Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: ndA23K1l6wm6LFTSdNtuK0qGPRU3CwVAhxeTbs8fHXE=
Subject key identifier: 6C:E8:71:90:71:14:55:A4:A1:EC:72:29:A7:66:B2:F5:ED:5F:EC:3A
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 01A154410C144FEAB207226D7B22612C1C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0FD2
Signing time: Mon 19 Oct 2026 13:01:51 +0000
Manifest this update: Mon 19 Oct 2026 13:01:51 +0000
Manifest next update: Tue 20 Oct 2026 13:01:51 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: pqj9VJQFgv9Uu5lQ22keqktdmkkcQNCd8UPX9dilnJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:41:0c:14:4f:ea:b2:07:22:6d:7b:22:61:2c:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Oct 19 13:01:51 2026 GMT
Not After : Oct 20 13:01:51 2026 GMT
Subject: CN=6ce87190711455a4a1ec7229a766b2f5ed5fec3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:40:dc:ff:bb:e4:76:df:20:c1:14:c2:18:
9b:45:98:f9:b4:6c:dd:f8:0f:36:c5:b2:e4:27:a5:
46:6a:f4:0d:e7:00:12:55:db:2c:1d:04:8b:35:cb:
12:1e:d2:4d:2d:b9:7f:7b:49:e5:b3:06:57:44:c5:
9e:99:f6:af:ba:37:c6:38:84:a0:d6:0a:4d:a3:57:
6e:9e:8b:fb:50:2d:e1:d0:2f:30:1c:fa:6f:c4:1e:
51:dc:db:11:9c:5b:da:81:a1:65:4a:cf:9c:a7:10:
75:be:96:37:48:5a:cc:30:e9:21:69:83:1f:40:bd:
c7:b8:27:a4:d0:01:0c:91:0a:cf:d1:9c:b7:cd:82:
7c:46:01:6c:28:d6:08:3f:97:18:20:ee:df:1d:5b:
01:72:4a:82:09:c6:0b:75:83:24:72:fe:67:67:89:
2b:b5:ee:03:1c:b6:bb:63:ad:92:6a:b4:4a:71:a8:
69:cb:bb:78:ef:2c:40:f7:d4:51:02:41:a2:12:3c:
66:db:df:5a:c0:58:8d:bf:67:6a:66:2c:12:93:ba:
ef:0b:fc:2d:61:d1:76:df:9a:86:e4:47:ba:4e:53:
d5:50:38:4a:b5:a7:25:c5:3a:19:39:bd:30:62:6e:
d2:f8:20:72:8e:74:ba:01:90:a9:87:be:58:e1:e9:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:71:90:71:14:55:A4:A1:EC:72:29:A7:66:B2:F5:ED:5F:EC:3A
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2e:12:3c:a4:c1:61:53:5b:81:22:16:18:a0:91:72:dc:01:
c3:d4:5f:01:fd:09:6e:61:24:5b:c7:8d:b8:f1:36:47:fa:6c:
f7:07:a3:6c:ee:5b:38:92:39:f1:93:8a:7f:ae:9a:8a:fe:56:
03:8d:09:81:5d:03:0c:3c:b0:7f:83:de:17:36:33:d9:75:e1:
e3:75:f6:4e:ec:f0:2d:c0:d7:1a:4c:fd:1b:0c:0c:97:3d:23:
b9:59:9a:90:a8:93:15:7e:1f:f4:63:3f:01:22:97:be:67:97:
6a:6d:06:06:29:31:14:1a:52:4c:52:55:f6:f3:60:0d:19:15:
5a:d2:81:c8:42:f9:28:cb:f9:08:27:41:12:55:55:3d:aa:b0:
ec:59:08:12:63:7a:08:e0:82:8b:24:2e:f8:1a:2d:8f:4b:79:
3b:31:c2:f0:9a:61:50:3c:90:3a:d0:0f:e5:39:9f:1c:1b:e1:
19:16:1e:4a:7c:f5:5d:44:05:63:2b:53:87:aa:61:26:29:10:
cc:cc:40:6b:19:a6:b7:79:55:99:a7:be:7a:e6:0e:0c:a4:ff:
ef:62:ff:dc:64:4c:3f:a3:34:b4:4f:00:18:a7:52:a7:64:98:
6b:b6:59:d9:98:f3:cd:bd:d4:b4:69:13:38:76:4a:1f:db:69:
5d:3e:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:53 2026 by rpki-client