Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: y6KWd1M3S325KDNYLB4pBpB208pMUq3WJRo0ffD8bGw=
Subject key identifier: D0:6D:E0:29:4F:0C:F6:86:B2:ED:07:CE:CD:BA:1F:B0:EF:94:DE:C9
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 01A001A6721E5A8E5A489A2EC05A69A12249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 0C8E
Signing time: Fri 14 Aug 2026 19:01:20 +0000
Manifest this update: Fri 14 Aug 2026 19:01:20 +0000
Manifest next update: Sat 15 Aug 2026 19:01:20 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: jOx/abdgN05sLz51J8HREqFyt1/Ea0X94sc4yMhJv90=)
2: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (hash: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:72:1e:5a:8e:5a:48:9a:2e:c0:5a:69:a1:22:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Aug 14 19:01:20 2026 GMT
Not After : Aug 15 19:01:20 2026 GMT
Subject: CN=d06de0294f0cf686b2ed07cecdba1fb0ef94dec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:7e:6b:35:86:72:be:a4:c0:c1:bb:6c:5f:
50:50:54:8f:ca:2b:72:de:db:11:18:dd:a1:f2:65:
29:df:1b:a8:a9:ec:86:8b:90:63:3e:ed:e7:d0:3c:
1e:99:ab:25:8f:bf:6c:2d:c3:ef:1b:74:f8:62:52:
65:1e:5f:fe:7b:1b:5d:a0:b0:f7:e7:ba:45:30:02:
35:8f:ba:60:b3:2b:a8:ac:dc:13:e5:d8:d6:79:8b:
4b:1f:4f:a4:b5:29:1a:04:a2:46:be:04:32:ea:82:
23:77:e0:24:55:a8:69:3a:88:61:4f:c5:1a:cf:d7:
34:37:62:36:eb:a7:2a:c8:2c:5e:6c:06:02:c7:01:
2c:52:c3:04:80:49:9f:e8:e1:0e:9e:85:35:5b:b5:
84:84:ec:45:46:26:4c:86:f7:1b:86:0b:ab:3a:0d:
74:55:32:e7:ea:b4:c7:25:6f:e1:98:fe:4d:3f:dd:
2b:34:da:bd:39:fc:f0:16:bb:0d:aa:20:ad:f5:ce:
52:89:43:c2:53:c9:18:95:40:bb:4f:98:21:8e:dd:
c1:02:9e:9c:93:45:f6:13:df:48:87:6d:82:d7:0a:
7f:6a:62:d5:e2:36:b6:64:53:c4:1b:6f:03:b8:97:
4b:9b:09:53:b5:22:ac:45:1d:1b:d7:bd:85:0d:31:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:E0:29:4F:0C:F6:86:B2:ED:07:CE:CD:BA:1F:B0:EF:94:DE:C9
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4c:b5:e3:5b:0f:43:1c:66:8e:b2:a5:90:6b:95:e1:92:3d:
3c:3b:51:b4:58:72:40:c2:e9:ec:93:6a:91:d1:00:ca:de:4f:
57:3e:57:28:9b:42:1b:5b:73:9c:d1:1f:cd:47:da:07:62:04:
40:9f:ff:da:89:4c:bd:b6:d5:f1:50:17:4e:04:57:48:56:cd:
25:87:aa:7a:92:a9:97:85:f8:47:ae:1d:0b:7a:0b:75:c0:66:
a0:ff:39:c0:7d:07:98:62:1f:0e:6e:ed:91:fd:65:97:03:46:
4e:76:07:65:82:df:5c:ad:6b:f9:2e:5f:fd:7c:0a:65:f9:29:
a4:b3:f7:a2:08:ca:d9:a5:7b:95:4c:74:ce:95:a3:42:37:30:
63:57:ab:56:0e:37:62:19:9e:34:af:14:5a:d3:6b:27:55:d2:
62:56:5a:a9:8e:e6:16:ac:92:38:58:f2:95:5b:7b:40:df:27:
1c:5c:26:e8:e3:bf:da:d1:5a:fb:2d:62:a4:92:55:fd:5b:8c:
27:f3:e0:6e:43:f0:a3:12:e1:98:f2:55:47:e9:0b:95:39:b4:
1b:45:37:7d:1b:be:c9:fb:56:60:6f:49:b6:91:40:28:7a:b1:
bd:5f:ac:fd:f3:1d:5e:d4:1d:93:4c:be:f7:01:c3:8f:36:51:
b4:be:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:18 2026 by rpki-client