Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: RPAwaVFP95iqaATgmR2sDKbKeZuUvC4lMvJV4VrvWS4=
Subject key identifier: 69:C8:E5:F5:FE:1C:5A:EA:06:92:5E:F3:5D:AB:E0:95:73:35:85:66
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 019CAC0FE4B765ACC43EED26A76B44585029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 0AD4
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: itsRh+muHbY8QzuyXcYeDxl4J579WNz3J/LgsNwQbH0=)
2: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (hash: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e4:b7:65:ac:c4:3e:ed:26:a7:6b:44:58:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=69c8e5f5fe1c5aea06925ef35dabe09573358566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:8b:27:12:73:14:05:cb:5d:ba:4e:9a:97:
ea:36:e9:97:81:1c:b1:ca:6f:1e:0a:d8:19:e7:16:
e2:9e:1e:ab:2a:10:9f:07:2c:b5:a6:65:bd:65:59:
a2:55:32:ce:a4:28:e1:8d:35:21:7d:ff:cd:b6:74:
f3:75:1b:eb:8f:ef:78:2f:b2:22:ee:df:2d:c8:30:
25:6e:47:78:10:f1:f7:6f:25:dc:22:15:ed:bf:0e:
37:f1:95:da:aa:8a:97:03:dc:73:5e:84:02:2b:10:
9b:29:4c:ac:81:10:94:6b:71:22:b0:0c:5b:a7:61:
95:c4:e0:5e:92:2a:84:52:4c:b1:65:28:f2:b0:df:
2f:b4:03:a4:84:21:fe:a5:d2:6f:d7:72:3e:d6:65:
cd:d9:cb:0e:69:24:43:7b:5c:31:3a:bd:3a:27:69:
f8:3b:00:bc:fa:12:ac:fc:68:ad:83:f6:b3:3c:47:
2b:0d:60:99:79:1d:36:5d:60:8c:40:2c:65:d2:cd:
e7:9e:c1:1c:fb:23:8f:49:9d:4e:33:74:1e:41:38:
70:d6:61:79:e4:03:c5:b3:50:70:a0:24:e4:af:04:
ee:c5:72:1e:61:30:11:7b:ed:46:51:b0:1f:fa:27:
19:4c:c5:79:72:59:26:92:6b:69:57:1f:5f:6c:7a:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C8:E5:F5:FE:1C:5A:EA:06:92:5E:F3:5D:AB:E0:95:73:35:85:66
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:66:69:e8:50:16:ea:9d:78:90:25:73:13:64:b6:5e:91:d0:
21:4a:24:ec:cd:6e:c3:df:ed:56:f4:26:0c:25:f7:ea:1f:da:
74:16:37:6b:e6:bb:8e:9b:d3:3b:14:f8:c7:3f:b6:02:4c:08:
03:15:64:ab:b4:7d:45:84:0e:e5:86:07:2b:f8:2e:62:de:42:
df:b6:d3:e4:bc:27:9a:5a:61:3e:ab:93:e7:51:81:0f:38:80:
10:bf:f0:15:a8:d8:8b:10:a5:19:31:36:8a:76:44:05:0b:22:
98:35:2a:a0:32:18:19:cd:83:b1:99:4d:a0:74:a2:7b:e8:35:
16:e3:5a:1c:bf:af:62:50:03:43:3e:4e:b3:ea:c7:b6:16:34:
0d:26:3c:a8:d9:fb:7e:5e:9b:cb:d0:c8:f9:40:bd:ad:42:91:
cf:8f:a6:9d:87:40:cf:e0:51:86:a4:12:cf:f3:65:42:40:ae:
73:06:ff:b0:0c:48:59:d2:a2:81:75:56:92:0a:7b:63:22:c3:
82:d2:d8:9b:b1:45:8f:41:67:77:6e:58:29:81:ef:ee:24:53:
38:ea:52:38:82:63:c9:2c:12:c5:ab:d5:8b:f0:75:35:23:b3:
32:d1:02:54:d9:c3:8b:23:d9:4d:2c:1e:b3:a2:84:93:fe:78:
0d:ec:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:10 2026 by rpki-client