Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
File: CWUHv9kVIo3x0Hqn0GfURCzttFs.mft (raw, json)
Hash identifier: AIklQiLxl9zgf9975kqwSazcSWsnH2FN19K1G2+UAQU=
Subject key identifier: E7:55:BB:2D:A4:C2:A5:8A:95:73:BA:B8:2C:BD:CF:2E:97:02:95:B3
Authority key identifier: 09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
Certificate issuer: /CN=096507bfd915228df1d07aa7d067d4442cedb45b
Certificate serial: 01A08C0D54E67B574A59D283D34C2DC1EDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
Manifest number: C3
Signing time: Thu 10 Sep 2026 16:01:18 +0000
Manifest this update: Thu 10 Sep 2026 16:01:18 +0000
Manifest next update: Fri 11 Sep 2026 16:01:18 +0000
Files and hashes: 1: CWUHv9kVIo3x0Hqn0GfURCzttFs.crl (hash: dBTFXGMTFP3gtTf6KUbt3AMqhUbuU1ejowhCNi/MTjE=)
2: ztqWMk9aRM6Ky0IAoscpnekSXpA.roa (hash: bnmXKmu5kt8lvX6cZMu/9l/QC9fmTJ80CL2ADfdOE4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:54:e6:7b:57:4a:59:d2:83:d3:4c:2d:c1:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096507bfd915228df1d07aa7d067d4442cedb45b
Validity
Not Before: Sep 10 16:01:18 2026 GMT
Not After : Sep 11 16:01:18 2026 GMT
Subject: CN=e755bb2da4c2a58a9573bab82cbdcf2e970295b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:2a:2f:dd:1a:04:9c:08:d1:9a:cd:35:32:
40:69:cf:44:c6:a2:27:fd:42:18:b1:ec:e3:a6:45:
b2:b0:5f:69:3c:7d:70:f6:5f:7b:3a:0a:92:58:55:
db:62:67:f6:bc:d7:b5:52:1f:62:c9:90:3d:b7:71:
29:17:2f:c8:62:72:88:36:29:b7:e0:37:3b:e4:68:
8e:12:e5:71:b0:ae:14:be:27:a6:58:51:83:40:50:
d1:dd:40:4e:72:79:2f:a8:c3:7f:d6:50:f6:80:8a:
a3:d9:03:fe:77:af:4c:47:39:23:58:d7:d7:bf:62:
af:8c:6f:6e:46:ca:a2:32:4b:d5:3a:ae:b4:de:6b:
c1:0b:2b:2d:b5:e9:af:9c:c3:fe:46:26:dc:b0:1b:
c4:b9:27:79:e4:ea:f5:3c:02:10:3c:06:1c:62:e2:
21:9d:db:df:9e:65:eb:33:5b:5e:69:94:34:34:59:
71:47:61:a8:94:80:58:c7:d0:84:8f:e5:84:7b:12:
1b:5f:08:ef:c8:ee:f0:3a:a3:ac:17:ed:8c:2c:0a:
36:e4:75:c5:b3:3e:c3:9b:11:08:35:e0:ca:a1:5b:
6d:0f:28:df:05:d4:1f:13:5c:8c:ef:78:92:da:f6:
66:00:3a:76:0c:9b:4f:41:e6:34:9f:9e:a0:ee:c3:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:BB:2D:A4:C2:A5:8A:95:73:BA:B8:2C:BD:CF:2E:97:02:95:B3
X509v3 Authority Key Identifier:
keyid:09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f7:75:a3:3c:35:7c:ab:f4:63:64:18:63:dd:72:3f:20:e1:
fc:82:b8:99:6b:a0:ce:ac:16:ab:1d:51:2e:40:0d:a4:53:0e:
4f:cd:71:1d:c5:07:df:c4:a5:2c:5c:17:5c:da:f9:c2:45:7b:
0a:73:e7:70:3d:8c:49:99:ba:f3:e7:52:7f:cf:c9:f1:13:73:
09:c0:91:bc:d4:49:5f:12:00:7d:37:7e:5e:20:88:da:ca:b0:
4d:3c:17:69:fc:a5:e6:02:c4:5d:8b:4f:e8:69:b9:ac:d8:88:
e9:aa:e4:36:19:c2:ac:99:75:3a:be:8b:39:e5:50:d7:a1:a4:
b8:6c:67:6e:f4:66:1f:76:fc:3d:42:7c:f6:a1:26:c0:f4:31:
b2:f1:72:83:82:1b:cd:ca:82:49:f2:b3:87:07:e1:ad:0b:88:
be:af:5a:4d:71:fe:2b:67:3d:6b:2b:9d:24:6c:08:3d:82:4f:
d1:73:f4:de:bc:3e:84:5a:1e:a7:c0:51:a7:68:29:44:df:e7:
99:0f:d9:7a:a5:64:82:9e:64:af:eb:21:d5:5b:62:1a:7c:68:
c9:15:2c:e6:34:33:52:26:05:73:26:49:56:5e:83:bf:25:ba:
bf:09:99:6d:5c:d2:49:65:58:42:4c:82:df:12:05:f9:31:59:
a2:24:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:30 2026 by rpki-client