Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: L35g12r2NcPaOTGg3yWtE9QuS4eI6JVFMCGlmgzT6sA=
Subject key identifier: E6:75:CB:11:04:A9:89:20:B2:8F:F5:20:6F:01:F4:23:28:15:7F:C8
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 01A001A61650A5563148D2A41F1E83038C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 1242
Signing time: Fri 14 Aug 2026 19:00:56 +0000
Manifest this update: Fri 14 Aug 2026 19:00:56 +0000
Manifest next update: Sat 15 Aug 2026 19:00:56 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: CGRKZxbHCLpoot1pR5x/qOfT8sCgPTd7Fa6B+xRIvnE=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:16:50:a5:56:31:48:d2:a4:1f:1e:83:03:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Aug 14 19:00:56 2026 GMT
Not After : Aug 15 19:00:56 2026 GMT
Subject: CN=e675cb1104a98920b28ff5206f01f42328157fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:2b:69:42:74:0d:36:02:86:3d:27:ba:ca:
12:4c:97:eb:dc:05:38:2c:9a:a4:fc:a8:a0:19:81:
30:48:59:6b:77:48:b9:f0:32:e0:51:9c:a7:25:f9:
f0:73:11:83:c1:36:af:29:23:f2:73:3c:8f:0d:a6:
ca:cb:9e:ea:76:e4:9b:bc:e7:fa:36:c6:be:00:80:
9e:92:07:4e:96:89:35:d5:e2:4c:7c:f3:b1:fd:9c:
00:3c:6f:b3:19:f4:30:7a:e5:cc:d4:d8:4a:ab:1d:
a0:d3:0f:94:4a:76:71:9b:34:98:e5:69:fc:b7:6a:
59:92:47:09:07:20:09:2c:94:ea:6f:be:74:bc:c5:
fd:0e:ac:62:50:d3:ee:73:cc:e2:a0:04:d6:82:ff:
93:7a:e8:65:a2:0b:38:a8:61:2b:29:12:bd:40:da:
95:96:c4:c7:e0:6e:4f:eb:02:93:eb:2c:65:76:d1:
fe:69:54:dc:a6:cc:bb:37:be:f3:39:47:29:6d:5d:
ae:2c:92:a7:ea:bb:91:ca:b6:17:94:a9:bf:3d:7e:
12:93:4e:a4:c2:d5:82:a1:d8:ab:98:9c:33:81:63:
cb:58:c9:1f:13:1a:81:d6:0c:c7:62:33:cd:c7:c3:
3c:46:f5:31:66:aa:cb:c8:cc:15:00:4a:39:cd:91:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:CB:11:04:A9:89:20:B2:8F:F5:20:6F:01:F4:23:28:15:7F:C8
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:63:fe:66:ae:04:20:d0:9a:de:cd:f3:aa:84:aa:fd:d8:55:
f5:a3:25:ed:dd:58:0b:36:8e:46:bf:af:46:ff:5d:be:64:24:
6c:66:ab:b5:e6:05:e5:a1:f0:b9:fd:e8:d5:8b:18:42:bc:3f:
f7:60:d0:25:0d:72:c0:2a:92:fb:6b:3e:07:96:8e:b2:3c:2c:
85:87:6c:32:a7:55:8b:6b:72:2f:fa:42:80:5b:2d:1a:b9:50:
c6:17:db:a3:0b:40:dd:b5:c7:9d:dd:ff:39:96:36:71:13:d5:
53:8e:dd:1f:84:76:21:ac:4b:3d:7d:91:b6:90:f0:0e:3e:29:
13:3c:65:f3:cd:18:09:a4:14:fd:8b:71:d1:40:59:6a:1f:a9:
27:a0:a6:72:20:fe:9e:ab:a2:54:16:c9:cb:c0:49:82:fc:44:
56:95:5c:0a:bd:d2:f7:db:7d:b5:16:1f:1c:e4:5e:7f:94:3d:
46:75:5f:05:9b:99:84:d1:b7:70:fe:d6:be:bb:12:02:be:bb:
42:cc:c6:b6:0c:37:36:4a:bd:1f:f6:1e:e2:40:a2:33:67:d9:
c4:43:0b:d0:b5:db:b1:3a:67:2a:43:d9:a5:34:16:de:65:98:
18:fa:6d:5f:f9:17:17:30:c0:5b:c1:05:65:e8:e8:c3:c7:a5:
92:d0:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:07 2026 by rpki-client