Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
File: CWnLIVY-Ju22r7INHZLok6jduB0.mft (raw, json)
Hash identifier: uJDwG7Kp/fA2yCX+x3SaqM4UPFQxVeP8n/TZ8DxHrNw=
Subject key identifier: 80:57:BA:C7:7D:BE:8F:15:E2:35:A5:AA:FA:6A:5F:4B:1F:FA:A5:6D
Authority key identifier: 09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
Certificate issuer: /CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Certificate serial: 01A17EF44843248BD19F6531857215968BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
Manifest number: 0673
Signing time: Tue 27 Oct 2026 20:01:40 +0000
Manifest this update: Tue 27 Oct 2026 20:01:40 +0000
Manifest next update: Wed 28 Oct 2026 20:01:40 +0000
Files and hashes: 1: CWnLIVY-Ju22r7INHZLok6jduB0.crl (hash: axrrX8QZHI0bf+ADU5n6i+pThljelAExeg/L/ZAPRVU=)
2: rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa (hash: 5haE3uSWqoSmkVp2C59/CSPiEElkrF1oivdNjZDrJeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:48:43:24:8b:d1:9f:65:31:85:72:15:96:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Validity
Not Before: Oct 27 20:01:40 2026 GMT
Not After : Oct 28 20:01:40 2026 GMT
Subject: CN=8057bac77dbe8f15e235a5aafa6a5f4b1ffaa56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:a8:ca:41:35:e0:31:0d:e7:16:5a:4a:e2:
c6:9d:a7:ce:a1:0e:73:df:a1:16:fc:f8:59:10:2f:
ed:86:ce:99:9f:20:40:6a:02:46:e8:2d:10:fd:69:
9d:5d:45:75:8d:5e:57:4f:a6:20:f6:2c:31:1c:19:
ae:c3:79:12:4e:95:95:77:db:fe:88:02:4a:d5:01:
15:86:ea:d5:55:ef:70:18:19:77:2c:a4:99:27:68:
4e:8b:e8:b1:7b:8e:70:a3:a5:e3:14:00:e0:61:01:
5d:81:ba:72:27:dd:ed:3e:5f:3a:6a:03:03:02:bd:
91:13:f8:73:bf:ac:7f:f8:66:a8:97:0a:69:2a:42:
2b:b6:6c:91:3d:c7:d0:5e:c5:43:27:c3:4f:7e:7e:
c4:be:8a:6e:62:b3:b1:2e:17:b6:17:a3:39:76:1c:
f4:d3:24:ed:c8:77:5a:ab:87:19:65:83:07:a5:05:
db:d0:4a:b3:9c:cd:f0:a2:45:4b:ef:78:35:da:f8:
3b:50:54:41:dd:c2:bd:3f:9e:09:e9:d8:cd:15:f6:
aa:40:a4:d0:bc:4c:a4:97:5d:0d:d7:4c:5a:5c:51:
19:d2:a6:a6:34:ca:7c:3a:7e:c7:c2:33:9f:17:2f:
9a:2f:3c:6a:95:84:a1:0c:6f:10:79:54:3e:41:5b:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:57:BA:C7:7D:BE:8F:15:E2:35:A5:AA:FA:6A:5F:4B:1F:FA:A5:6D
X509v3 Authority Key Identifier:
keyid:09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:39:ef:76:ab:2a:22:26:60:05:d8:7b:f9:cd:44:04:b8:b6:
71:88:a1:01:b5:cf:ab:e5:e8:bd:c2:ba:7b:64:92:45:e6:d0:
f4:3e:76:01:77:3a:0f:81:9a:be:b1:b0:65:a4:6c:f9:50:73:
13:fa:08:2f:e8:eb:05:05:4a:b5:4d:98:cb:74:55:72:c5:b8:
ea:b9:27:8b:7c:cd:1a:74:f9:9b:72:2b:57:46:df:ba:18:58:
5f:a4:a9:bd:d7:a9:48:7d:d6:df:ac:f4:ee:d0:cc:7a:2e:83:
a4:e8:41:34:6e:c6:ac:ec:a5:cc:8f:07:ea:68:97:3a:16:95:
a4:f6:c3:e0:a1:b2:62:34:24:b4:25:1b:bf:03:a3:24:f2:68:
9b:5e:f9:2b:93:55:9f:14:07:52:bb:85:fa:74:40:b5:69:67:
58:7a:b0:50:fd:e5:2e:71:6a:3b:6f:17:ba:81:47:bd:cb:e4:
eb:9d:86:4f:c2:75:6e:da:80:08:ff:96:88:49:b5:7e:7f:6f:
5a:8e:6a:51:c5:45:4d:f1:fc:6e:09:cf:82:be:50:94:d5:39:
40:05:bf:69:c8:dc:39:d3:a9:f8:46:eb:6f:d6:87:97:f8:a1:
f0:ee:d6:fd:76:01:6f:f4:31:69:f2:35:03:0b:02:1e:2d:91:
91:22:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:48 2026 by rpki-client