Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: OtkI3ZUgP9N/FRXuxOemsVmS6MBSzQ9BR53DdmzV738=
Subject key identifier: A0:5A:E9:A3:37:B5:62:3F:A6:D6:E6:10:C9:B7:DB:25:B3:4E:90:87
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 019CAD904ACCFA4DC859ABF03BF27FBDA1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 08:00:40 +0000
Manifest this update: Mon 02 Mar 2026 08:00:40 +0000
Manifest next update: Tue 03 Mar 2026 08:00:40 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: uqnyqfeZkAtRquyacvZOYtaierW9XXHw/2JSc7KlwC4=)
2: F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa (hash: o3HWTI0PQBnlxwZ0HTjSHPzc9P+I/nJ/EvAewhiwD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4a:cc:fa:4d:c8:59:ab:f0:3b:f2:7f:bd:a1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Mar 2 08:00:40 2026 GMT
Not After : Mar 3 08:00:40 2026 GMT
Subject: CN=a05ae9a337b5623fa6d6e610c9b7db25b34e9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:36:82:1b:f7:e1:c0:2f:9a:e7:ab:c3:6a:
a0:6b:f7:43:26:b4:b8:33:36:48:a2:a2:4f:6d:c3:
9b:09:b3:e7:c1:df:63:89:10:07:58:11:93:e1:1d:
e2:a8:0e:ac:4f:8d:21:4e:f3:ac:b5:9a:19:d8:ac:
3c:fd:c3:e0:a8:fa:24:de:2c:64:4a:20:70:53:fa:
83:3e:9c:de:a6:9d:54:b8:ff:39:a4:55:4e:dd:4f:
58:22:9c:e3:58:78:89:94:48:0d:85:b1:78:56:31:
1b:36:69:33:cb:99:a0:c7:04:ad:83:0f:43:7d:74:
ad:be:e8:30:32:23:ff:41:d9:f9:9b:a3:e8:47:e6:
05:ed:87:ac:64:17:01:34:2a:fd:bc:df:0e:5f:2b:
19:0b:16:1f:18:93:a2:f7:f3:f6:da:15:63:f3:8d:
9f:e5:18:c2:71:9c:e8:4c:dc:20:fd:e4:5a:67:55:
18:8c:52:23:e3:e2:41:cb:68:26:00:a4:9f:e0:41:
2a:3d:14:3c:3b:24:da:2e:ee:f2:09:04:8e:89:d9:
df:78:54:58:3e:fb:f3:c2:b5:d5:70:ce:d0:72:82:
29:91:d0:3b:91:e9:dd:2c:81:ee:a4:3f:a4:61:44:
ef:bb:9c:59:1e:58:59:45:0d:e4:42:f3:0c:61:a8:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5A:E9:A3:37:B5:62:3F:A6:D6:E6:10:C9:B7:DB:25:B3:4E:90:87
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2b:71:78:50:25:51:17:fd:ec:b6:b5:74:90:44:c4:13:f1:
0a:91:8b:57:bb:d4:c7:6e:57:88:d6:56:1d:55:4c:9f:44:21:
71:4b:ac:5a:04:19:23:e0:b4:21:ec:b5:f4:aa:2f:6b:fa:d9:
62:21:7c:8b:14:00:df:38:df:40:14:98:fe:e2:3a:3e:b4:b9:
10:76:8a:f0:18:8f:73:b9:a6:1c:63:ee:a2:02:73:b8:f0:de:
10:1f:8b:6e:a0:28:a9:0f:00:d2:1e:59:e2:cb:e5:6d:05:3d:
fd:dd:d6:16:7d:e1:71:9b:0b:d0:15:49:db:b3:34:e3:f9:be:
53:f0:4f:b5:54:2b:66:c3:6f:bc:b9:e5:ff:32:00:92:4d:93:
43:50:cd:1c:cc:a0:c1:5b:76:bc:5f:ed:0f:60:f6:77:1e:78:
af:84:1c:1b:e9:70:a3:ef:b4:4f:8c:17:a0:f4:a2:bd:9b:6b:
65:90:76:6c:4c:49:c1:47:a9:71:3e:b8:de:9d:a8:0a:50:26:
df:29:74:30:7b:2b:25:e0:1d:66:35:25:20:58:d7:39:70:70:
58:00:81:cb:68:e9:8e:5f:9d:46:64:ee:6b:26:06:f3:b2:f5:
b2:b1:a9:2b:8d:95:46:3d:2d:0d:64:17:96:10:98:2e:b2:2e:
56:aa:f6:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkErM+k3IWavwO/J/vaHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMDgzODA4NzYzYzI2MjU0MTAyMGQyZTgxZGEzNGFhYTM4
MjgzYjcwHhcNMjYwMzAyMDgwMDQwWhcNMjYwMzAzMDgwMDQwWjAzMTEwLwYDVQQD
EyhhMDVhZTlhMzM3YjU2MjNmYTZkNmU2MTBjOWI3ZGIyNWIzNGU5MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+42ghv34cAvmuerw2qga/dDJrS4
MzZIoqJPbcObCbPnwd9jiRAHWBGT4R3iqA6sT40hTvOstZoZ2Kw8/cPgqPok3ixk
SiBwU/qDPpzepp1UuP85pFVO3U9YIpzjWHiJlEgNhbF4VjEbNmkzy5mgxwStgw9D
fXStvugwMiP/Qdn5m6PoR+YF7YesZBcBNCr9vN8OXysZCxYfGJOi9/P22hVj842f
5RjCcZzoTNwg/eRaZ1UYjFIj4+JBy2gmAKSf4EEqPRQ8OyTaLu7yCQSOidnfeFRY
PvvzwrXVcM7QcoIpkdA7kendLIHupD+kYUTvu5xZHlhZRQ3kQvMMYaiyowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBa6aM3tWI/ptbmEMm32yWzTpCHMB8GA1UdIwQY
MBaAFAsIOAh2PCYlQQINLoHaNKqjgoO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmIt
NDY5MjVjNTI0OWU2LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmItNDY5MjVjNTI0OWU2
LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCtxeFAl
URf97La1dJBExBPxCpGLV7vUx25XiNZWHVVMn0QhcUusWgQZI+C0Iey19Kova/rZ
YiF8ixQA3zjfQBSY/uI6PrS5EHaK8BiPc7mmHGPuogJzuPDeEB+LbqAoqQ8A0h5Z
4svlbQU9/d3WFn3hcZsL0BVJ27M04/m+U/BPtVQrZsNvvLnl/zIAkk2TQ1DNHMyg
wVt2vF/tD2D2dx54r4QcG+lwo++0T4wXoPSivZtrZZB2bExJwUepcT643p2oClAm
3yl0MHsrJeAdZjUlIFjXOXBwWACBy2jpjl+dRmTuayYG87L1srGpK42VRj0tDWQX
lhCYLrIuVqr2rQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:25 2026 by rpki-client