Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier: Nfraf+51nmTI7W/Kti29rAek8jJINnfxCYw3WZInI18=
Subject key identifier: DE:10:83:82:9D:95:E3:7F:3F:27:52:CF:8F:D0:C2:FB:FE:56:CC:97
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial: 019D984FC919564F3F61BB2D141A85D60755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number: 1546
Signing time: Thu 16 Apr 2026 22:00:58 +0000
Manifest this update: Thu 16 Apr 2026 22:00:58 +0000
Manifest next update: Fri 17 Apr 2026 22:00:58 +0000
Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: 8v/NdksUgvp5qz5ZIEIcsydThcSi3lO775s/9PZCHrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:c9:19:56:4f:3f:61:bb:2d:14:1a:85:d6:07:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Validity
Not Before: Apr 16 22:00:58 2026 GMT
Not After : Apr 17 22:00:58 2026 GMT
Subject: CN=de1083829d95e37f3f2752cf8fd0c2fbfe56cc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:a9:5b:db:b7:f1:68:82:0c:93:1c:ff:b2:
98:6c:90:42:72:d6:f8:e7:ad:c0:4e:85:21:54:de:
26:59:5c:97:45:d7:1b:94:95:01:bf:f7:39:42:0f:
c1:dd:16:bd:70:ca:c1:c7:0b:55:12:34:f1:e1:ae:
a0:c0:c9:60:ac:8b:96:16:ab:40:94:34:38:17:af:
bd:73:83:d2:84:52:0a:45:09:d1:3c:15:ea:f1:a1:
6f:43:de:ff:23:12:2e:bb:46:86:30:8b:c0:f8:0f:
be:2c:21:73:10:91:56:dd:27:a7:e9:65:34:63:22:
02:b5:6c:b0:f6:8a:2c:5d:a4:9a:c6:05:f6:6f:a4:
7c:5d:bc:18:d4:76:5f:21:47:8b:63:37:f5:8f:b8:
d6:ee:a8:c0:f9:21:94:5d:3a:0c:a8:ac:ea:4c:34:
e4:af:89:cc:85:ad:9c:bc:bc:05:47:43:4d:fe:7c:
a0:e7:67:cd:41:8c:50:12:3b:fd:a1:fc:48:bd:50:
8b:c1:b5:da:48:01:ca:e4:61:ca:8f:a2:1e:93:d1:
a4:3b:fb:f6:2c:e2:68:b6:aa:65:27:b0:d8:79:dc:
d9:e0:5a:67:9c:73:80:01:0d:a1:e8:98:7e:26:a5:
35:bf:f6:b6:c3:32:3b:8e:95:9b:c7:54:74:e6:11:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:10:83:82:9D:95:E3:7F:3F:27:52:CF:8F:D0:C2:FB:FE:56:CC:97
X509v3 Authority Key Identifier:
keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e4:f3:31:f2:f5:cc:da:51:6c:0c:ed:41:74:94:18:89:3c:
f5:b9:af:aa:e5:6a:45:cc:e7:9b:8f:31:e8:a8:07:9c:13:75:
e8:f6:70:55:49:72:43:9e:5c:56:27:bf:1b:f6:dc:04:7f:1f:
05:f9:e3:b6:2c:f2:8f:c5:80:d6:d3:e7:8e:b8:7a:2b:74:4d:
15:17:d4:44:25:f3:86:bd:44:05:88:26:bd:de:90:f6:df:b0:
e6:cc:ea:fe:c6:9f:3e:0f:aa:28:ab:92:f3:cd:08:e5:60:1a:
22:15:30:76:32:96:7b:ed:ae:35:cf:c7:e1:76:5a:f3:a7:bf:
d0:fc:17:40:7f:4b:cd:a2:19:49:fa:26:fd:16:b8:8d:5a:5c:
7e:f7:c6:30:c4:71:24:92:b5:fb:36:16:d6:69:ad:1d:5a:89:
7f:7a:17:5a:a7:7a:2d:ac:d5:95:a4:08:14:64:43:cf:a2:1f:
d5:a7:da:fb:0c:df:38:2c:77:17:95:83:2a:db:74:fe:76:ae:
d2:99:cb:38:f7:8f:64:73:75:3c:78:d3:ff:d2:2d:56:70:28:
e1:2d:a9:ce:c6:ed:a6:13:f0:20:d7:d7:e7:84:c4:a5:88:f4:
f9:cc:1c:74:7c:74:48:11:ae:31:cb:7c:fd:d5:90:9f:2f:61:
87:ca:ca:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT8kZVk8/YbstFBqF1gdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMGJkMjJkNzZiNzQxNGU4ZTJjNTYwMjdiYjJhMWM0Yzg3
MTBkN2YwHhcNMjYwNDE2MjIwMDU4WhcNMjYwNDE3MjIwMDU4WjAzMTEwLwYDVQQD
EyhkZTEwODM4MjlkOTVlMzdmM2YyNzUyY2Y4ZmQwYzJmYmZlNTZjYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjypW9u38WiCDJMc/7KYbJBCctb4
563AToUhVN4mWVyXRdcblJUBv/c5Qg/B3Ra9cMrBxwtVEjTx4a6gwMlgrIuWFqtA
lDQ4F6+9c4PShFIKRQnRPBXq8aFvQ97/IxIuu0aGMIvA+A++LCFzEJFW3Sen6WU0
YyICtWyw9oosXaSaxgX2b6R8XbwY1HZfIUeLYzf1j7jW7qjA+SGUXToMqKzqTDTk
r4nMha2cvLwFR0NN/nyg52fNQYxQEjv9ofxIvVCLwbXaSAHK5GHKj6Iek9GkO/v2
LOJotqplJ7DYedzZ4FpnnHOAAQ2h6Jh+JqU1v/a2wzI7jpWbx1R05hGdMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4Qg4KdleN/PydSz4/Qwvv+VsyXMB8GA1UdIwQY
MBaAFHML0i12t0FOjixWAnuyocTIcQ1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2Yt
OTg4NzYzMjA3OGRlLzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZmI3YTgtZmE4ZS00ZmUxLTljN2YtOTg4NzYzMjA3OGRl
LzEvY3d2U0xYYTNRVTZPTEZZQ2U3S2h4TWh4RFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeTzMfL1
zNpRbAztQXSUGIk89bmvquVqRcznm48x6KgHnBN16PZwVUlyQ55cVie/G/bcBH8f
Bfnjtizyj8WA1tPnjrh6K3RNFRfURCXzhr1EBYgmvd6Q9t+w5szq/safPg+qKKuS
880I5WAaIhUwdjKWe+2uNc/H4XZa86e/0PwXQH9LzaIZSfom/Ra4jVpcfvfGMMRx
JJK1+zYW1mmtHVqJf3oXWqd6LazVlaQIFGRDz6If1afa+wzfOCx3F5WDKtt0/nau
0pnLOPePZHN1PHjT/9ItVnAo4S2pzsbtphPwINfX54TEpYj0+cwcdHx0SBGuMct8
/dWQny9hh8rKkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:21 2026 by rpki-client