
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: c54p7/i4xBx+VTievr9+oNoWRY5DeBcuM8p80OZVnvQ=
Subject key identifier: AD:28:41:20:92:5E:40:7E:8E:96:36:2C:09:87:12:5D:24:3D:46:49
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 019D3909B7C46F84328C497C95E6CD2C9480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 0B1D
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: ldy0h3SpaWxNWtK5EPtWjKyFSuJKYFfEavk5teQ67FA=)
2: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (hash: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b7:c4:6f:84:32:8c:49:7c:95:e6:cd:2c:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=ad284120925e407e8e96362c0987125d243d4649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:b8:dc:e2:77:dd:c4:a0:54:8e:06:91:2f:
d3:af:6b:66:11:b7:8b:d2:86:bd:1d:35:b0:62:be:
88:43:ab:5b:28:bf:33:f9:e1:a5:37:12:6e:ec:05:
91:be:d5:18:f9:d2:ac:ff:8e:f1:44:9a:f6:97:62:
fa:38:fd:04:5d:12:91:0f:f6:39:86:de:31:ff:f6:
b4:52:cd:7b:9d:11:d0:94:c6:15:a7:f0:54:ab:db:
ae:76:34:d7:8b:5a:3c:b8:7e:c6:3b:85:a5:97:e9:
19:dc:31:7d:2d:d4:54:74:40:8d:c0:79:ea:4e:44:
c4:b2:f6:52:29:a7:6b:24:50:e7:ed:5f:5f:3a:ae:
29:c9:e3:89:e8:c9:16:6e:2b:0e:9c:5a:bb:f1:28:
29:aa:16:06:fa:12:03:28:ff:fa:3d:a4:15:b4:c1:
ee:62:fe:4e:58:15:8a:37:9d:06:46:d6:05:68:f7:
fb:27:5f:12:61:99:d4:55:ff:00:f0:f0:96:9c:ab:
6e:13:a3:5d:5f:1d:c3:e6:01:68:e4:c1:ca:fe:c5:
c4:33:c6:b1:ec:d6:98:a4:d7:28:d5:2a:f5:56:a7:
56:dd:e6:65:59:37:d5:10:27:92:01:0e:b8:4a:ce:
7b:36:62:fe:11:2a:d9:86:f2:82:03:48:42:3b:07:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:41:20:92:5E:40:7E:8E:96:36:2C:09:87:12:5D:24:3D:46:49
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9c:6d:36:2b:dc:eb:a1:54:ae:a7:b5:be:a7:76:27:c0:bb:
7c:b2:6a:8b:c3:c8:9e:aa:61:d0:bd:f4:3c:e1:4f:bc:6e:9b:
e1:e1:9e:02:2f:4a:49:98:2a:34:15:c3:af:16:fb:48:9c:ef:
1e:23:95:aa:2c:4c:73:36:10:28:84:d1:fc:f6:3a:41:fe:89:
63:b3:1e:d3:11:3b:4f:4e:4c:cf:fa:8b:04:a0:e2:e0:dc:00:
3f:84:e7:08:f2:72:2d:14:af:fc:54:94:b3:98:6d:80:07:7a:
08:fc:71:e7:48:2f:b3:c7:e4:c2:a0:5b:c1:f4:16:14:33:4c:
a1:50:8a:e0:3d:d4:9e:ba:9e:c0:fc:f2:c2:2b:cc:36:0a:70:
84:5f:29:1c:96:aa:77:36:56:72:7f:b0:63:bc:37:c5:00:5e:
54:1d:64:c3:e2:07:e5:0c:e8:49:7d:de:0b:f2:ca:be:28:42:
98:99:cc:86:ea:14:05:55:9c:2f:b9:23:5e:ec:be:26:96:45:
a2:29:eb:52:00:5f:08:4d:87:74:12:fc:22:81:b9:c0:78:77:
77:75:9f:05:e0:33:7d:ac:9b:3d:58:0a:0a:77:c2:9e:f1:88:
fa:b7:b6:75:cf:bd:b1:74:73:90:11:aa:b2:d9:2b:ea:06:1e:
79:4f:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:04 2026 by rpki-client