Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File: cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier: 8gXkKJRD2O0JLFENuimY3NGRXuIOy0da0Ys3D/Kfd1Y=
Subject key identifier: 88:E0:C5:96:50:62:29:CA:1A:7E:4B:5D:C5:57:ED:5D:2D:F8:67:85
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 01A0CAB54EECF154FAB8D1CFDB9E887B9481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 20:01:14 +0000
Manifest this update: Tue 22 Sep 2026 20:01:14 +0000
Manifest next update: Wed 23 Sep 2026 20:01:14 +0000
Files and hashes: 1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: VWSzPlNRscocfGCdeOZLcMyOzcP3A4wzeugNcxmcDtU=)
4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:4e:ec:f1:54:fa:b8:d1:cf:db:9e:88:7b:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Sep 22 20:01:14 2026 GMT
Not After : Sep 23 20:01:14 2026 GMT
Subject: CN=88e0c596506229ca1a7e4b5dc557ed5d2df86785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:38:d5:f5:ca:98:6f:35:96:1d:19:e2:26:
fd:23:cd:3b:bb:e9:7e:34:f8:e6:7c:5f:09:8f:49:
4c:7f:fc:be:96:25:1d:3a:0d:ae:b9:d8:a8:8b:fd:
e6:de:dd:7e:2d:a9:7d:8f:53:3c:26:0b:f3:59:1e:
95:c0:a4:35:7d:59:09:1e:f0:15:3c:92:a3:88:ad:
f7:ba:11:4d:5d:3d:2f:1c:da:4d:f3:89:d8:3d:21:
78:cc:8f:78:2c:64:c6:7b:76:8f:a6:d7:ff:77:cf:
94:9a:31:ac:e1:4c:c7:3e:03:fa:18:08:70:4d:87:
23:21:a7:8e:9f:4e:df:b4:42:89:67:2a:49:7b:44:
49:c7:50:20:c7:e5:57:d5:92:00:2d:d1:6d:d7:cd:
20:ce:67:08:f0:ae:e8:69:3c:ba:8d:8b:ac:40:7f:
d2:93:b8:d0:14:95:b3:52:44:10:95:78:f5:d4:d5:
d0:11:10:33:e3:0c:bc:14:9f:e1:e3:5d:25:b6:7f:
4c:5f:a9:e4:97:64:5b:94:2a:95:d6:23:e2:eb:22:
66:3d:62:19:93:e9:05:28:08:c8:22:b9:ac:e5:df:
d6:56:5b:2e:d0:3b:5a:51:b1:f7:cd:6f:73:6f:3e:
66:50:72:e5:81:a2:32:6a:04:12:53:69:5c:9c:a7:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E0:C5:96:50:62:29:CA:1A:7E:4B:5D:C5:57:ED:5D:2D:F8:67:85
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0c:5c:d8:67:3e:09:07:a6:05:d1:a5:d3:2f:fb:a8:62:2e:
69:92:a2:ba:c8:59:c1:e5:54:02:c8:b8:de:1a:f4:44:61:f8:
1c:0b:7a:ad:55:23:d5:87:fc:d5:51:ed:2e:54:58:a6:98:40:
de:7d:ef:24:49:8b:2a:4b:c3:bb:8d:83:9f:f4:49:f2:79:54:
f9:8a:3c:3f:81:6e:03:93:4b:45:39:83:4a:c9:c0:ed:3e:1a:
da:d2:b4:dc:02:36:ec:b1:e8:46:e7:31:25:76:c1:b9:c3:e3:
6b:15:13:ee:88:ef:e2:e7:79:a7:2a:34:a9:9b:73:93:42:15:
d5:b8:6a:f4:3e:bc:28:af:1d:55:a0:77:81:9a:8b:97:85:18:
19:36:bd:98:e1:f4:c1:a5:7e:4d:62:81:64:82:0c:51:da:f8:
2a:f3:44:6c:dc:e1:33:c6:7d:9c:70:53:ea:51:26:b9:8e:6d:
97:06:40:92:bf:8d:ea:a0:02:e7:3a:40:fc:54:ff:4f:f6:65:
70:ee:ea:30:a2:4a:bd:35:6d:b5:0a:6c:d4:e5:ce:7e:1c:20:
7c:4d:f8:08:b4:c7:6d:88:a3:e0:49:63:8f:e1:0f:b9:2f:6a:
c1:29:f3:dc:42:6e:a7:91:21:0d:fa:4c:da:e9:73:14:26:d7:
25:c5:63:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtU7s8VT6uNHP256Ie5SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh
ZmViOTUwHhcNMjYwOTIyMjAwMTE0WhcNMjYwOTIzMjAwMTE0WjAzMTEwLwYDVQQD
Eyg4OGUwYzU5NjUwNjIyOWNhMWE3ZTRiNWRjNTU3ZWQ1ZDJkZjg2Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/041fXKmG81lh0Z4ib9I807u+l+
NPjmfF8Jj0lMf/y+liUdOg2uudioi/3m3t1+Lal9j1M8JgvzWR6VwKQ1fVkJHvAV
PJKjiK33uhFNXT0vHNpN84nYPSF4zI94LGTGe3aPptf/d8+UmjGs4UzHPgP6GAhw
TYcjIaeOn07ftEKJZypJe0RJx1Agx+VX1ZIALdFt180gzmcI8K7oaTy6jYusQH/S
k7jQFJWzUkQQlXj11NXQERAz4wy8FJ/h410ltn9MX6nkl2RblCqV1iPi6yJmPWIZ
k+kFKAjIIrms5d/WVlsu0DtaUbH3zW9zbz5mUHLlgaIyagQSU2lcnKepdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjgxZZQYinKGn5LXcVX7V0t+GeFMB8GA1UdIwQY
MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct
N2Q1OTMwMzNkMDA1LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1
LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgxc2Gc+
CQemBdGl0y/7qGIuaZKiushZweVUAsi43hr0RGH4HAt6rVUj1Yf81VHtLlRYpphA
3n3vJEmLKkvDu42Dn/RJ8nlU+Yo8P4FuA5NLRTmDSsnA7T4a2tK03AI27LHoRucx
JXbBucPjaxUT7ojv4ud5pyo0qZtzk0IV1bhq9D68KK8dVaB3gZqLl4UYGTa9mOH0
waV+TWKBZIIMUdr4KvNEbNzhM8Z9nHBT6lEmuY5tlwZAkr+N6qAC5zpA/FT/T/Zl
cO7qMKJKvTVttQps1OXOfhwgfE34CLTHbYij4Eljj+EPuS9qwSnz3EJup5EhDfpM
2ulzFCbXJcVjKQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:41:40 2026 by rpki-client