Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: gwip3TfHOYIGygeiobRn23QVYdmyXWf9WK+O41vxYeA=
Subject key identifier: 16:92:B6:A8:2B:D1:8F:79:07:09:08:4B:B3:75:EB:29:9F:46:CE:E1
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 01A14BE2135CE05BDFCE284ED93D8DA24D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 12ED
Signing time: Sat 17 Oct 2026 22:01:09 +0000
Manifest this update: Sat 17 Oct 2026 22:01:09 +0000
Manifest next update: Sun 18 Oct 2026 22:01:09 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: 3aX7sBksVb56U0T1Qz5MO//pPZ1Nc3/mAy3ywqC5E7o=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e2:13:5c:e0:5b:df:ce:28:4e:d9:3d:8d:a2:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Oct 17 22:01:09 2026 GMT
Not After : Oct 18 22:01:09 2026 GMT
Subject: CN=1692b6a82bd18f790709084bb375eb299f46cee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:ae:db:45:0f:8d:21:0f:62:ba:a0:fa:62:
f4:4a:4c:f8:62:fe:3d:f7:48:06:d5:6d:96:cd:db:
f0:e2:b5:92:6c:54:06:75:79:9d:b9:c8:a2:39:4e:
b0:d7:90:04:c4:ad:b7:32:0f:03:4c:ed:98:ab:dd:
bd:c0:2e:87:f2:46:b0:88:08:25:f7:b7:5e:49:00:
94:01:e7:9d:9f:5d:3c:0a:19:a4:ea:32:d4:0e:69:
8d:aa:3f:f4:c4:26:c2:2a:2a:e1:22:4d:17:1d:ff:
45:65:37:01:53:9b:c6:50:fa:6f:37:dc:0c:e4:a6:
90:e1:7f:55:ef:91:2d:26:71:4e:eb:25:dc:3c:bc:
cc:d2:d4:bf:94:f7:a1:ca:53:e1:6b:7e:ed:d2:9f:
f0:3b:19:c6:d0:53:01:8d:cb:05:31:f5:17:64:6a:
ce:6c:aa:92:83:fa:02:f7:02:be:5e:8a:23:7e:14:
5d:4b:bf:ce:2b:48:b1:b4:01:96:5f:6d:21:7a:20:
03:51:4b:0e:05:ad:21:aa:43:b1:91:d3:88:ce:3d:
9f:b8:6c:2d:05:23:34:c5:d8:85:49:ea:0f:29:50:
02:88:45:cf:d0:3e:a9:89:e6:8b:ab:69:f4:91:3e:
06:07:a9:d4:1a:a2:ac:7b:b0:47:14:0e:bd:c9:db:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:B6:A8:2B:D1:8F:79:07:09:08:4B:B3:75:EB:29:9F:46:CE:E1
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:69:d5:0d:fd:1c:d3:a8:96:62:2a:b5:94:eb:42:14:3d:0b:
d3:dd:a3:63:0e:ca:8b:66:84:da:ee:ea:ea:d7:57:88:19:8a:
da:22:de:85:e2:c7:d3:8d:39:63:6e:e1:cb:1d:12:e3:37:9b:
e5:28:59:de:ee:04:a2:02:13:c5:86:32:1f:00:ef:61:36:30:
7a:40:83:0a:77:fa:32:cd:6c:dc:78:04:fd:b7:22:12:4d:85:
d1:30:79:3e:99:9e:c4:fc:a1:f4:e0:1c:f1:98:4c:38:98:1a:
83:b5:39:25:4c:d2:8b:b5:f6:05:8e:90:27:05:11:3b:c1:56:
40:de:97:49:8a:a5:98:b3:98:9e:75:bb:c0:4f:da:62:58:aa:
90:9f:77:8e:db:f0:33:0c:a0:48:24:89:ce:06:6f:58:34:08:
f2:e6:c5:c1:e2:f9:cf:3e:5a:af:5a:10:63:d3:f9:e8:a8:c5:
84:48:17:86:2b:fc:e8:b5:8f:d1:12:8e:aa:25:fa:f9:06:c3:
cd:57:02:1f:d1:68:78:59:fa:a4:08:e9:d8:be:c6:f7:1c:1a:
2a:43:3e:19:bb:da:e5:57:a6:d8:48:4f:ce:e5:a1:f9:38:20:
47:d5:1d:11:12:b6:56:23:7b:45:3d:93:0d:d3:ba:da:e2:fc:
8f:77:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:45 2026 by rpki-client