Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: RvFSp62M/oI3Pn0HCM0AqRKM2WEUqZ9XFKh6PNbCNWc=
Subject key identifier: 81:58:F2:97:C3:D5:68:86:83:1C:CD:33:E2:AA:58:0C:9F:5A:0D:DC
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 019D371BE245F48FA8B1559A2C9486886CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 10D0
Signing time: Sun 29 Mar 2026 01:01:07 +0000
Manifest this update: Sun 29 Mar 2026 01:01:07 +0000
Manifest next update: Mon 30 Mar 2026 01:01:07 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: D27rMF0vvhI5ch2nj9ao/a91t06A+wLDKy6bFsSGfH4=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e2:45:f4:8f:a8:b1:55:9a:2c:94:86:88:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Mar 29 01:01:07 2026 GMT
Not After : Mar 30 01:01:07 2026 GMT
Subject: CN=8158f297c3d56886831ccd33e2aa580c9f5a0ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:a4:78:aa:ad:f2:c9:89:86:82:26:49:32:
04:c0:8c:45:9f:7d:79:e3:f9:f1:ff:76:19:3a:09:
3b:e8:5e:3f:0f:8f:d4:09:dc:5d:05:e8:c4:74:51:
9d:18:f6:2e:48:83:6d:04:c0:cb:58:4e:ef:1d:9d:
ca:a7:11:6e:c2:db:dc:d5:95:c5:9f:db:f8:5e:2a:
71:6d:59:ca:a3:96:b2:2d:6c:58:02:d4:eb:24:45:
8e:de:59:0e:35:22:36:64:89:05:58:0d:0b:46:89:
ca:af:a7:0f:28:07:9d:56:55:83:87:38:5e:8e:ac:
99:d7:eb:14:14:65:20:9f:b0:17:5e:38:23:09:b0:
f5:70:1d:9c:9d:a0:0a:d1:de:dd:86:fc:5c:ab:e3:
82:04:0e:d5:f1:29:45:a3:7e:46:bb:58:87:e9:6d:
da:9f:a7:89:2c:bf:b0:da:89:1e:af:b2:7a:d4:dd:
ec:2e:d3:6f:ce:f3:a6:60:fd:9d:09:07:1c:9a:a6:
e9:6f:39:62:6f:e9:88:26:da:2c:dc:ca:24:b3:5a:
60:cf:5a:70:f7:41:7c:87:f0:9d:17:60:f3:f4:2d:
55:ee:be:4a:03:39:45:d0:53:ca:e5:e1:d7:02:64:
3b:60:be:aa:c6:1e:7d:65:73:e5:9c:c1:c3:ca:db:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:F2:97:C3:D5:68:86:83:1C:CD:33:E2:AA:58:0C:9F:5A:0D:DC
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:69:20:e4:f6:0d:da:fd:13:df:01:6a:6b:90:2c:8f:0b:c4:
e1:cd:9b:fa:f4:bd:28:9a:18:a9:35:31:ed:da:39:f8:01:59:
2c:f8:9f:9b:95:9a:92:86:e1:2c:e4:c7:95:e9:7d:ae:72:1a:
5c:be:80:b7:36:7e:cc:4e:2e:cb:d4:25:5d:e4:0e:f8:58:09:
f9:a4:40:13:5a:be:42:21:e9:94:62:cb:63:e8:e7:be:0f:20:
bf:d2:16:da:ab:1f:94:fd:a7:ce:79:5b:e2:01:41:fb:e2:2d:
ab:f2:cf:cc:75:17:e0:4e:49:80:af:3a:f4:9f:01:ba:69:f3:
74:a8:54:bd:7f:cc:25:a8:67:24:01:8d:72:5a:ce:d4:df:eb:
3d:27:1c:18:b6:19:56:6f:eb:d7:55:bb:2d:aa:87:b6:cc:3e:
8a:06:61:16:1d:d8:e8:73:a3:00:17:fd:b1:d0:56:2a:14:90:
44:cb:3d:ea:c1:6c:68:15:c0:a6:60:23:b8:81:dd:c6:80:d9:
3d:78:ed:51:77:10:93:0a:a8:30:ca:32:7b:38:5c:85:19:c5:
3b:23:e7:aa:eb:90:6b:ae:ab:29:aa:fe:2c:bc:42:32:82:a3:
32:22:1b:99:db:95:a8:9f:44:a8:e8:d3:01:78:d4:57:e8:94:
66:65:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client