Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: skSyOTBEcaxtH6vqQUbCqYBanrhvJANdu+XJLDKV2Fc=
Subject key identifier: 55:0A:5B:B6:9B:4E:1B:26:22:82:50:08:91:70:73:18:1F:60:7E:7B
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 01A0DBDFA7AC3D0A63C524C70A8F38B4B398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 12B3
Signing time: Sat 26 Sep 2026 04:01:02 +0000
Manifest this update: Sat 26 Sep 2026 04:01:02 +0000
Manifest next update: Sun 27 Sep 2026 04:01:02 +0000
Files and hashes: 1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: aDvdDtnvrBjliEAh1LaKplkJvCPc1Og0Cp1Ah3gkaPQ=)
2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:a7:ac:3d:0a:63:c5:24:c7:0a:8f:38:b4:b3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Sep 26 04:01:02 2026 GMT
Not After : Sep 27 04:01:02 2026 GMT
Subject: CN=550a5bb69b4e1b2622825008917073181f607e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:98:92:8c:52:e7:0e:68:ae:32:b9:d7:5b:
72:04:e7:e6:6f:b2:81:a2:6e:c4:94:d1:90:f8:8f:
74:53:7a:d0:c4:59:f0:ed:b0:0e:eb:f5:45:f0:e8:
a0:e5:0f:51:7e:17:35:55:e3:19:a4:b6:e8:2f:87:
09:3d:45:aa:72:46:80:0c:b7:56:64:8d:e1:f7:d4:
e3:31:ac:55:b9:6b:05:ee:9b:cb:ec:08:6b:bf:31:
0b:51:18:8a:bb:7e:f5:60:94:21:73:f9:1e:35:2c:
ab:3d:20:80:8d:e1:56:a6:ba:9a:cf:d6:93:2c:82:
f5:ff:05:15:83:0f:02:b7:de:8f:9c:92:47:97:aa:
35:08:ae:a4:91:c1:ec:c2:8a:bd:03:74:6d:e3:6e:
d5:91:fe:2d:1d:2c:0f:fc:71:e6:d2:c4:19:a5:5c:
c6:77:a3:72:cd:22:34:75:b2:51:6f:fd:b6:d0:2c:
ee:e0:fd:d3:5d:d4:3f:6f:86:f0:59:5f:83:5c:30:
29:65:bc:cc:36:ff:12:31:45:d9:fb:7e:dc:12:70:
5b:1a:e1:27:7f:b6:40:8d:f0:fe:74:0f:c5:88:e8:
f7:08:89:a5:9c:57:e8:13:ab:8e:75:f8:96:e4:a1:
e5:2f:d6:5e:51:ee:47:32:7c:94:0f:c0:74:c6:1d:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:5B:B6:9B:4E:1B:26:22:82:50:08:91:70:73:18:1F:60:7E:7B
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:86:24:10:17:9d:de:39:cd:0f:47:f7:57:ce:8a:e2:3d:0c:
e2:75:a5:51:b1:54:06:29:bf:54:18:30:c3:e9:f9:2f:c0:2e:
37:45:25:97:f5:f6:f7:a3:b6:56:49:3d:d6:9f:37:f3:27:29:
f6:70:f7:78:81:69:76:43:ed:f3:b7:66:be:cd:e0:9a:59:e2:
d4:ef:e3:de:2f:a3:62:18:f0:75:74:4d:f7:7d:a7:e1:6a:46:
01:71:2d:fb:0e:82:77:ae:15:6c:e7:2c:73:3e:25:2b:94:57:
01:28:1b:b4:de:00:8c:c6:94:2c:fa:5c:02:44:fa:ec:18:22:
da:58:d3:dc:ea:36:0c:9f:37:17:0d:a5:60:9c:67:af:e9:01:
d9:20:2f:68:c6:19:ed:8e:68:8f:97:0e:66:93:c6:4e:fc:e1:
2a:6d:1c:bc:ed:f6:af:5f:74:3f:20:35:7c:79:85:cd:ce:3d:
ee:d8:bd:da:43:53:87:b2:b5:30:31:55:7c:74:f9:bc:26:82:
6f:7c:de:f4:0b:ec:7d:c7:fc:7a:19:4c:98:96:4f:0d:c6:d6:
54:1b:55:97:4b:38:ba:15:16:53:12:16:08:58:f2:6e:74:41:
c5:58:b5:b3:22:aa:b1:cd:cf:63:ed:96:e1:59:23:a5:36:21:
54:18:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:22:21 2026 by rpki-client