Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
File: CWUHv9kVIo3x0Hqn0GfURCzttFs.mft (raw, json)
Hash identifier: bJQWmLYsuwN4g3Bmec1zvhHT/C3XRQ47Mmsoih9icx4=
Subject key identifier: 1E:A2:09:8B:65:B5:4B:1E:2A:0D:D2:3D:D3:D0:F0:4A:42:B0:2E:F2
Authority key identifier: 09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
Certificate issuer: /CN=096507bfd915228df1d07aa7d067d4442cedb45b
Certificate serial: 019FAA1981637D02E93091B7AD8C09C10078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
Manifest number: 4E
Signing time: Tue 28 Jul 2026 19:00:25 +0000
Manifest this update: Tue 28 Jul 2026 19:00:25 +0000
Manifest next update: Wed 29 Jul 2026 19:00:25 +0000
Files and hashes: 1: CWUHv9kVIo3x0Hqn0GfURCzttFs.crl (hash: /MX6iklHJaLkwdQmkj5M9EvbU4ByYR4piouk7ScMGro=)
2: ztqWMk9aRM6Ky0IAoscpnekSXpA.roa (hash: bnmXKmu5kt8lvX6cZMu/9l/QC9fmTJ80CL2ADfdOE4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:81:63:7d:02:e9:30:91:b7:ad:8c:09:c1:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096507bfd915228df1d07aa7d067d4442cedb45b
Validity
Not Before: Jul 28 19:00:25 2026 GMT
Not After : Jul 29 19:00:25 2026 GMT
Subject: CN=1ea2098b65b54b1e2a0dd23dd3d0f04a42b02ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:e6:92:c9:54:3f:ca:cd:2d:be:c9:2d:62:
4a:66:64:39:ba:98:14:f2:fb:65:e1:cb:f9:21:08:
80:ac:f2:40:ec:69:ea:e6:2b:a7:95:18:84:9e:01:
e6:e8:5c:15:a5:4c:2b:6a:fc:2b:db:73:fe:9d:fc:
52:74:d6:6c:1a:f6:98:9e:65:26:91:e7:af:e0:e3:
6b:ee:06:b0:dc:15:3b:1c:c1:b3:18:8f:d9:4b:b9:
fc:9d:d1:e7:f3:a9:73:00:1b:cd:20:d6:70:fa:fc:
71:d2:b3:78:81:e0:9a:0c:78:32:d9:4f:77:04:fa:
b1:5d:f8:0c:2b:02:b5:6b:fc:7e:8f:1a:58:63:13:
88:dd:23:93:ee:97:6a:e0:24:27:d8:bf:bd:7a:09:
61:08:7d:8d:24:47:03:40:f4:7b:ce:95:af:df:b2:
b4:9e:3c:0b:6c:0f:e9:60:15:32:da:65:af:7e:53:
4b:ef:c9:44:14:40:65:d5:d1:1a:ff:a6:be:fb:bd:
cc:09:0a:03:29:19:b7:26:a2:c6:4b:f7:18:e0:01:
55:59:99:e7:14:81:ee:48:d1:c4:cf:a7:45:7b:e6:
cd:0c:33:f6:4d:9d:3f:2c:27:0e:9f:83:37:60:06:
7f:ed:71:57:70:6b:e7:64:65:50:72:48:0c:98:46:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A2:09:8B:65:B5:4B:1E:2A:0D:D2:3D:D3:D0:F0:4A:42:B0:2E:F2
X509v3 Authority Key Identifier:
keyid:09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:44:8c:23:39:3f:85:3f:23:05:3d:83:e5:b1:b8:fb:b2:e5:
39:ec:da:1b:44:ad:14:ab:4e:15:e2:cb:08:93:9d:a0:3a:b1:
d4:2c:38:76:a7:7e:66:c4:f9:6c:a5:6e:7c:bb:4b:17:df:6c:
bf:c5:aa:74:b1:27:b1:7a:bc:53:51:5d:8a:7b:a0:64:a0:5a:
29:64:9e:98:52:40:47:48:11:2e:00:d7:46:3d:b8:ff:35:c6:
33:b2:0b:3b:8b:63:6b:68:62:3f:5d:73:79:90:60:24:be:7a:
67:56:5c:e4:bb:03:76:79:a8:e3:e0:d7:2e:ad:ba:54:97:61:
0c:41:87:3b:6e:00:a9:05:92:e1:1f:0f:ba:1a:4e:36:2f:3b:
5e:36:63:e7:a8:0f:73:4d:6c:44:14:fb:d4:08:8c:75:38:f4:
a9:43:81:c5:92:bc:8e:d1:d8:ee:fb:6a:7b:fe:31:ad:3b:ee:
25:4f:ef:28:e7:b3:c6:c7:69:27:18:fb:6f:c7:9d:ad:5a:6b:
14:fc:ab:97:02:58:83:0c:d1:eb:5d:c5:2c:1f:ac:18:c1:32:
ab:aa:97:18:0b:0d:15:bc:2f:3c:f2:9d:82:81:d7:8b:b7:88:
a1:70:3e:a7:72:4c:3c:68:97:44:63:00:a7:ff:0f:c5:95:a6:
0a:bb:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:15:23 2026 by rpki-client