Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: ert0zL0FzqjN8jHGEIJnRPeHd9OJHhjSyIA8QBWoiFU=
Subject key identifier: D5:AE:D8:CC:B7:FD:63:2F:D6:BB:85:AE:BC:DF:5F:83:6A:7F:0A:A3
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 019DDA2FA97F371CC0B76C8D68D0F8DA4152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 18E8
Signing time: Wed 29 Apr 2026 17:00:49 +0000
Manifest this update: Wed 29 Apr 2026 17:00:49 +0000
Manifest next update: Thu 30 Apr 2026 17:00:49 +0000
Files and hashes: 1: 3pHQTzxvnePiZsDxPy-BBwbaxHE.roa (hash: Y44S6ZmGxtTJuSR6q9viqsdpr1+gHx7RTzN1MdK3yOs=)
2: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: CR8GKY+yFDjHZozS9WhL66mLcASXPwAYP3zdkBsEqM8=)
3: i9JuOf_lil0vGpP_qnq87ScuDA8.roa (hash: 37O6D5o8eMGGFdDLmGcDaN3OTpRDH6Fu/HOaTp1mFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:2f:a9:7f:37:1c:c0:b7:6c:8d:68:d0:f8:da:41:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Apr 29 17:00:49 2026 GMT
Not After : Apr 30 17:00:49 2026 GMT
Subject: CN=d5aed8ccb7fd632fd6bb85aebcdf5f836a7f0aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:c3:dc:17:93:81:8a:5b:f8:10:6b:de:f6:
3b:a2:6c:8d:06:8a:5f:10:97:78:aa:8b:b3:d4:8b:
b5:f6:20:ac:93:fd:70:ce:5a:b1:53:e7:f1:52:98:
e0:c2:96:2b:97:e9:1b:8b:32:f6:74:b1:2b:5c:62:
37:fc:0f:b9:9d:04:b1:d5:1a:44:5b:89:34:df:19:
9b:d4:7e:d1:f7:91:e8:f9:77:9c:8e:26:42:8d:6d:
9d:05:0d:58:5c:6c:f4:0e:ce:66:50:36:0a:22:71:
94:88:8b:bc:a2:4b:db:96:e2:7e:6d:6d:fc:17:76:
a4:cd:42:2e:80:23:0c:a2:ac:b2:78:d4:2d:06:07:
43:29:dc:ea:46:f9:29:87:e4:d4:96:4e:8c:01:ce:
f0:22:6b:72:a9:0d:0b:83:2f:f4:48:65:ca:9b:8b:
ba:30:c9:c4:92:ba:8c:e8:e4:1e:c1:73:35:0e:e3:
b8:ef:36:a5:4e:3b:a4:62:41:58:99:2b:3c:12:28:
6b:90:2f:48:9f:78:c3:25:24:26:04:da:fa:3d:5c:
19:d4:9c:1e:aa:37:e8:9b:e8:9b:65:0a:7d:49:a7:
78:a4:a1:8e:07:34:21:9f:b5:8e:5e:1b:d1:4f:9e:
d6:d0:99:d0:85:ba:35:87:58:8e:c2:da:c3:ea:ca:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:D8:CC:B7:FD:63:2F:D6:BB:85:AE:BC:DF:5F:83:6A:7F:0A:A3
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:ca:8a:4c:95:01:92:bb:de:5f:a1:45:f9:58:ba:35:2c:
7c:85:d1:12:3a:4f:44:8a:64:72:cd:a1:0c:a1:70:9e:a7:02:
fb:02:19:13:ea:b7:61:ed:76:13:ed:09:c1:da:b6:9d:80:a8:
25:71:65:53:ba:89:47:7b:5b:e8:65:93:cd:ea:c8:22:e4:b5:
ac:cc:fa:6f:81:0c:38:f9:88:7a:6d:bb:b4:87:d6:a4:60:7d:
ef:85:7f:4e:79:09:29:8d:cf:21:ff:b1:d7:9a:9d:f8:30:d1:
46:90:17:8b:86:c6:e0:cb:7e:7b:dc:2f:8f:99:16:eb:fa:93:
75:2d:4b:31:04:fc:c3:20:9b:db:54:6c:04:19:a2:56:3e:dc:
fe:4a:f9:a1:2d:88:0b:35:01:be:84:3e:b1:93:f5:b8:f7:9d:
03:b2:36:80:bd:93:4d:9c:fb:e6:f4:f1:f7:2a:93:38:1a:6b:
23:4d:85:76:fa:9a:20:e4:3f:e0:ae:f1:b0:32:ac:40:e3:ff:
43:48:21:72:a6:29:74:f4:d2:65:1e:9b:fe:f0:84:8b:fe:ea:
56:43:f8:4e:a2:19:41:21:1c:ea:33:df:19:3e:8a:49:cb:1e:
ff:31:6d:8c:86:7b:ac:1e:d4:6f:ff:b4:81:32:b7:5e:3a:39:
66:ce:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:26:34 2026 by rpki-client