Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: b8o/stBkF/eawGlGfVwrK4A21Xm6SsTB1JiLLPtOLJA=
Subject key identifier: E9:04:23:2B:78:34:EC:76:77:5B:96:13:26:82:9E:58:F7:6E:DC:95
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 019E303BB0A98284B515E38A13C67366469A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 1151
Signing time: Sat 16 May 2026 10:01:18 +0000
Manifest this update: Sat 16 May 2026 10:01:18 +0000
Manifest next update: Sun 17 May 2026 10:01:18 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: K+mQUWtI4T0+f50ASfIQSc+xSMgVvs0dFjcj9i4f8+0=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:b0:a9:82:84:b5:15:e3:8a:13:c6:73:66:46:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: May 16 10:01:18 2026 GMT
Not After : May 17 10:01:18 2026 GMT
Subject: CN=e904232b7834ec76775b961326829e58f76edc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:ae:40:3d:b6:c7:02:de:bf:78:9c:f4:86:
df:8e:23:85:5a:32:fc:b0:13:0d:36:cb:5d:ed:f8:
43:88:bd:0e:44:8c:e8:25:61:e8:59:fe:dc:66:53:
6f:d3:64:e2:1c:91:bf:6f:9d:5e:35:d3:c2:33:81:
3c:2b:9a:9f:c0:cf:92:5d:69:cc:ef:9a:6b:4c:47:
28:f2:07:e9:1e:65:48:c2:ee:e9:39:87:a5:18:d1:
18:ae:60:e7:26:f9:bb:cf:33:96:8f:df:49:36:30:
12:09:02:da:e5:30:20:33:f1:10:02:cb:11:b3:68:
f2:61:d4:2a:15:bb:c7:dc:51:c8:c8:24:02:75:c8:
80:60:92:83:4b:5b:dd:d8:e7:29:f7:53:fd:8b:7f:
fc:ae:6b:04:1f:6d:06:14:90:9a:80:c6:97:c2:6f:
fd:d1:95:8b:20:f8:bd:46:f4:3b:25:1e:e0:25:90:
6b:18:ec:29:93:81:03:3b:0f:59:c6:03:57:9c:d7:
1d:c0:78:7b:bd:7a:f5:c5:89:1f:7c:21:79:e2:84:
e1:c4:ca:48:0e:c2:b8:d5:b5:c8:a8:b5:8a:10:ca:
75:63:bf:b7:8a:97:bc:2e:e8:d7:d7:3e:25:71:f7:
41:54:86:b1:de:fa:3a:b0:f5:b5:80:6e:1e:df:a9:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:23:2B:78:34:EC:76:77:5B:96:13:26:82:9E:58:F7:6E:DC:95
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:e3:7a:0d:33:d5:7f:c3:17:27:6a:2d:48:38:98:98:27:
89:cc:b8:4c:d1:06:ba:9c:3e:a7:e1:1d:d3:b0:81:e2:53:77:
80:91:1d:bd:f8:2f:1c:0a:5f:fd:8a:6e:ee:d5:e7:56:b7:b1:
bb:bc:43:38:ba:a0:0f:93:1f:f3:31:52:d9:7c:bb:f3:d2:6a:
93:a0:1f:96:af:b2:03:2c:b2:ec:9f:b1:78:95:65:09:b8:df:
3a:c3:dc:ee:11:1b:ca:8f:35:49:3c:94:a9:d1:37:55:40:db:
72:4d:07:cb:55:ff:2f:f9:a2:c9:04:51:3f:5f:78:0f:44:2b:
db:5d:2b:4e:3b:48:3b:51:b2:ed:30:59:4e:ca:82:26:42:ab:
d1:02:de:14:ae:ef:9b:bc:a0:4c:94:c4:09:56:87:90:52:ef:
7e:84:4b:c8:f2:69:30:bf:5e:4b:c5:2a:52:2a:9f:ec:6e:cb:
ac:11:bc:3b:19:3e:f1:d8:f7:4f:ca:90:d8:39:9b:cd:47:49:
32:87:d6:e1:5d:ca:ac:82:e1:e7:51:38:e6:7a:5f:8a:08:43:
3c:dd:cd:5c:4a:36:a5:76:d4:1f:f5:f2:ac:37:63:5b:a0:de:
d2:5d:17:87:e0:48:30:46:d5:0d:eb:32:33:d3:24:2c:e7:8f:
a4:3c:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:44 2026 by rpki-client