c2:c5:ef:4e:cd:a7:07:b9:92:
85:fd:84:61:b0:98:74:c7:90:fb:b3:34:56:15:b8:28:56:37:
e6:05:4a:ec:f2:75:4c:43:25:d4:bd:f1:72:fd:c4:e0:37:d0:
61:8b:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:35 2026 by rpki-client