Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
File: CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft (raw, json)
Hash identifier: LfSpMZTvwhOTXyau5zJ7IB47hpgUmWoq/0qjz4em0Xs=
Subject key identifier: E0:93:40:64:84:33:2B:AC:17:77:44:AC:1B:E4:45:BE:F3:69:D9:69
Authority key identifier: 09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
Certificate issuer: /CN=0966d239db4031fd6f147f601a2bb6b033314069
Certificate serial: 01A0C7462BF1699488F01A12019354939037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
Manifest number: 013F
Signing time: Tue 22 Sep 2026 04:00:59 +0000
Manifest this update: Tue 22 Sep 2026 04:00:59 +0000
Manifest next update: Wed 23 Sep 2026 04:00:59 +0000
Files and hashes: 1: CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl (hash: 8B91X9433FfIQRGXzZ5thVRJDMzJnEfY7GQzhAw8Ut8=)
2: GZAShLfc8NeJgF1_NRDRN1m5XTs.roa (hash: lixfepr/Gg7h2VoWBQECGRTLGauSXIp4KHdFX4z+DOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:2b:f1:69:94:88:f0:1a:12:01:93:54:93:90:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966d239db4031fd6f147f601a2bb6b033314069
Validity
Not Before: Sep 22 04:00:59 2026 GMT
Not After : Sep 23 04:00:59 2026 GMT
Subject: CN=e093406484332bac177744ac1be445bef369d969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:68:6d:bd:b7:82:ab:9d:8c:e4:56:d0:fd:
3c:d6:b8:7c:19:7e:e3:30:58:7b:98:2b:7f:d9:1f:
65:ff:ca:24:40:5e:22:f5:db:f4:56:b5:36:ba:0f:
d2:f1:24:e0:52:66:47:e5:af:84:11:31:58:6a:9e:
7f:ca:75:bb:24:4f:93:78:2d:47:da:2c:5e:d3:b4:
dc:8e:f8:f8:ce:33:c6:5a:58:20:88:68:f4:81:1f:
84:44:b3:00:d6:f5:3e:da:77:7c:3e:6a:62:de:2e:
79:ef:38:eb:54:ac:2b:d9:2a:7b:5f:dd:b1:39:8b:
0f:4f:43:57:c0:9f:20:ea:e2:b9:00:e8:72:e8:36:
36:77:00:75:fd:8e:fa:50:ec:b2:32:7b:f7:ed:7a:
18:3b:ab:fd:5f:d5:d7:fd:c2:ee:76:72:ad:64:36:
9b:5e:b8:c8:17:f0:1d:e5:2c:7a:e6:f5:bc:85:ba:
d9:04:2d:9e:cd:d9:02:8c:60:ff:9e:67:36:10:a9:
2b:c7:d4:f3:12:45:60:ac:1f:fd:3c:15:a2:5d:0e:
2b:4e:73:a8:d6:1e:43:be:60:1c:5d:36:50:1e:66:
69:53:b6:95:80:9a:d3:96:af:47:34:7b:89:56:c1:
10:7f:2d:65:c4:00:00:74:0b:1c:da:fb:9a:72:b1:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:40:64:84:33:2B:AC:17:77:44:AC:1B:E4:45:BE:F3:69:D9:69
X509v3 Authority Key Identifier:
keyid:09:66:D2:39:DB:40:31:FD:6F:14:7F:60:1A:2B:B6:B0:33:31:40:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbSOdtAMf1vFH9gGiu2sDMxQGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b509cc-bd4d-4651-9e6e-0cf773f96899/1/CWbSOdtAMf1vFH9gGiu2sDMxQGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:7f:ef:28:28:38:3d:12:89:31:cf:eb:b1:10:42:bc:31:
