Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
File: CWnLIVY-Ju22r7INHZLok6jduB0.mft (raw, json)
Hash identifier: UKf9sez6SLU1/EKPZLjFIS1yC3mQorVwBv9XkhF/1P4=
Subject key identifier: D5:4E:97:25:07:F9:A7:72:D9:BD:2A:0D:3C:9D:04:16:C8:C6:18:97
Authority key identifier: 09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
Certificate issuer: /CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Certificate serial: 019FA1F265E7E9B7BF374676411111C48E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
Manifest number: 057C
Signing time: Mon 27 Jul 2026 05:00:45 +0000
Manifest this update: Mon 27 Jul 2026 05:00:45 +0000
Manifest next update: Tue 28 Jul 2026 05:00:45 +0000
Files and hashes: 1: CWnLIVY-Ju22r7INHZLok6jduB0.crl (hash: t5tg6X7W48WAQCd5rn5GrHMKX4cucWb5Ng8m8OXcLRc=)
2: rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa (hash: 5haE3uSWqoSmkVp2C59/CSPiEElkrF1oivdNjZDrJeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:65:e7:e9:b7:bf:37:46:76:41:11:11:c4:8e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Validity
Not Before: Jul 27 05:00:45 2026 GMT
Not After : Jul 28 05:00:45 2026 GMT
Subject: CN=d54e972507f9a772d9bd2a0d3c9d0416c8c61897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3a:1c:66:67:7e:19:2a:3a:c7:f7:ce:21:70:
b6:11:80:9a:4e:cb:bd:07:75:6e:4b:bf:4b:61:ec:
61:a7:83:61:b3:c1:59:0e:12:70:50:8b:a3:85:e1:
4b:44:c8:35:b0:88:53:45:57:60:f4:b8:24:05:04:
ac:77:6d:d9:a2:72:f4:6a:1b:07:fd:9c:a9:2c:e0:
c0:33:32:cc:05:28:5f:7f:2f:8b:1b:50:82:62:73:
0a:e8:53:72:d8:64:1c:77:d4:25:d6:16:39:dc:76:
73:62:33:a1:b4:7b:31:35:81:b0:09:18:4f:86:1e:
fd:bd:61:b5:24:09:b9:65:8c:1c:10:55:45:bf:33:
ef:26:42:5d:44:b3:6f:e3:6c:48:2e:a1:e7:6a:8f:
36:f2:21:02:e7:78:01:08:26:a8:c5:30:d6:60:05:
33:c1:04:5d:77:d7:d6:52:55:66:96:49:2b:7b:3b:
92:ee:af:b1:a2:cf:dd:b9:36:9f:5f:05:d4:15:6d:
d5:87:f9:3a:14:50:08:ad:44:2c:df:ca:b9:cc:1f:
fa:20:82:93:07:6e:53:b0:a5:e6:a2:35:84:8f:67:
3b:c1:40:09:ae:c2:05:3e:e3:1a:76:79:c4:f0:60:
74:60:49:6c:52:95:ba:01:bb:8e:12:af:3d:d5:ab:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4E:97:25:07:F9:A7:72:D9:BD:2A:0D:3C:9D:04:16:C8:C6:18:97
X509v3 Authority Key Identifier:
keyid:09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:68:f1:69:cb:4e:a1:91:cf:c5:08:4b:2a:22:79:c4:f0:
60:c6:91:01:b8:31:62:7c:56:6d:f5:aa:41:a0:6a:36:a1:b5:
b4:41:64:15:e1:08:58:13:f5:1d:cb:0c:25:5f:eb:73:d5:73:
98:73:1b:1f:4d:6a:32:45:07:21:ed:fb:ea:1b:e3:76:d5:cb:
db:ee:09:e8:5c:d1:69:ed:40:4e:9b:50:2d:99:53:ee:13:1a:
36:ae:be:75:9c:a5:dc:b4:1e:59:24:14:04:81:4c:27:d0:08:
a4:cc:34:5e:6c:52:89:1f:2f:19:07:86:44:ef:ef:28:f1:56:
9a:92:b4:d2:f5:eb:67:4d:76:02:84:31:2a:f4:f6:ce:01:05:
aa:65:e9:60:44:ca:5c:20:34:05:8c:22:98:b6:da:cf:4b:c0:
16:d0:e9:d7:b5:6a:74:15:27:da:75:71:87:89:70:69:90:e6:
fa:0a:7d:06:77:c7:7f:73:ae:df:79:4b:06:e4:65:b8:1f:81:
e0:1e:36:12:22:a6:4e:29:48:33:7d:9f:2a:16:5b:30:61:b5:
f0:96:d6:1f:b6:8b:fc:f0:0d:85:68:55:c2:8c:0f:94:b4:61:
65:32:99:56:6e:08:b1:92:d7:65:4c:49:c0:29:7f:61:3c:e1:
b8:74:83:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8mXn6be/N0Z2QRERxI5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjljYjIxNTYzZTI2ZWRiNmFmYjIwZDFkOTJlODkzYThk
ZGI4MWQwHhcNMjYwNzI3MDUwMDQ1WhcNMjYwNzI4MDUwMDQ1WjAzMTEwLwYDVQQD
EyhkNTRlOTcyNTA3ZjlhNzcyZDliZDJhMGQzYzlkMDQxNmM4YzYxODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DocZmd+GSo6x/fOIXC2EYCaTsu9
B3VuS79LYexhp4Nhs8FZDhJwUIujheFLRMg1sIhTRVdg9LgkBQSsd23ZonL0ahsH
/ZypLODAMzLMBShffy+LG1CCYnMK6FNy2GQcd9Ql1hY53HZzYjOhtHsxNYGwCRhP
hh79vWG1JAm5ZYwcEFVFvzPvJkJdRLNv42xILqHnao828iEC53gBCCaoxTDWYAUz
wQRdd9fWUlVmlkkrezuS7q+xos/duTafXwXUFW3Vh/k6FFAIrUQs38q5zB/6IIKT
B25TsKXmojWEj2c7wUAJrsIFPuMadnnE8GB0YElsUpW6AbuOEq891avPzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVOlyUH+ady2b0qDTydBBbIxhiXMB8GA1UdIwQY
MBaAFAlpyyFWPibttq+yDR2S6JOo3bgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1duTElWWS1KdTIycjdJTkhaTG9rNmpkdUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZmU4MjMtNmVkNy00Nzg2LTk3YjQt
MzYwMGQwMmE2ZjBlLzEvQ1duTElWWS1KdTIycjdJTkhaTG9rNmpkdUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZmU4MjMtNmVkNy00Nzg2LTk3YjQtMzYwMGQwMmE2ZjBl
LzEvQ1duTElWWS1KdTIycjdJTkhaTG9rNmpkdUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHRo8WnL
TqGRz8UISyoiecTwYMaRAbgxYnxWbfWqQaBqNqG1tEFkFeEIWBP1HcsMJV/rc9Vz
mHMbH01qMkUHIe376hvjdtXL2+4J6FzRae1ATptQLZlT7hMaNq6+dZyl3LQeWSQU
BIFMJ9AIpMw0XmxSiR8vGQeGRO/vKPFWmpK00vXrZ012AoQxKvT2zgEFqmXpYETK
XCA0BYwimLbaz0vAFtDp17VqdBUn2nVxh4lwaZDm+gp9BnfHf3Ou33lLBuRluB+B
4B42EiKmTilIM32fKhZbMGG18JbWH7aL/PANhWhVwowPlLRhZTKZVm4IsZLXZUxJ
wCl/YTzhuHSDyA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:20 2026 by rpki-client