Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
File: CWnLIVY-Ju22r7INHZLok6jduB0.mft (raw, json)
Hash identifier: zs74Ah+VJAbr59q4g89HY6CtxDFHyEJ7rE14agVyTdY=
Subject key identifier: 77:58:57:8E:5F:13:CE:D3:54:DA:F9:E7:1A:E5:C3:DC:F5:03:D7:21
Authority key identifier: 09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
Certificate issuer: /CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Certificate serial: 01A0FD8FF6A7816851F1D391951A2587BEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
Manifest number: 0630
Signing time: Fri 02 Oct 2026 17:01:05 +0000
Manifest this update: Fri 02 Oct 2026 17:01:05 +0000
Manifest next update: Sat 03 Oct 2026 17:01:05 +0000
Files and hashes: 1: CWnLIVY-Ju22r7INHZLok6jduB0.crl (hash: LSUmCOfdTCnkW9YXo4H/W2/krREdroEWKngJO+8gf64=)
2: rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa (hash: 5haE3uSWqoSmkVp2C59/CSPiEElkrF1oivdNjZDrJeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:8f:f6:a7:81:68:51:f1:d3:91:95:1a:25:87:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d
Validity
Not Before: Oct 2 17:01:05 2026 GMT
Not After : Oct 3 17:01:05 2026 GMT
Subject: CN=7758578e5f13ced354daf9e71ae5c3dcf503d721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:e5:ce:3f:3e:54:92:26:35:95:9f:51:90:
bd:69:6a:36:ff:a4:59:d7:3f:e4:bd:b5:2a:83:dc:
9f:d5:b1:96:2a:60:d9:96:4b:a0:bb:58:09:f6:58:
d7:f6:0d:01:72:06:fb:c0:d1:be:59:7b:53:be:ce:
16:0b:4f:02:88:fa:ad:2e:b1:cf:36:65:d1:95:c2:
1f:d1:f4:56:4a:7c:ad:5b:1d:c8:f8:8c:56:b1:c3:
da:97:95:d4:55:12:d6:bf:f9:50:cb:5a:5f:31:81:
ff:55:6e:c6:95:92:e4:1f:2d:b5:35:c5:7c:40:1f:
46:6d:c6:e5:ee:e5:0f:1d:d6:73:b5:77:2e:12:08:
4c:a6:b9:3e:be:d9:4f:67:d5:f5:f6:65:df:a3:87:
03:e2:4f:ad:a6:83:00:69:5e:29:d3:73:56:58:c2:
96:8f:e9:a9:00:c9:ac:0a:9d:91:68:34:ab:2d:8d:
dc:21:0b:ea:e2:31:5c:51:df:b9:81:e4:9d:4b:c1:
f6:d3:4a:1b:02:59:2e:e5:34:b9:dc:e4:56:36:af:
b9:aa:9e:fb:96:e6:6e:7b:b7:89:f9:97:5c:6b:61:
66:83:a8:4b:06:4d:cb:1a:66:db:59:9b:bb:7e:bf:
6a:b3:0a:1d:2d:ce:51:52:09:70:2f:9c:2a:e9:e7:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:57:8E:5F:13:CE:D3:54:DA:F9:E7:1A:E5:C3:DC:F5:03:D7:21
X509v3 Authority Key Identifier:
keyid:09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:cd:b4:e9:24:40:8f:e5:d7:f9:82:67:5d:98:51:c2:87:
40:c5:19:96:de:e5:a1:c7:22:28:fa:f6:b6:bc:94:be:3c:be:
87:0f:6c:29:7d:6f:d2:fc:00:75:86:5f:eb:17:0f:a3:0a:40:
21:e1:1a:04:a1:23:f2:41:c1:2b:c7:a9:be:7f:d6:75:fb:4c:
81:2d:1f:72:ec:45:2c:44:b3:c5:be:65:79:b8:5e:8d:26:26:
d7:30:fe:08:9b:a0:78:ed:c4:72:5b:65:2f:d1:a3:f9:4d:09:
63:79:25:30:be:33:d6:10:0f:90:c4:da:10:f4:6b:9c:69:4a:
23:cc:ad:f7:37:d7:fb:95:ab:e9:8a:68:37:80:c2:99:ff:9d:
e2:17:fb:1a:ea:b0:db:a1:2f:0a:b2:4f:6f:de:7b:6d:e1:63:
5b:40:76:1d:e9:ee:2a:af:e4:50:6c:5f:c8:c4:3c:88:63:0f:
89:1b:c7:43:c8:7a:a4:ce:3c:d3:4d:98:d7:60:51:53:bb:ed:
07:e7:fb:22:25:3c:d0:71:8f:c8:73:dc:ff:7b:db:86:c7:f5:
89:b2:11:93:0a:9f:52:c9:4e:bb:b8:31:7b:66:b8:30:44:1a:
8a:fe:a2:2f:82:ab:66:e8:2f:ad:56:ee:e8:5d:fb:7a:0e:c0:
a9:46:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 22:12:02 2026 by rpki-client