Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: 4l/Sie4tVdt9P4bkerB3KegWOS5xK5olG50MAQpWmOk=
Subject key identifier: 84:50:0E:93:43:46:50:21:44:B2:0C:63:2F:1B:25:EA:D7:35:28:BB
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 01A00438FB7B862365B2A6D0BE03BA87E37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0F24
Signing time: Sat 15 Aug 2026 07:00:38 +0000
Manifest this update: Sat 15 Aug 2026 07:00:38 +0000
Manifest next update: Sun 16 Aug 2026 07:00:38 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: o34AK60HPw3BpF+y4WPrpqkrfQ1RUrked1wOt0fsnkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:38:fb:7b:86:23:65:b2:a6:d0:be:03:ba:87:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Aug 15 07:00:38 2026 GMT
Not After : Aug 16 07:00:38 2026 GMT
Subject: CN=84500e934346502144b20c632f1b25ead73528bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:43:f8:e0:64:3b:2c:28:35:08:3d:f3:2f:
52:64:6a:64:1c:19:c3:9b:51:d7:19:a5:dd:50:00:
60:c3:52:91:b4:8d:ec:ff:5e:d9:5e:92:9c:6a:27:
83:5c:6b:89:26:c1:e7:04:8b:d4:77:4a:c3:63:a5:
d0:a1:7b:ab:6f:e5:94:91:ee:62:f9:69:21:4f:6e:
49:ee:3f:79:d0:0f:f3:10:28:2e:e9:c0:82:92:b5:
d2:6d:a9:7e:61:72:4d:3a:a3:ce:e6:4b:b6:ec:70:
0e:ff:13:48:f5:b0:89:6b:9c:04:09:91:94:10:4f:
60:82:67:91:6c:33:cc:fc:db:59:2a:8d:f8:00:0a:
63:f3:f9:16:c6:ba:4d:ce:ea:fa:99:8b:b3:21:18:
cf:3d:d3:e4:74:f6:72:74:1e:3e:0d:81:f6:57:a0:
f4:94:26:e4:2f:1c:fe:97:3b:b2:f0:66:03:f0:00:
a1:57:65:0d:b9:c1:f9:27:bc:91:fd:be:6c:3c:6b:
42:0f:7c:93:50:ac:c3:3e:81:38:42:f7:4a:ac:69:
d8:89:77:04:fc:d1:77:50:43:b0:91:a5:4f:41:08:
36:c9:9f:1a:f5:12:5f:17:a7:6c:6c:26:c2:72:ee:
db:01:35:84:93:60:c9:84:15:bb:17:36:5d:52:d9:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:0E:93:43:46:50:21:44:B2:0C:63:2F:1B:25:EA:D7:35:28:BB
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:45:3c:d6:af:97:31:99:c7:eb:70:c7:e4:e8:d7:ed:42:f1:
e2:64:37:24:e9:a0:9d:05:9a:b4:92:02:f6:5e:16:ca:66:72:
ab:5c:65:a5:a4:b1:2d:67:80:5f:eb:25:48:8f:90:be:c0:03:
73:86:c2:6c:5b:65:23:5e:43:fc:d4:32:d8:6f:f1:22:af:d6:
33:f1:fc:1a:88:c2:df:23:41:29:9b:8f:5a:6c:9e:71:cf:ca:
94:e7:73:79:f1:29:33:ff:9a:f2:51:c9:a5:05:6c:ae:74:b4:
bd:f6:3e:3f:e2:ce:0b:fb:c0:10:24:43:2a:16:e1:18:5f:e9:
cc:df:71:8b:01:d3:2d:d1:c4:7a:22:e1:f7:87:b8:ca:f2:a1:
e0:e0:c6:6b:ea:7b:5f:15:1a:0a:20:a0:ee:d7:9f:e4:4e:5f:
c4:0e:30:e8:76:e6:ee:6a:88:06:25:92:c0:5e:91:dc:58:3e:
cb:8a:38:63:4b:b9:eb:20:e2:e8:75:e4:f6:07:a8:69:ac:e3:
dd:ec:e8:bc:ea:20:51:42:a2:dd:ec:12:52:98:32:45:79:3e:
85:88:08:e3:39:18:0c:7e:91:ef:ee:b5:9a:41:5a:5d:ea:12:
8a:0e:80:99:df:17:34:bb:2a:51:c7:99:73:8f:7e:b3:41:8d:
c7:82:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:30:22 2026 by rpki-client