Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: uALLsE7Gup6eCBYoP6HYDk7TIyCZXUiIYFAcirKydPE=
Subject key identifier: 85:93:EC:5D:E8:28:3E:26:E7:F7:F0:2B:0F:09:FE:7E:20:05:BE:AC
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 019E2F967EDD1087728A0D8D57FC42CA9672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 07:00:52 +0000
Manifest this update: Sat 16 May 2026 07:00:52 +0000
Manifest next update: Sun 17 May 2026 07:00:52 +0000
Files and hashes: 1: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: lFQXP46XxsgK9w9PJqRdN+SWbmoxhEwpiPvDs5dtVKk=)
2: eEPTZT6Cu9Z_P3_raMWIwWmS4XU.roa (hash: QSgLB7ALo1ZtZRISbHuHkO61FWxfLx7/83BtDc+Ihaw=)
3: vlffUXbbe03bAModfKshSSav8vw.roa (hash: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:7e:dd:10:87:72:8a:0d:8d:57:fc:42:ca:96:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: May 16 07:00:52 2026 GMT
Not After : May 17 07:00:52 2026 GMT
Subject: CN=8593ec5de8283e26e7f7f02b0f09fe7e2005beac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:b2:63:40:58:be:4d:a3:e0:7a:23:f7:18:
ca:d4:b4:43:ff:5f:c0:2c:02:38:e2:cb:f3:07:96:
7f:2e:c1:15:35:a9:92:28:36:b3:87:3f:00:cb:df:
21:9a:33:d4:16:a1:eb:48:f9:ca:53:6c:59:28:a6:
00:89:7a:59:d4:45:47:8b:15:a4:64:a6:91:1d:19:
c4:0c:1a:4d:c3:0e:ef:36:57:a1:38:4c:8c:19:2c:
ca:41:99:2c:98:85:1d:27:97:56:b4:f0:fe:02:d0:
a2:bb:45:47:c6:5c:1c:b0:2c:0c:0b:61:ab:b5:c9:
90:e5:86:d2:57:f2:9c:16:a1:f0:a2:a0:6d:86:99:
54:a7:0e:1f:b8:1f:42:62:55:5d:01:67:d8:40:91:
bf:72:6b:fc:c3:37:56:6a:40:c7:ab:04:d9:56:d7:
ac:6e:fb:d0:10:8d:e5:3e:3d:0d:c6:45:ef:ab:c8:
4a:dd:45:d3:fb:0c:52:49:a2:e3:f8:80:c4:07:0b:
df:5d:97:60:41:9d:5d:4b:c2:b6:4d:8c:18:07:e2:
61:57:36:ea:96:20:b3:b4:5f:a2:b1:6f:42:94:3c:
31:30:b6:a7:29:52:ef:41:f0:bd:0d:65:71:12:a4:
82:ee:a2:63:dc:e9:9a:67:1b:3b:a9:3b:1d:16:88:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:EC:5D:E8:28:3E:26:E7:F7:F0:2B:0F:09:FE:7E:20:05:BE:AC
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a2:02:8e:e5:3d:c1:33:bd:bb:a9:e6:47:33:47:f6:d8:1f:
e8:ec:5e:ab:dc:7d:9b:27:ea:e3:84:e7:66:e1:33:6f:a6:ec:
8f:93:41:e6:6a:35:a6:10:90:c4:d8:56:1b:0b:c8:30:31:b5:
f1:94:a7:17:f4:60:6e:f4:9e:ab:10:f5:52:53:ae:cf:c4:cb:
5b:ed:93:45:20:7c:ed:0a:bb:d0:34:d5:f6:e4:27:86:3b:f4:
4a:3d:ba:6b:e4:f7:84:40:20:0f:a8:ff:50:3d:86:c1:16:25:
11:65:68:2b:0f:63:8f:96:99:0b:b6:90:ca:74:69:d7:1e:c7:
4f:83:2b:a6:23:23:64:e1:33:eb:9c:2b:b9:dd:b9:46:8f:80:
5b:46:0f:ca:af:e0:34:24:6b:63:72:d4:48:6b:b5:04:da:2e:
8c:6e:cc:87:29:91:5b:c6:5c:82:63:c1:71:fb:63:12:39:c0:
d8:b9:e8:71:14:e0:c8:97:74:cc:3e:fa:09:47:9d:06:1b:cd:
64:44:96:10:e9:eb:f1:b5:9b:62:88:6c:1a:72:ce:42:32:3e:
77:80:a7:93:a3:94:ef:03:03:85:02:d5:9c:ad:61:a7:b1:18:
62:6b:7c:68:10:ed:4e:1c:0d:9a:98:7e:9a:ad:1a:fb:35:87:
34:e8:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:24 2026 by rpki-client