Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File: CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier: +vWK5nP2kHD4RCu3GTfkyoGYV8v081AhuVEBRefMaFo=
Subject key identifier: 11:1B:B8:6E:92:F5:0A:78:D6:FA:86:63:97:F0:56:C9:7D:15:65:DA
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 019EBFC89834FEDBC26F08021D236FC1FBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number: 0AC1
Signing time: Sat 13 Jun 2026 07:00:54 +0000
Manifest this update: Sat 13 Jun 2026 07:00:54 +0000
Manifest next update: Sun 14 Jun 2026 07:00:54 +0000
Files and hashes: 1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: AecMGAanG1XXsZEYXUScEeHyDqsEUXSFCBJlXZFJwus=)
2: RsTSr-3jTnG1CeXmaL5yjIv3e7A.roa (hash: U9h7mXi2TPfXP2mWBMjzpDcUhTXc3t6ZDS7Y90GMnqI=)
3: V2mAUhiuLSdY43WTX18t68JU52U.roa (hash: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM=)
4: ZYguphbq_OVZXqnSVXPcyY-MrWU.roa (hash: YBNSr4xuGhr4HSUuVKzH8avlZXqqbx+cNVBs9dQx+pg=)
5: kNW-FofDRFcYyJ6jdZntLsWi_kQ.roa (hash: vsRui+TumYQf+mEKOxKsjjJTMlbNB6Ytf/Fua/xhVUM=)
6: ksfa6RQDM_0VxmjR64arGWZD9rM.roa (hash: eBadilkI77a4zTmLhePWsFBGmFNKACYzx+SMzHBV/40=)
7: yNd_DMkIMvgYnrn_7Wsari1U2DE.roa (hash: IEhZvaGq91qhQu5JNN1NRfY/8v2XmumSPV2Zm2UUU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:98:34:fe:db:c2:6f:08:02:1d:23:6f:c1:fb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Jun 13 07:00:54 2026 GMT
Not After : Jun 14 07:00:54 2026 GMT
Subject: CN=111bb86e92f50a78d6fa866397f056c97d1565da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:4f:c9:ce:21:09:f8:d2:81:ce:b8:38:fb:
7d:d0:de:5b:76:bb:00:79:1f:93:77:a8:e2:c2:c4:
3d:38:fb:8b:6e:a4:b9:47:82:fe:21:34:29:98:ac:
b9:1c:3d:f4:7a:d2:a0:28:ac:af:84:9c:99:60:aa:
73:17:d3:fa:3e:f6:d3:8a:85:79:23:94:cb:92:36:
c7:85:29:b0:57:87:45:87:a2:14:54:ba:bb:09:b2:
ed:15:91:b0:8c:d1:8f:8b:89:fc:18:b6:a0:2f:2c:
17:ea:21:44:c3:f6:a4:f7:93:34:67:21:e1:b4:9a:
ea:0f:65:c6:25:87:3f:ec:e6:a0:e4:3b:07:6c:49:
13:08:40:bc:c9:ed:eb:62:4a:3d:ca:11:27:4c:a5:
f0:b0:ba:da:45:77:9e:81:bb:9c:46:2d:3e:14:97:
f9:32:24:a4:79:5e:70:87:b0:1c:69:38:20:00:00:
18:cd:2d:9d:f4:6b:7e:04:e7:26:46:67:55:41:d1:
7e:d3:32:2c:73:4a:af:6f:8e:67:01:a5:25:19:2a:
6c:99:70:47:24:ff:60:a9:d7:c7:74:d5:e0:8b:45:
85:ca:f7:e2:1e:1a:68:5b:fb:6d:06:7e:21:9b:da:
b0:b6:29:44:ba:20:bd:aa:28:6c:97:57:4c:ee:44:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:B8:6E:92:F5:0A:78:D6:FA:86:63:97:F0:56:C9:7D:15:65:DA
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:7f:aa:2c:36:d7:02:63:de:95:0b:c7:4b:3d:b4:2e:11:
5c:61:66:3d:fb:2c:76:66:76:e6:de:60:20:7d:57:c5:1e:54:
f1:77:03:74:e8:da:e4:9b:fb:41:b6:5e:19:ff:67:10:ab:77:
dc:82:bf:08:8c:c7:4b:4e:6f:98:ed:37:ac:d4:1b:c6:f7:f4:
04:b6:84:c2:98:83:3b:ce:95:4f:97:3c:6d:57:55:6a:c2:74:
a0:fe:1a:ae:f6:aa:91:55:53:8b:92:54:4e:ed:41:d6:18:ca:
ae:3f:ac:c6:fb:c3:49:2b:92:61:de:eb:91:18:63:1e:62:cc:
11:61:91:78:70:e3:04:34:f2:1d:de:b3:67:19:e6:8d:16:3f:
9d:c4:66:0d:fe:61:4a:98:11:50:c7:e9:a4:b5:67:b1:cf:5d:
a7:9c:f5:eb:ea:ce:f8:c0:bb:ae:e7:81:db:40:4a:e1:86:c5:
b3:bb:c4:ae:b6:6a:bb:ca:78:90:9d:f3:3c:91:76:2d:4f:67:
61:84:e1:a6:56:94:cf:59:b2:14:18:a4:df:4f:3b:c2:4b:c6:
e3:c4:72:13:8d:fc:cf:a9:92:5f:aa:32:3a:53:14:3d:44:29:
1e:8d:33:60:7c:62:b2:fd:b2:a5:14:25:c3:89:fc:fc:ad:d3:
c0:15:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:40 2026 by rpki-client