Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: JPJFJY5hL2DBFV7SMyEt2AKlK6kHA4atQ3EX5PL2ZGU=
Subject key identifier: 76:5F:7A:3F:AB:F4:19:E1:06:E0:34:84:96:91:5B:DF:30:2B:BD:3F
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 019F189E975CB53129B7D2551391D3431FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0EAA
Signing time: Tue 30 Jun 2026 13:01:14 +0000
Manifest this update: Tue 30 Jun 2026 13:01:14 +0000
Manifest next update: Wed 01 Jul 2026 13:01:14 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: 9vHenKOWsNGc1mFu45pH8MWgCf6bp5qV8/tGGj6wDys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:97:5c:b5:31:29:b7:d2:55:13:91:d3:43:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jun 30 13:01:14 2026 GMT
Not After : Jul 1 13:01:14 2026 GMT
Subject: CN=765f7a3fabf419e106e0348496915bdf302bbd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:f1:71:26:2e:f3:34:ec:3d:c1:f7:f6:0e:
79:d2:e5:f8:e3:71:41:c9:37:c7:01:37:84:07:f1:
f7:b1:bc:ef:a6:b6:6b:9f:22:8e:2f:1d:c4:a3:4d:
20:a3:af:1c:98:22:22:99:69:d2:31:e4:3d:5d:75:
3b:33:0a:ef:17:b1:24:15:d4:99:51:34:c0:c0:f0:
81:a5:f4:37:5e:5b:57:c4:c2:9b:27:6a:36:cf:f7:
40:b1:32:ce:c5:0b:c9:17:28:a8:22:73:31:86:77:
e2:87:75:54:07:c6:79:a5:85:ae:26:cd:d9:2a:60:
50:db:7f:11:73:3b:ee:90:0a:3d:52:25:ed:a0:91:
61:5c:f3:cd:1a:75:82:35:86:b7:73:7f:8a:7d:dc:
7e:d3:d8:2c:2c:b7:fe:ec:56:48:88:5d:6e:31:b8:
8b:89:80:d6:d4:0a:f1:bc:98:0a:cc:92:7a:04:e6:
e8:34:7c:77:54:58:45:4e:dd:0d:aa:2f:4b:6e:75:
85:db:d7:30:27:ee:ae:9c:cb:a2:17:7f:48:d9:33:
b6:fe:e8:17:61:79:47:4b:67:f2:0a:aa:c1:11:e7:
c9:c5:d9:d4:8a:fd:67:80:a6:13:a6:b9:3f:2d:7a:
9d:8e:a5:28:1e:4b:ec:f6:9d:20:45:1e:19:b6:fb:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5F:7A:3F:AB:F4:19:E1:06:E0:34:84:96:91:5B:DF:30:2B:BD:3F
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:b3:9c:59:21:7b:09:56:8d:9c:10:a3:10:ff:42:12:9f:
43:a6:a8:5e:ea:ff:bd:08:ef:ce:ef:e3:da:e7:d7:80:9d:61:
49:82:e5:1e:ce:34:17:9c:9a:ae:b7:f6:ad:ee:1e:84:92:a6:
bf:0f:b7:d8:75:cc:9b:e7:c4:c2:34:3f:13:8a:59:83:84:d1:
9a:04:90:11:3a:7a:7d:3b:f2:12:90:d7:68:42:91:0d:b0:64:
9c:a6:de:25:42:4a:ec:6d:06:89:eb:7f:eb:19:5b:68:7b:52:
47:de:3e:a8:4d:c8:02:da:68:c4:7c:de:67:ed:3f:e1:f1:0f:
35:78:47:07:57:88:01:50:b2:5d:1d:cc:24:6e:11:0f:19:4b:
16:d4:a6:3b:70:d7:1d:e3:d7:d4:cc:b7:58:28:f8:bc:e6:ad:
8b:81:ad:eb:b8:53:9e:7f:88:5d:ca:fd:be:53:80:48:2d:33:
da:11:14:b7:80:c0:ae:46:d1:a5:d9:4a:8e:f2:22:10:10:1d:
bc:20:1c:73:f1:a6:1b:73:44:bd:bb:54:51:de:df:f8:5c:a9:
67:cd:a3:15:d8:49:55:24:ca:d7:2a:28:c0:e2:8b:24:d0:07:
3f:92:fd:85:28:43:6b:d2:23:43:7b:88:ce:b2:68:6d:48:2a:
c2:5f:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:36 2026 by rpki-client