Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier: Yy1O/Y48koRGkRABxCYMSSEkyK3t6uTfW+d63cpoEms=
Subject key identifier: B1:D2:8E:B5:01:22:42:14:47:59:DF:62:75:46:0F:0D:7C:D4:4D:E6
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial: 019CAAC69F8ACF18CC40DC5B5E3170819FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number: 14CB
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: Qi3/NxZbyjcMWgQeBkqHUDO7YUigssoOjSTkgsI5qAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9f:8a:cf:18:cc:40:dc:5b:5e:31:70:81:9f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=b1d28eb5012242144759df6275460f0d7cd44de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:6d:99:68:59:15:9b:7e:1c:59:c4:c6:f6:
7f:0e:c5:42:73:f1:a3:e8:11:a6:c2:78:cf:bc:9f:
ad:dd:d1:c1:79:65:5f:3d:c3:3f:19:4c:84:0a:b1:
b9:71:31:0c:e6:a0:60:9a:b0:49:8c:03:7c:38:2a:
f8:3c:1e:7d:6e:c9:90:fd:af:99:7a:fc:35:a9:1f:
f3:b7:e7:6a:4e:e9:ea:ec:0b:2b:70:3f:7d:8d:75:
06:a5:93:e0:08:6f:04:af:ce:56:3b:56:44:eb:92:
67:f5:cb:ba:00:e9:08:b6:a1:1a:87:c4:b2:81:c1:
84:64:32:44:bc:fb:0f:61:92:d0:10:fa:15:d0:4d:
16:80:c2:46:f1:6f:9c:df:b8:76:4d:82:b9:ae:63:
b8:90:a5:ef:c9:22:68:63:87:f6:4e:e1:06:f1:90:
c8:3a:4f:3f:10:d5:c5:5d:58:c9:70:6d:1d:62:64:
02:d7:75:48:97:62:aa:5b:91:f7:af:9b:73:5d:48:
49:2b:34:af:a3:0a:36:b7:59:72:d2:e5:d5:a1:82:
e3:dd:9a:1c:cc:59:b5:01:e9:1a:a9:a6:6c:27:56:
a5:72:b5:26:e2:de:4e:e7:3e:1c:c8:cb:d8:4a:38:
fc:4b:a3:84:0c:f3:19:c3:11:34:4f:5f:71:69:21:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D2:8E:B5:01:22:42:14:47:59:DF:62:75:46:0F:0D:7C:D4:4D:E6
X509v3 Authority Key Identifier:
keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:25:77:c1:30:82:dd:25:5d:1c:b5:40:ac:83:38:8b:77:b5:
a6:17:8e:50:b4:f9:19:28:3d:a0:ae:d5:71:da:ff:76:a1:70:
19:68:0b:82:4f:85:96:74:17:93:e6:8b:12:f6:8d:8b:c7:0d:
8f:ab:f0:87:c8:73:bb:b8:8f:44:b3:33:ec:7e:74:10:52:6b:
ab:5c:58:51:21:ae:69:27:9d:4e:f2:04:51:88:6b:ec:17:62:
13:9c:06:4a:6d:b0:47:c2:75:25:0c:ef:bd:d7:bf:38:49:3b:
78:12:9d:52:48:fe:47:e5:85:3d:3f:bf:c9:00:14:08:4a:5e:
3c:ac:52:72:29:6f:db:3e:8c:3a:ba:cf:f4:c6:57:6b:4b:7f:
a6:c2:c2:73:37:8a:99:73:1d:9b:2a:c7:9a:f8:57:8d:71:d8:
65:2c:36:38:59:4e:7b:85:da:9d:a8:d3:32:e0:e5:c5:62:0b:
25:10:33:c4:c9:38:a8:ed:e1:ff:6f:97:7d:9c:1d:78:ff:dd:
19:7c:77:4f:32:b1:6a:08:b8:e5:b9:41:b7:c7:93:01:34:89:
10:cd:95:af:6d:8a:92:d3:6f:d6:38:67:46:26:96:87:df:a4:
bb:f9:ac:de:a9:92:93:2b:d6:33:40:42:53:de:5f:de:23:4b:
75:b4:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:04 2026 by rpki-client