Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: bGvoPopZvlWuqYsDDJyvxbStfD1jx8YUlSHmDbawzxs=
Subject key identifier: 9E:31:49:D8:F4:75:E3:F7:19:FE:13:5A:5E:17:97:3A:82:D6:D9:6B
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019F189F1AFCD63F2645DFE628F311F426A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0C2A
Signing time: Tue 30 Jun 2026 13:01:48 +0000
Manifest this update: Tue 30 Jun 2026 13:01:48 +0000
Manifest next update: Wed 01 Jul 2026 13:01:48 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: NZGlZ1M2PJIJlm/xXPEcari8eVHNt7EUHmjTmy7P4Yw=)
2: wwo_DxaaSlkeSM_BlRmma4rbf0I.roa (hash: mqk1cRlhcQcCo6/bhwR5BjCAjJJ/RC++qOvJ8wDbdP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:1a:fc:d6:3f:26:45:df:e6:28:f3:11:f4:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Jun 30 13:01:48 2026 GMT
Not After : Jul 1 13:01:48 2026 GMT
Subject: CN=9e3149d8f475e3f719fe135a5e17973a82d6d96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:a5:3c:ad:4a:d0:07:42:f0:71:41:02:49:
34:54:1b:0a:dd:31:e7:28:ec:2d:01:7e:3b:61:e5:
2a:19:58:c2:40:b8:f6:a3:06:15:6a:9e:2f:0c:68:
66:d8:ab:d5:16:8a:95:63:ac:9b:27:24:f9:d9:03:
33:8c:f3:53:c5:c0:f1:6b:a2:2e:bc:ff:d6:63:2c:
34:ea:fc:d0:c4:3a:34:d1:47:66:e8:ac:08:a0:d5:
bc:84:9a:4e:f6:85:4c:46:c6:b1:ae:8b:dd:8d:3d:
62:b4:d8:c7:62:75:2a:63:83:67:8b:77:5a:fb:b8:
ad:ae:e3:ba:d9:81:75:cf:a5:01:4d:2b:ed:6f:2f:
b6:ce:bd:a7:80:75:56:b3:fa:3d:8e:30:dc:63:d3:
1c:02:d5:46:55:c6:bf:32:f0:4b:e9:53:71:85:fb:
e4:d5:fe:a4:cb:3e:dd:77:80:3d:dc:91:2f:b0:8a:
17:ff:02:d1:eb:78:76:50:c4:fe:f8:cf:d7:7b:ff:
79:30:6a:57:70:89:a8:84:6a:60:ba:5c:70:6d:96:
76:2f:40:e0:dc:b6:e8:d2:28:53:e7:66:74:24:a3:
d5:11:e7:29:a2:6f:68:14:f4:45:89:d6:11:26:c5:
a0:1d:62:6c:4d:46:a1:34:38:ec:4a:22:6a:7f:cd:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:49:D8:F4:75:E3:F7:19:FE:13:5A:5E:17:97:3A:82:D6:D9:6B
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7b:08:63:c2:98:76:64:61:06:89:dc:b6:e3:89:85:e1:0d:
3b:30:42:ab:f1:27:ed:cf:0e:7d:b9:a3:0b:3e:24:02:79:c3:
d8:77:8a:95:0e:2a:e8:d0:86:c3:8c:57:6d:1f:f1:44:93:63:
d1:d9:41:6a:5e:ac:fa:ad:73:ab:6e:c5:7a:56:c0:ac:f6:7d:
bd:f5:a2:cd:ed:e5:3d:b9:de:05:50:1b:fa:94:bb:95:08:99:
de:31:a4:df:78:32:50:c4:d7:33:5f:10:25:f3:ce:d2:84:c6:
56:6d:ee:c9:01:e9:3e:a7:3a:01:af:bb:b6:e3:ca:10:5c:17:
56:f2:c4:4b:db:3f:b1:b8:dd:80:e4:8f:c8:a5:a6:4d:72:5e:
93:eb:2a:75:2e:5d:b3:60:39:e8:82:0e:cb:12:aa:6f:7c:52:
29:d6:07:b3:56:95:7a:eb:14:28:9d:4a:a1:f0:be:23:59:0c:
a8:6d:14:f2:93:53:f8:50:3f:07:6e:a8:59:11:e5:fa:c3:90:
89:bf:21:b6:83:d5:4d:8d:15:4b:78:7f:37:8b:2d:01:a9:f4:
77:fd:44:cd:30:a0:14:7f:9a:88:a0:b0:82:05:a2:64:57:ab:
93:71:aa:e5:1a:c1:2a:e7:99:32:70:65:29:fa:aa:13:97:34:
bb:c3:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:27 2026 by rpki-client