Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: q3ocw1h1F3zG2wWsDR+y0aHgdbqGKEQdWaJ7AxvNgds=
Subject key identifier: F3:57:88:22:AF:3C:81:2E:C8:B0:28:79:B1:F8:1A:E0:F1:4C:DC:D3
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 019F1755792699E1C0B583ADFFE092C52711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 14AF
Signing time: Tue 30 Jun 2026 07:01:45 +0000
Manifest this update: Tue 30 Jun 2026 07:01:45 +0000
Manifest next update: Wed 01 Jul 2026 07:01:45 +0000
Files and hashes: 1: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (hash: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: sJQU37nGPBy8jPBra+cbJJJY7I8NWIm3mR4r8viIe00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:79:26:99:e1:c0:b5:83:ad:ff:e0:92:c5:27:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jun 30 07:01:45 2026 GMT
Not After : Jul 1 07:01:45 2026 GMT
Subject: CN=f3578822af3c812ec8b02879b1f81ae0f14cdcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:95:14:1e:9a:f6:89:89:4e:c5:2d:59:18:
f9:1a:5e:14:3d:28:65:ed:fe:61:30:93:63:56:8e:
e1:98:bf:01:58:0a:c5:41:3c:b6:82:2d:04:39:63:
35:30:94:54:69:fe:62:04:c0:35:52:c7:e0:eb:9b:
ab:be:ac:72:6d:c1:47:b3:2d:9b:30:70:59:0d:84:
0a:e2:a4:dc:a6:0f:94:b9:e0:49:d7:13:bd:00:05:
02:fa:11:9c:62:a3:90:66:61:5d:a8:9e:75:31:3c:
f7:d9:40:37:f8:d5:65:68:ec:e4:ad:49:8c:0f:cc:
fb:71:01:0b:7b:78:f2:d9:51:2d:a1:f3:df:d8:87:
96:e3:ce:43:57:16:c0:a9:45:7a:d9:8a:2d:2a:e0:
fc:9e:ad:16:91:ca:8f:8d:9e:2b:06:5a:69:ac:c3:
fc:39:ee:34:f4:ee:71:99:75:c6:42:7f:1b:75:c8:
f0:41:b0:e3:e1:69:e6:a1:ce:3d:2a:b2:b1:4d:1d:
2e:17:98:7d:97:7b:93:a5:2f:f9:08:9a:82:76:b5:
17:2b:c6:c6:29:77:69:bc:04:2c:25:87:8d:8f:5a:
cc:f3:a6:52:61:4e:52:80:6c:65:41:de:e5:03:bc:
a5:0d:8d:4c:96:31:06:a6:38:22:32:20:9c:dc:b0:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:88:22:AF:3C:81:2E:C8:B0:28:79:B1:F8:1A:E0:F1:4C:DC:D3
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:77:1b:93:f7:50:68:b3:2c:2b:cb:d4:06:62:45:a8:c9:4e:
c2:62:41:67:f7:5b:72:0e:98:38:95:0b:a4:86:2e:65:8d:e4:
54:dc:81:9e:81:45:ef:b1:29:82:7b:3f:89:a9:d1:cc:a6:b9:
4a:40:e6:f6:4b:3f:52:e4:69:b2:34:53:d3:6e:72:4f:0f:d5:
fd:50:9f:00:2e:89:29:1b:24:48:d2:ba:d5:5a:09:39:7a:6d:
2b:a2:3f:d9:27:1a:0a:f8:6d:bc:01:5d:0b:09:44:7f:7c:21:
a0:d5:73:9c:ed:85:8a:d4:62:29:ff:a3:33:d9:35:4e:08:0b:
75:17:64:0d:e9:0c:04:e6:91:2e:58:39:30:51:ca:87:26:f4:
17:18:3e:06:72:4b:91:70:77:29:c2:30:f1:1b:0b:50:68:aa:
aa:ba:7b:5c:fd:df:5e:47:0f:54:b7:87:c2:d7:8b:74:81:93:
f3:5d:75:d2:f9:42:56:69:1b:14:27:88:10:45:7b:3f:e1:f9:
4f:21:8f:8a:f0:35:d8:15:a2:79:c2:7a:3f:38:2f:01:ba:05:
fc:c2:0c:ce:41:ed:c3:3e:9f:29:d1:31:45:b6:d8:51:cf:fb:
f4:b6:ba:3f:3a:e5:be:62:b0:5b:69:d7:e2:95:a7:e0:11:a0:
c1:a1:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:59 2026 by rpki-client