Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File: CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier: QTby3dbMOg5cvA4RKQ9JqrOIpTlizjlNwzVUMG5x25Q=
Subject key identifier: D6:C9:4F:9C:36:11:C4:28:17:07:90:51:49:1A:A5:EB:DD:F3:79:8E
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 019FA974C3FC4B7C72560DCFBD9E7FEF4D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number: 0B3A
Signing time: Tue 28 Jul 2026 16:00:29 +0000
Manifest this update: Tue 28 Jul 2026 16:00:29 +0000
Manifest next update: Wed 29 Jul 2026 16:00:29 +0000
Files and hashes: 1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: MGPNO030GoDtn8UTQz8QBa3iphKDBBcEmhUK3jOXJqY=)
2: RsTSr-3jTnG1CeXmaL5yjIv3e7A.roa (hash: U9h7mXi2TPfXP2mWBMjzpDcUhTXc3t6ZDS7Y90GMnqI=)
3: V2mAUhiuLSdY43WTX18t68JU52U.roa (hash: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM=)
4: ZYguphbq_OVZXqnSVXPcyY-MrWU.roa (hash: YBNSr4xuGhr4HSUuVKzH8avlZXqqbx+cNVBs9dQx+pg=)
5: kNW-FofDRFcYyJ6jdZntLsWi_kQ.roa (hash: vsRui+TumYQf+mEKOxKsjjJTMlbNB6Ytf/Fua/xhVUM=)
6: ksfa6RQDM_0VxmjR64arGWZD9rM.roa (hash: eBadilkI77a4zTmLhePWsFBGmFNKACYzx+SMzHBV/40=)
7: yNd_DMkIMvgYnrn_7Wsari1U2DE.roa (hash: IEhZvaGq91qhQu5JNN1NRfY/8v2XmumSPV2Zm2UUU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c3:fc:4b:7c:72:56:0d:cf:bd:9e:7f:ef:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Jul 28 16:00:29 2026 GMT
Not After : Jul 29 16:00:29 2026 GMT
Subject: CN=d6c94f9c3611c42817079051491aa5ebddf3798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:ec:a5:8b:8f:d4:a9:28:a1:d3:6a:e7:f7:
cc:08:97:d9:07:90:3a:46:de:2c:1a:9e:a6:1c:47:
2c:f7:29:4a:ca:c5:83:b2:43:05:e7:45:c2:5e:13:
ef:59:fa:a6:a8:b7:fc:7c:d4:fa:6d:b2:bc:da:b2:
42:c5:3e:e8:c0:4e:54:94:9d:14:71:6d:72:f8:33:
6a:94:b2:1f:07:96:ba:0a:c9:d2:b5:7e:96:31:40:
f5:24:c6:5b:ee:8e:52:d8:9b:93:ba:85:f2:e9:e2:
b4:c3:68:be:5c:28:ef:7e:66:24:10:d3:0d:6a:f8:
e4:b4:7e:0d:f0:dd:83:b4:94:cb:6e:84:05:5d:f3:
c1:b1:a0:97:0c:03:f2:c0:a8:01:dc:6b:41:c4:b7:
fd:78:aa:a9:b3:44:f2:25:4d:10:a1:6e:1b:52:0d:
28:bc:f3:31:b0:3c:d1:9e:04:02:01:3c:f2:e5:a3:
be:87:0d:63:dd:c0:9d:71:19:a1:b3:6f:ba:46:11:
2f:fb:1a:10:9b:8b:da:32:82:06:7f:4e:f4:e6:bf:
a6:b6:73:0a:c7:53:99:02:77:e3:ae:9d:8b:e7:74:
8b:34:11:97:e4:d6:44:3a:a5:ad:ed:5e:e5:ed:98:
d1:f0:da:82:69:ec:7d:d3:3e:20:ef:76:1f:a5:17:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:4F:9C:36:11:C4:28:17:07:90:51:49:1A:A5:EB:DD:F3:79:8E
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:94:b4:14:70:f1:40:10:ed:91:99:0d:f2:51:d9:be:16:72:
0f:cc:05:24:86:54:2f:2e:51:7a:9a:ae:98:1c:c0:f0:9d:0b:
77:5e:9e:c0:3a:0f:be:e8:80:14:19:9f:8b:c8:c6:01:bb:bb:
70:ab:b6:42:f8:d9:c2:66:d7:92:d1:0d:2a:19:57:44:39:d0:
98:3e:73:44:3e:bf:2d:37:61:5d:55:60:04:d9:08:40:cf:85:
f5:03:07:ec:76:e1:d7:d9:1f:92:d6:97:e7:a1:9f:de:c2:82:
de:87:7c:39:d3:5d:42:35:30:bf:3d:65:4e:12:d9:41:cc:08:
f5:76:fa:ba:10:b8:bb:bb:c2:ef:c4:43:88:eb:c6:a4:f5:ea:
86:2d:7b:00:a3:3c:51:83:91:75:0a:48:f7:23:39:ad:54:0c:
11:9e:b2:a3:92:56:2c:c0:85:23:67:ef:c5:d6:02:9e:fe:dd:
10:b8:61:79:0f:1b:53:0f:f9:d1:25:6d:b0:ca:7e:c8:18:e4:
a4:bd:90:58:b3:fc:ac:e0:c4:9f:ea:b2:44:bf:e4:29:1a:33:
04:d4:e6:44:53:10:15:81:63:df:83:9d:8c:80:61:ae:af:1c:
f1:99:3f:ca:de:72:c0:88:03:c5:da:df:45:45:d1:e1:eb:61:
d3:ea:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:14 2026 by rpki-client