11:40:95:37:05:9e:8c:e9:1a:48:0f:75:e3:4a:72:d9:8f:73:
80:6c:38:77:69:47:24:a4:68:ff:8e:70:25:dc:00:d2:e3:45:
44:e8:0f:d0:f8:14:ff:a0:f1:77:93:05:b4:55:12:85:72:4f:
b0:1c:2e:55:7e:0f:db:b2:e9:4b:d7:86:08:8e:55:a3:ff:89:
2e:cc:ab:78:ad:4b:3f:8b:57:e9:4f:89:a8:c1:61:3b:43:fb:
56:3e:48:3f:e9:80:fe:90:f2:99:6e:70:46:3c:28:42:c3:41:
a1:66:be:ff:f8:33:4d:d3:8d:a3:08:a8:c3:cc:f0:f8:b2:94:
97:41:1c:b3:56:98:96:1c:c1:41:cf:19:86:72:ee:60:37:ba:
f6:c2:5b:c2:af:3b:c7:4f:e6:77:2a:8a:21:3a:01:40:e5:65:
6b:85:18:07:0f:83:ad:4e:74:5b:71:4e:be:9d:d1:29:26:b3:
dc:b3:68:92:67:bf:23:89:4f:39:1d:10:23:28:1d:57:66:0d:
6c:b1:80:a0:52:c3:04:1f:5f:85:50:74:9d:78:ba:34:bf:b8:
bf:6e:63:63:88:b7:df:69:eb:04:44:9b:04:66:22:32:f6:36:
b5:94:08:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRivxaZSI8BoSAZNUk5A3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjZkMjM5ZGI0MDMxZmQ2ZjE0N2Y2MDFhMmJiNmIwMzMz
MTQwNjkwHhcNMjYwOTIyMDQwMDU5WhcNMjYwOTIzMDQwMDU5WjAzMTEwLwYDVQQD
EyhlMDkzNDA2NDg0MzMyYmFjMTc3NzQ0YWMxYmU0NDViZWYzNjlkOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vdobb23gqudjORW0P081rh8GX7j
MFh7mCt/2R9l/8okQF4i9dv0VrU2ug/S8STgUmZH5a+EETFYap5/ynW7JE+TeC1H
2ixe07Tcjvj4zjPGWlggiGj0gR+ERLMA1vU+2nd8Pmpi3i557zjrVKwr2Sp7X92x
OYsPT0NXwJ8g6uK5AOhy6DY2dwB1/Y76UOyyMnv37XoYO6v9X9XX/cLudnKtZDab
XrjIF/Ad5Sx65vW8hbrZBC2ezdkCjGD/nmc2EKkrx9TzEkVgrB/9PBWiXQ4rTnOo
1h5DvmAcXTZQHmZpU7aVgJrTlq9HNHuJVsEQfy1lxAAAdAsc2vuacrFTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCTQGSEMyusF3dErBvkRb7zadlpMB8GA1UdIwQY
MBaAFAlm0jnbQDH9bxR/YBortrAzMUBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1diU09kdEFNZjF2Rkg5Z0dpdTJzRE14UUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNTA5Y2MtYmQ0ZC00NjUxLTllNmUt
MGNmNzczZjk2ODk5LzEvQ1diU09kdEFNZjF2Rkg5Z0dpdTJzRE14UUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNTA5Y2MtYmQ0ZC00NjUxLTllNmUtMGNmNzczZjk2ODk5
LzEvQ1diU09kdEFNZjF2Rkg5Z0dpdTJzRE14UUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEl/7ygo
OD0SiTHP67EQQrwxEUCVNwWejOkaSA9140py2Y9zgGw4d2lHJKRo/45wJdwA0uNF
ROgP0PgU/6Dxd5MFtFUShXJPsBwuVX4P27LpS9eGCI5Vo/+JLsyreK1LP4tX6U+J
qMFhO0P7Vj5IP+mA/pDymW5wRjwoQsNBoWa+//gzTdONowiow8zw+LKUl0Ecs1aY
lhzBQc8ZhnLuYDe69sJbwq87x0/mdyqKIToBQOVla4UYBw+DrU50W3FOvp3RKSaz
3LNokme/I4lPOR0QIygdV2YNbLGAoFLDBB9fhVB0nXi6NL+4v25jY4i332nrBESb
BGYiMvY2tZQIrg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:04:58 2026 by rpki-client