Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier: u+RUaBJyxMdDx+DOV8ibm7aJ07TYnJuyu9KFVPUOB7I=
Subject key identifier: 6E:50:A9:EB:A3:43:D6:D9:33:86:3D:6B:EB:F1:C8:AD:F6:FF:73:DF
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial: 019D39AEA1FE6F2BFB85B5CAAC6D5BFA6B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number: 1515
Signing time: Sun 29 Mar 2026 13:00:39 +0000
Manifest this update: Sun 29 Mar 2026 13:00:39 +0000
Manifest next update: Mon 30 Mar 2026 13:00:39 +0000
Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: HaenGmoPgRGn1f9UjXQBzFcgMVSWwFoZIXjgw9SdIHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a1:fe:6f:2b:fb:85:b5:ca:ac:6d:5b:fa:6b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Validity
Not Before: Mar 29 13:00:39 2026 GMT
Not After : Mar 30 13:00:39 2026 GMT
Subject: CN=6e50a9eba343d6d933863d6bebf1c8adf6ff73df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:a4:aa:8c:4f:08:da:cc:d1:8b:7f:e9:b2:
e0:01:48:f6:7e:88:97:00:ff:33:1d:4d:ef:5f:f7:
58:f4:ef:d4:1c:52:cf:e6:c7:55:bc:97:72:74:43:
0d:5e:9a:86:f1:ae:bd:6a:dd:a4:0a:34:70:16:3f:
43:52:49:18:0a:ca:3c:3c:9a:d2:95:8c:48:e1:a2:
8d:9d:c6:8a:fb:4c:ad:8d:3f:c1:ee:8f:f9:4b:2d:
ba:29:b1:05:26:e1:5c:4b:00:c4:99:c5:58:7e:e6:
fa:64:b8:20:84:2b:4f:f8:fb:d2:d3:81:35:82:80:
34:0b:95:85:2c:8f:c3:87:89:52:fb:91:88:32:ac:
a4:67:74:98:7d:3c:30:3b:22:d3:23:cb:46:82:3e:
1f:4c:09:ea:67:1a:ef:c3:23:9b:7d:6b:e1:e7:95:
60:dd:2c:9f:c2:7f:84:08:73:c2:f1:81:ad:89:e4:
b7:6e:fc:41:4a:f6:40:75:28:5b:35:81:92:58:8b:
9c:13:20:df:19:23:d5:17:75:16:5e:3a:f4:af:ad:
24:9d:95:8a:18:27:e2:32:35:cc:99:d6:e4:cb:71:
44:ed:ee:2c:d8:1b:45:89:5a:85:3c:c4:60:57:a1:
08:22:4f:49:e7:ac:dc:93:5f:47:4f:62:02:d3:b2:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:A9:EB:A3:43:D6:D9:33:86:3D:6B:EB:F1:C8:AD:F6:FF:73:DF
X509v3 Authority Key Identifier:
keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a8:0d:bc:c2:57:ca:98:dd:8b:e3:0a:90:fe:0d:7b:33:71:
21:05:df:dc:97:eb:8f:08:0a:57:f6:58:7d:1b:d9:5f:4e:b4:
a9:8b:f3:78:99:c2:b8:b9:40:34:04:fc:56:3c:d0:33:8e:43:
77:54:0c:60:c9:d8:67:b5:21:ad:63:15:0d:54:fc:e9:78:29:
49:80:2f:a7:82:89:e3:2e:73:15:de:47:d5:ca:2d:0f:ca:68:
bb:84:00:10:64:fa:a8:e9:9c:87:2f:26:7a:ec:59:9b:8e:ff:
a3:d6:1c:c4:a3:7c:ab:be:09:4d:a8:51:dc:56:d5:6f:ab:eb:
04:44:d2:f4:ba:57:02:97:66:1d:ad:d4:ea:57:c5:c2:3a:6a:
90:6a:f5:10:4d:04:12:01:aa:71:c3:87:5e:33:21:a2:e0:7f:
4c:2c:9b:8b:b1:eb:fc:8f:1f:b7:0c:58:fb:71:ba:4c:83:6c:
4a:35:c4:d1:c2:e3:6f:42:99:02:0e:1a:46:dc:d2:6d:b5:5f:
4d:d9:a1:12:14:27:c2:26:84:6e:c7:b9:b6:1f:2d:82:21:12:
d3:bd:97:cf:53:83:db:4b:7b:5a:3c:75:94:90:75:7d:c3:b5:
ae:72:2c:f7:a0:c2:c8:39:20:ed:3f:42:7b:71:ec:ab:d0:54:
17:f2:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:06 2026 by rpki-client