Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: 4CIrqYts9eQo2H4zKDCt8BhjjQlkUNEaxcHfW8bdRyQ=
Subject key identifier: 2A:6C:11:11:42:2C:7A:18:D4:16:A3:E7:29:BF:E0:E0:04:F4:7E:EC
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 01A0C2C40F0EEDE8FE05E4D45306AEAE9491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 0CF2
Signing time: Mon 21 Sep 2026 07:00:23 +0000
Manifest this update: Mon 21 Sep 2026 07:00:23 +0000
Manifest next update: Tue 22 Sep 2026 07:00:23 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: mm8BBHr1rOlhBTExprmjULCcgYWPkpwLsUrLpR7ntIw=)
2: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (hash: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:0f:0e:ed:e8:fe:05:e4:d4:53:06:ae:ae:94:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Sep 21 07:00:23 2026 GMT
Not After : Sep 22 07:00:23 2026 GMT
Subject: CN=2a6c1111422c7a18d416a3e729bfe0e004f47eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:cf:4f:6b:a1:d4:e2:dc:94:86:45:c8:18:
59:cf:73:78:42:fb:db:57:41:aa:02:16:4a:d8:93:
f4:c7:50:25:fa:33:91:ff:ca:e9:b5:a9:cb:47:7c:
25:08:73:cd:bc:bf:59:88:79:a2:e0:89:9b:ad:08:
8e:ef:c5:d1:58:fd:0d:55:d3:42:f6:cf:e3:c7:57:
07:3e:79:18:52:ad:ad:ac:2e:31:64:c0:5e:d1:64:
da:26:d2:bc:fa:10:28:14:2f:28:1a:ec:c5:d3:09:
a6:cf:07:83:c9:4f:8a:49:30:a8:23:55:c0:89:8e:
19:71:24:72:2f:e5:ca:cd:ec:44:b4:d2:cb:57:08:
2e:f4:45:f5:c8:13:05:f2:02:d4:30:c9:0d:42:a7:
be:e5:05:90:75:62:58:0d:06:0c:97:4e:7a:8d:ed:
1a:65:8b:9e:a8:e4:34:a2:1c:3a:73:99:4d:f9:29:
70:8b:64:c2:b2:73:9d:0f:a5:fb:79:32:a1:9b:0c:
45:ce:5c:ec:35:85:f1:90:20:a2:17:93:a9:e4:6d:
68:b2:88:36:ea:d6:03:87:06:a6:3e:2b:67:64:95:
3a:29:3e:08:6e:ca:00:18:34:53:e4:94:da:39:d0:
be:24:52:6a:80:e5:52:c3:5c:a9:5f:30:09:fc:c8:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:11:11:42:2C:7A:18:D4:16:A3:E7:29:BF:E0:E0:04:F4:7E:EC
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:b0:57:37:7d:04:a2:3c:fb:23:49:ce:29:44:b1:ca:d7:
4f:23:97:e7:82:ca:87:78:ae:7c:35:b1:e0:39:a2:59:a2:d2:
df:f4:9c:a7:69:6e:9d:3b:78:3b:56:04:35:d1:b9:8b:f6:1f:
a4:a3:31:3b:ba:51:88:7d:6d:4f:5a:40:10:eb:25:f3:c6:b3:
35:a3:7a:b9:15:d9:aa:d1:9a:4e:3d:a1:c4:77:ab:7d:b9:12:
54:6b:0c:5d:a5:46:05:c5:a4:33:8f:eb:56:40:24:c2:7b:f4:
17:f6:26:b4:4c:29:44:b5:82:94:72:00:e3:93:0b:2b:b4:50:
87:fc:a1:5a:42:6e:69:bb:79:97:4f:c9:ac:1c:a7:92:0b:c8:
c8:26:ec:61:7b:31:6a:01:20:30:39:e9:8e:6c:e8:86:3d:0c:
d3:59:3d:7f:13:4a:77:3e:5e:c2:84:d6:12:f9:85:44:80:6d:
de:a9:e6:1b:1c:48:10:ec:9e:2c:6c:ee:f6:bb:09:7b:0a:3b:
5a:bb:7b:e8:47:3d:37:2a:52:fd:0d:fb:58:ab:b4:89:6f:b7:
8e:43:2c:05:66:9b:2d:ee:40:8d:a4:5c:da:cc:3d:c4:b4:9b:
6b:04:65:ca:1a:5e:a4:c9:d0:52:3f:c1:e7:e1:6d:a7:1c:a5:
ab:7d:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:23:51 2026 by rpki-client