Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
File: CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft (raw, json)
Hash identifier: pES1qW5tHs60B4ivQFzDwJOJTd1OloAxa5rrJxGY/KY=
Subject key identifier: 23:3D:DF:CB:2E:9B:5B:FF:BF:0E:24:9E:26:6E:34:DC:BA:BE:3D:B1
Authority key identifier: 09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
Certificate issuer: /CN=0966d239db4031fd6f147f601a2bb6b033314069
Certificate serial: 019ED507A8D217FA866EEC774135973A7FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 10:01:49 +0000
Manifest this update: Wed 17 Jun 2026 10:01:49 +0000
Manifest next update: Thu 18 Jun 2026 10:01:49 +0000
Files and hashes: 1: CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl (hash: dK/FedZ3QXxgDbD/0V1Nb8NCsK8XnvKJJWFcz18RUm4=)
2: GZAShLfc8NeJgF1_NRDRN1m5XTs.roa (hash: lixfepr/Gg7h2VoWBQECGRTLGauSXIp4KHdFX4z+DOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:a8:d2:17:fa:86:6e:ec:77:41:35:97:3a:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966d239db4031fd6f147f601a2bb6b033314069
Validity
Not Before: Jun 17 10:01:49 2026 GMT
Not After : Jun 18 10:01:49 2026 GMT
Subject: CN=233ddfcb2e9b5bffbf0e249e266e34dcbabe3db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:61:8f:75:48:92:59:41:48:e3:79:de:18:
06:8a:e4:d4:63:76:7d:71:99:b5:34:3c:96:62:62:
50:c9:9b:a3:04:01:9b:9d:c4:9f:66:a0:5c:0c:ec:
57:d5:aa:60:47:13:cd:02:14:eb:76:cd:95:f0:f7:
f1:29:1a:4d:75:06:9d:ac:ee:44:8a:2e:c4:af:d3:
cd:85:85:c4:28:41:9e:e8:a0:b5:b4:5a:f8:7a:c1:
e1:a4:9d:c1:be:d9:5f:a9:23:77:f3:86:bc:46:55:
35:01:59:0d:6a:cd:ff:d5:ea:47:d0:43:9a:5b:0a:
e3:77:f6:45:fa:39:a3:39:d9:ad:32:27:7a:eb:47:
82:38:85:5b:62:e7:58:7c:26:e9:be:e3:e3:d4:5f:
8f:1a:a4:d1:ef:ff:a3:39:9d:2c:8b:0a:1e:dd:ac:
44:a0:91:39:07:d4:3a:d3:55:ca:03:29:b2:d1:cf:
24:b3:5a:14:f2:aa:02:4a:3b:6f:2c:a6:3d:e2:03:
44:e9:21:68:12:ba:63:78:0c:11:d4:1f:f3:fa:e8:
a4:13:5f:59:ca:01:1c:5a:4f:70:64:11:93:4e:a5:
36:c8:a3:d3:f5:d7:b5:3a:b6:03:db:95:d8:48:1a:
93:36:48:0c:45:95:8a:19:54:27:43:f2:df:43:f6:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:DF:CB:2E:9B:5B:FF:BF:0E:24:9E:26:6E:34:DC:BA:BE:3D:B1
X509v3 Authority Key Identifier:
keyid:09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8d:3e:d8:7e:eb:31:f9:78:20:85:25:61:e3:a5:18:dd:4c:
20:84:64:d0:e4:f7:9d:74:15:90:84:66:35:3d:3e:75:cc:b4:
78:af:b6:81:4f:84:77:4e:f8:6f:ea:ad:73:03:56:a9:36:e6:
07:40:75:e5:e7:b6:33:4f:d7:9e:c4:8c:c5:d6:6e:82:74:58:
dc:d3:79:6f:b8:9b:a5:91:20:7f:9b:e3:c6:12:22:3c:64:35:
fb:cb:f3:d3:23:34:34:5d:24:35:28:60:1a:be:e2:48:ac:b9:
66:57:5d:69:15:f0:c4:76:95:b7:54:74:6c:67:b9:86:3c:19:
ff:e1:9a:46:4f:c4:9d:67:15:2e:52:32:42:a2:68:b1:e9:a8:
c2:7b:33:fe:77:66:dd:4e:e1:1d:4c:39:45:3d:e0:7d:83:ee:
5b:99:ee:5b:a5:d8:37:6c:6a:2e:16:0c:4b:85:5f:07:5d:1c:
ae:82:bf:12:4b:c3:4b:78:53:21:72:4d:43:47:e3:1b:69:dc:
e5:2d:39:cf:61:9a:ad:92:4d:f3:5e:c0:6e:e3:e0:ad:01:ef:
21:b4:0f:75:44:82:94:59:53:7c:48:9f:90:c3:55:23:0c:df:
f2:4c:40:19:22:d8:54:f0:00:ab:fa:79:a3:c8:a2:c9:03:ce:
4a:48:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:04:20 2026 by rpki-client