Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
File: CWUHv9kVIo3x0Hqn0GfURCzttFs.mft (raw, json)
Hash identifier: Or6p6MMkxbQdlyXoGbbOR9F2x+tN+n/TYJ/7E1epObk=
Subject key identifier: 67:F0:0A:B9:B7:95:F2:8D:0B:40:31:EB:CF:D6:53:0C:7E:78:01:B5
Authority key identifier: 09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
Certificate issuer: /CN=096507bfd915228df1d07aa7d067d4442cedb45b
Certificate serial: 01A17F61DF873A5BA6DB97266EBCB69C5916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
Manifest number: 0141
Signing time: Tue 27 Oct 2026 22:01:22 +0000
Manifest this update: Tue 27 Oct 2026 22:01:22 +0000
Manifest next update: Wed 28 Oct 2026 22:01:22 +0000
Files and hashes: 1: CWUHv9kVIo3x0Hqn0GfURCzttFs.crl (hash: z6oCLNrtY+sgVBP79IaoLnNn1frYlXtztb4/b9e+Y/A=)
2: ztqWMk9aRM6Ky0IAoscpnekSXpA.roa (hash: bnmXKmu5kt8lvX6cZMu/9l/QC9fmTJ80CL2ADfdOE4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:df:87:3a:5b:a6:db:97:26:6e:bc:b6:9c:59:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096507bfd915228df1d07aa7d067d4442cedb45b
Validity
Not Before: Oct 27 22:01:22 2026 GMT
Not After : Oct 28 22:01:22 2026 GMT
Subject: CN=67f00ab9b795f28d0b4031ebcfd6530c7e7801b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:38:87:d7:a7:a4:d7:8a:5e:ca:89:c3:38:c7:
b4:98:6c:03:d3:90:d0:3c:5d:c5:48:f3:4f:1c:99:
0b:1e:48:f9:1c:f0:87:ea:eb:31:2b:08:ed:de:0c:
c0:97:c6:db:15:c1:19:3a:fe:a4:fe:83:1a:e2:26:
09:88:c0:15:7e:93:71:b1:ff:e8:a3:1a:d7:96:4f:
87:d9:5d:33:07:ff:7e:5a:5a:9c:f1:50:ae:9b:27:
54:3f:b4:0a:15:58:eb:69:f1:1f:e5:68:11:52:82:
e0:1f:c9:f0:40:d0:d2:2a:79:c0:96:07:4d:74:ab:
39:5f:50:ba:ca:12:d7:e0:5f:0f:fc:8e:3f:82:55:
06:9e:81:67:26:c5:d1:38:7b:2f:08:46:6d:c5:e6:
84:6e:f1:0c:91:06:aa:77:ca:19:c6:f6:2c:e6:e5:
e6:5c:ce:c5:95:03:b1:fa:ef:e4:ec:4e:b2:03:ae:
80:04:bf:b9:31:f2:87:57:7a:e1:29:af:9a:44:db:
dc:c7:ca:cb:e8:e1:55:47:11:62:20:d0:f0:f8:5d:
86:21:4e:5a:ed:4e:a2:43:07:4e:99:11:64:76:35:
70:57:d9:f8:9d:da:c3:fc:1a:72:20:18:d9:2e:eb:
37:a7:37:78:af:b9:44:83:d0:6f:4c:de:29:f1:6e:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F0:0A:B9:B7:95:F2:8D:0B:40:31:EB:CF:D6:53:0C:7E:78:01:B5
X509v3 Authority Key Identifier:
keyid:09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f2:44:b1:62:14:b2:16:a9:14:d7:f0:73:44:72:7e:64:25:
c1:8a:5a:71:3c:ca:18:9f:97:4f:0f:a0:b3:0d:0d:d8:a5:44:
a2:80:a7:a3:f8:cb:83:a2:5a:36:ea:d3:3d:1f:56:c2:17:a3:
97:6e:f6:81:1e:52:3c:4e:3d:c7:b6:5d:a5:54:a3:26:12:a4:
6d:14:d8:1a:1c:8f:86:74:d6:89:0f:04:02:e0:53:05:07:7a:
7c:1a:81:64:64:cc:a3:df:59:0a:49:22:8c:3e:81:5c:3c:51:
e5:9f:c2:30:3b:ec:68:94:84:07:1e:0d:00:73:bc:5a:74:66:
6b:d8:d0:95:9a:f8:d3:59:b6:0b:51:23:2d:25:be:6b:9d:73:
a6:b1:1f:2f:9a:70:ab:e0:ee:9b:78:8a:4f:3e:ce:7d:b3:b9:
e6:3a:a9:fd:10:c0:d9:9e:fd:1a:fa:54:a6:4a:6f:16:a9:32:
13:dd:65:a4:23:db:d3:93:02:e0:78:73:3c:a7:26:1b:e2:fb:
35:80:49:c6:3a:02:f4:91:e3:96:28:a2:ff:86:5d:51:e2:fc:
ea:14:01:da:1c:9d:a3:32:0a:73:78:8a:29:9e:24:0b:1d:63:
08:9d:fe:d2:cf:0f:8b:33:d6:96:49:ba:d2:1a:82:14:57:62:
30:43:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:00:00 2026 by rpki-client