Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: ZECcuk1AVxwGgnjjFnYAeK84PZYgK9Zy3ER6sA1SbEU=
Subject key identifier: 07:99:97:60:13:B2:42:54:AE:27:80:28:92:BF:77:D3:CB:7B:85:8D
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 019FAABE5A215B88D06CA560BBE92425789B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 1215
Signing time: Tue 28 Jul 2026 22:00:29 +0000
Manifest this update: Tue 28 Jul 2026 22:00:29 +0000
Manifest next update: Wed 29 Jul 2026 22:00:29 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: fDcDEmy6x+YX4gjWp88AnoT2hiqXc4FD39W6Dt/exiM=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:5a:21:5b:88:d0:6c:a5:60:bb:e9:24:25:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jul 28 22:00:29 2026 GMT
Not After : Jul 29 22:00:29 2026 GMT
Subject: CN=0799976013b24254ae27802892bf77d3cb7b858d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:92:e0:12:13:c5:63:16:1a:46:02:4b:27:
14:f9:ce:53:d4:da:da:dc:53:8e:74:3c:5c:dd:57:
84:ae:9c:04:cd:3f:d3:69:69:6e:ed:99:e5:4f:44:
a0:bc:1b:2c:7e:57:4c:60:55:e7:5c:59:e6:b4:e3:
77:4f:6d:b2:e5:aa:04:7a:0a:84:33:ba:9f:94:6f:
f1:a3:3e:f2:34:3f:6d:57:15:4f:fe:f9:12:78:5a:
48:69:ba:3a:b6:4c:a5:d1:85:dc:2b:a6:7c:f3:b6:
27:1d:b7:9a:9e:50:2f:0e:60:b8:75:bb:78:d1:59:
fe:96:27:a6:3d:7c:01:5e:3e:13:0c:62:6e:18:17:
17:5a:2c:e9:80:e2:f2:73:bc:18:a1:da:93:a0:4c:
26:ed:64:96:cd:34:4e:6c:04:78:d0:8e:63:43:ad:
85:23:cf:51:17:3a:b4:e2:ea:25:74:9f:31:9c:46:
cb:d6:1f:b2:22:2d:2b:c2:21:9d:b6:61:fa:83:12:
ae:97:83:93:cc:fa:37:9a:10:b0:bc:11:32:fc:e6:
b5:f8:7d:e3:f6:88:08:cb:71:11:8a:95:45:df:01:
b8:2b:81:53:fb:f1:43:60:2b:87:e4:27:3d:cf:b5:
d5:43:d4:30:95:37:b0:fd:c9:10:7a:5b:c7:f8:af:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:97:60:13:B2:42:54:AE:27:80:28:92:BF:77:D3:CB:7B:85:8D
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6e:54:b7:b3:5d:2e:36:5d:37:c9:6f:4a:64:1f:15:43:ef:
be:53:8a:b8:bc:29:ee:86:bb:19:3c:27:47:58:9e:d9:bd:2a:
56:b8:e1:f1:e8:73:5b:5e:aa:53:13:b6:25:e7:6c:9c:c2:a7:
6c:07:15:e7:b5:55:f0:d7:e4:18:fb:15:7e:d1:87:02:52:d7:
06:04:b2:e6:f2:77:60:6d:c2:4e:60:27:f2:a1:54:5f:18:a0:
8d:fa:34:99:89:24:b5:43:e9:f0:d2:7f:ae:c7:92:bb:26:e6:
03:fa:33:44:6b:81:a7:34:74:ef:3f:bf:69:89:81:0e:0c:72:
e0:46:da:c6:59:3f:a4:53:bd:38:c5:82:5d:4b:02:17:86:ef:
a9:5d:c0:08:d8:24:86:b6:95:a7:4d:b1:9f:7b:29:39:32:ec:
89:69:a0:e9:71:2d:59:98:cb:99:9f:7d:13:c2:5f:4b:ea:a8:
b8:03:77:de:68:96:20:c8:27:8d:2c:e4:22:b2:41:4f:e6:69:
0e:bf:1f:52:6d:f9:df:19:35:e8:9f:fb:f9:3c:e6:ab:4b:89:
d1:36:a1:a2:40:ab:eb:80:89:17:c6:c0:90:46:7c:59:ff:83:
9f:32:0b:f1:da:24:a7:e5:c4:6f:92:45:44:e4:7a:33:f8:9b:
53:08:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:17 2026 by rpki-client