Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: R7paZC99X1c8WUY4BzO87IsIybsjBiuAlT8eHb+vsK8=
Subject key identifier: D6:01:0C:A6:C5:CC:A4:68:0C:48:79:8C:89:3E:12:25:DB:5A:90:B7
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 019D39AF58639B6CFEF75D1D64BE6DE2482B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0DB2
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: 5HJAARQeS4fw10fgcdOT57xmkixIvWJsDSumvZYtSBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:58:63:9b:6c:fe:f7:5d:1d:64:be:6d:e2:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=d6010ca6c5cca4680c48798c893e1225db5a90b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:5d:87:6b:ad:00:5f:e0:69:18:28:94:f8:
91:a3:ab:da:60:e6:97:d2:57:a3:64:c9:f0:69:56:
ef:8e:c6:df:98:b9:fb:2a:9f:1a:8e:87:6a:f9:83:
e0:1c:e2:db:50:a0:6e:50:ff:a0:95:42:8b:61:79:
f9:bd:f5:5e:21:ef:c7:0d:3e:c3:f8:25:92:45:f7:
18:7c:25:df:a0:06:25:dd:ce:b1:23:a7:4f:4a:82:
e1:33:12:7d:c2:20:06:e3:eb:3d:e7:82:50:af:da:
20:cc:1b:d7:07:21:60:0d:1e:d6:b0:45:4c:35:de:
81:bf:82:50:b6:2c:87:0d:ac:64:8e:6c:2e:fc:37:
3a:90:9d:26:0e:05:88:45:32:9a:1a:e4:ea:ac:28:
04:eb:e5:5a:19:f8:91:66:c9:ba:93:e5:5d:95:7d:
b1:a9:13:f8:f8:74:1f:0d:d5:b3:71:f2:57:4d:e9:
a3:13:c1:a9:7b:9d:9e:fc:27:34:bd:65:df:06:bb:
56:be:6f:c9:ae:8f:c9:e2:6b:43:46:d4:ba:a6:6c:
30:a0:76:3d:9f:25:a0:54:17:11:41:35:a4:cc:6b:
40:14:79:76:18:f0:f6:9d:19:40:81:9c:5d:28:48:
23:40:07:64:0f:03:42:84:bc:47:c8:64:37:b6:bd:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:01:0C:A6:C5:CC:A4:68:0C:48:79:8C:89:3E:12:25:DB:5A:90:B7
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:81:17:fd:ad:75:75:df:1a:8f:04:3c:5d:d2:7c:39:76:
90:33:59:b0:f6:da:e1:4c:22:a0:91:b2:0a:d4:11:d6:aa:62:
25:6e:85:2d:3e:1c:6e:05:aa:01:38:e2:5a:b7:5c:9d:9f:3c:
57:b0:c5:d9:81:e3:3f:39:1f:cf:6d:17:88:84:fe:56:71:10:
c2:8b:f4:e6:ee:05:85:fd:62:73:1a:e6:9a:dc:b1:17:7c:92:
f8:90:6c:ec:02:4f:f1:85:7a:5f:f0:3e:3b:61:64:b9:23:db:
cd:36:02:ff:ce:65:7f:78:80:97:15:c7:c3:f4:f6:27:21:db:
a9:42:7d:03:c2:4b:9f:34:f6:f7:ed:ff:7a:37:3d:0c:2f:8b:
06:11:cb:3a:07:0c:ef:7b:25:62:f2:20:6d:8b:6c:68:49:43:
96:d4:05:0b:d1:e0:1b:ee:5a:c1:a8:ef:f5:5d:1a:51:87:d1:
72:f4:6d:30:e7:95:04:b4:62:de:04:63:5c:f2:da:60:f4:01:
a2:7d:55:e8:5a:e5:72:40:87:69:12:c9:30:8e:22:4a:2d:6d:
4f:ae:e6:87:f1:d1:0a:21:02:ee:73:84:dd:2c:bc:05:87:b6:
ea:c7:f9:3a:48:bc:1e:4b:30:2c:b7:c8:53:dc:83:b9:d7:fe:
8a:64:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:04 2026 by rpki-client