Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: JVXttESJEdEbD1Co8jW/W9AHPJTTdMMe3uxMHr0+q4I=
Subject key identifier: 25:BC:E0:87:97:D9:02:6A:D1:00:88:7E:9E:96:5C:C6:43:99:E3:5B
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 01A0C6336E0AAD841F54F6C8DF23FEB3ADE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 23:00:54 +0000
Manifest this update: Mon 21 Sep 2026 23:00:54 +0000
Manifest next update: Tue 22 Sep 2026 23:00:54 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: djwg+PRakI3TkzyZgZiQIVy4ND/ehC47kHOUoKKe52E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:6e:0a:ad:84:1f:54:f6:c8:df:23:fe:b3:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Sep 21 23:00:54 2026 GMT
Not After : Sep 22 23:00:54 2026 GMT
Subject: CN=25bce08797d9026ad100887e9e965cc64399e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:7f:3d:db:11:16:cd:42:e0:96:a8:fd:5a:
fa:ee:58:35:8a:be:f9:86:61:10:75:1a:b9:5b:10:
07:17:c5:4f:a0:3f:81:20:97:84:43:96:25:ce:36:
ed:bd:17:f5:d6:46:38:ad:00:86:85:1a:bb:91:21:
98:d2:54:a7:c8:29:fe:3f:8e:2b:ae:c6:d6:69:1c:
21:b6:66:4e:41:cc:75:66:2f:6d:fc:f9:c9:36:45:
f9:f4:67:ac:e0:6a:33:00:9a:49:80:65:a2:be:37:
c9:ff:42:ec:9a:77:c7:dd:c7:df:f1:8e:76:65:de:
d4:e6:97:6b:97:22:d3:f5:f1:3e:71:de:6b:25:57:
05:35:e9:09:37:f9:fd:8f:eb:af:46:93:b9:56:81:
e2:d1:bf:f6:e7:06:8c:6b:a8:56:91:d5:34:1a:24:
f9:e4:47:53:44:7b:ea:4b:61:46:41:d8:f7:ed:12:
78:f2:03:d6:bc:1b:d7:12:41:97:7a:97:6d:6b:3c:
86:01:66:37:3b:fe:c5:ed:82:f8:8e:5f:78:9a:01:
6f:6d:b9:aa:1d:dc:30:22:80:5c:7a:07:82:ac:37:
68:6c:a7:a5:65:87:0a:4e:4c:02:3e:b0:b8:e1:0d:
09:18:9d:14:dc:d2:33:17:6b:da:9c:08:11:f5:17:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:E0:87:97:D9:02:6A:D1:00:88:7E:9E:96:5C:C6:43:99:E3:5B
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bd:b2:55:8c:21:15:ec:45:7c:09:cd:4a:11:8a:da:81:da:
22:70:e4:9b:d9:4b:c6:5d:31:4f:2a:13:0c:44:5a:29:c0:18:
aa:be:a0:62:46:cb:d1:6c:11:57:f6:43:e0:53:c4:bf:68:fe:
10:ce:2b:a5:88:b1:a1:c5:d6:85:10:bc:44:05:91:3e:57:18:
c7:9a:f1:09:1b:37:34:11:2d:ec:23:ea:16:a7:1a:83:c1:32:
90:f9:68:76:8f:21:24:c4:7d:83:3a:8b:99:15:72:1e:3a:a2:
73:27:f3:0f:77:1d:c6:6c:89:31:63:d8:c5:92:19:a6:44:a4:
79:39:61:53:cc:26:f9:b3:cd:48:5f:43:dc:4a:74:14:e1:0d:
f4:d6:4e:a1:83:c3:a0:ec:13:de:4f:53:b7:c7:94:5b:2f:7a:
26:13:e7:e5:a9:dc:1f:8c:ff:bb:a0:6d:95:be:fc:29:b5:ba:
29:8b:54:7a:ba:96:c4:61:c6:45:57:37:a7:ad:a9:0b:d8:34:
d2:64:3c:98:a3:08:36:3a:9f:99:20:b3:13:da:d8:5a:3a:3f:
a1:42:77:97:55:6a:99:84:13:9d:cd:70:b4:0f:41:0b:e0:7c:
d9:ca:c7:d4:6f:b6:b8:02:7d:b1:77:f3:29:ce:d8:5c:ff:38:
08:1b:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:59:40 2026 by rpki-client