Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: TMWvC52WOvOkxT1LY4mMYJXGBleRNgGR+P4Ka+G7RIQ=
Subject key identifier: 57:A6:5F:48:9A:7B:BB:E3:8A:83:20:F7:54:C2:0A:9C:9C:7C:21:41
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 019D389C05264B700A28CF52B8AF3DBF835F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: bYA8yTNc9ok0DS37wNlmOchJGRFLaNO7pHS/41zqfWQ=)
2: F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa (hash: o3HWTI0PQBnlxwZ0HTjSHPzc9P+I/nJ/EvAewhiwD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:05:26:4b:70:0a:28:cf:52:b8:af:3d:bf:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=57a65f489a7bbbe38a8320f754c20a9c9c7c2141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:c9:55:18:b2:8d:74:44:67:3d:1a:5f:08:
56:52:44:bd:28:fc:eb:49:cc:c6:7c:0b:bf:b5:64:
0c:83:2b:dc:77:00:5c:ea:2f:ad:22:46:26:92:3f:
fc:cd:0f:8e:1a:42:3a:a8:db:33:67:2a:8e:9e:2b:
0d:af:9d:49:42:a9:59:a7:9d:68:84:f3:c5:3b:30:
27:67:45:25:4c:f4:67:76:f2:03:f2:66:90:59:fd:
ac:d1:b9:03:ab:ec:5d:eb:a9:d8:2b:38:71:cc:ef:
9c:70:3e:b1:33:f5:54:b7:3b:25:03:b1:b0:c5:24:
5e:b0:27:87:07:2f:9b:19:3e:c8:c2:f0:f9:07:9f:
1e:64:40:f2:a4:e9:85:6c:14:fb:ac:03:9d:b1:da:
c6:eb:b1:88:07:7c:31:53:4c:dd:44:3b:42:79:40:
8b:0a:d6:04:86:10:50:19:f5:ad:54:95:b7:d4:74:
f3:82:a4:b2:ea:f9:fd:82:6d:13:b5:d0:76:52:c4:
54:de:4d:75:5a:0f:49:7a:c6:e2:72:f3:e7:67:02:
fa:3c:1d:be:17:5a:63:c6:b0:36:16:87:39:74:4e:
31:3a:55:5e:8f:fd:2b:ff:ce:b0:da:8c:6b:4a:f6:
46:57:98:9d:5e:14:1e:32:c9:be:8f:ff:0e:db:3a:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:5F:48:9A:7B:BB:E3:8A:83:20:F7:54:C2:0A:9C:9C:7C:21:41
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:02:9c:46:42:dc:c6:43:90:aa:b0:98:5a:65:e1:ce:0b:3d:
8e:4f:d0:8f:af:d5:1f:fb:aa:a8:bf:9f:e5:e3:fb:aa:72:31:
eb:c8:cf:07:58:c3:f0:5c:bf:0d:f3:02:f3:de:b7:e8:76:2c:
c0:fa:4f:d8:da:94:9f:48:27:c2:ca:64:05:de:06:d7:9b:7a:
ad:73:b2:0b:0b:29:ec:de:4e:9b:dc:79:80:b3:f6:e2:ec:5d:
9b:e0:99:e2:69:e0:93:a9:00:94:9c:5c:dc:6d:47:33:8a:2e:
0d:77:60:be:44:de:10:42:bf:1d:29:95:be:56:9f:9c:d5:9c:
6e:61:8a:43:87:aa:1b:97:fd:66:83:e5:a9:dc:1d:24:37:13:
35:7c:46:e2:9f:74:8b:c4:0c:4a:1a:7d:fd:be:f6:0a:8c:4c:
2a:24:d0:96:f5:32:50:a4:1f:1d:64:dc:fb:47:38:ce:ed:be:
c1:b2:b8:34:0a:75:8e:4e:05:c7:82:a6:8c:18:9b:e6:f8:52:
e8:8b:f3:84:70:29:4a:60:8a:fc:1b:a8:ed:00:5a:8b:fe:89:
a7:0b:1a:6a:ce:c8:07:22:31:e6:25:b4:dd:2e:62:e6:fc:22:
d5:e1:69:11:d6:b1:c7:df:ab:1c:e6:18:bf:3f:51:61:22:54:
2e:85:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:28:24 2026 by rpki-client