Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: ahHu/hbJz79mIJoe/W5Ej3gO4iGEYfdGUOPIlr5Y7ro=
Subject key identifier: DD:67:80:AB:9E:FE:A7:73:4A:08:4F:BC:9D:36:E8:F0:D2:E8:3A:CE
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 019CA97CEE61B431BDB95208DF67471B5602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 13:01:02 +0000
Manifest this update: Sun 01 Mar 2026 13:01:02 +0000
Manifest next update: Mon 02 Mar 2026 13:01:02 +0000
Files and hashes: 1: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: Fe++O16xOaItNtqlwzoepsvsxaMydiu1CemGU+KRflc=)
2: eEPTZT6Cu9Z_P3_raMWIwWmS4XU.roa (hash: QSgLB7ALo1ZtZRISbHuHkO61FWxfLx7/83BtDc+Ihaw=)
3: vlffUXbbe03bAModfKshSSav8vw.roa (hash: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ee:61:b4:31:bd:b9:52:08:df:67:47:1b:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Mar 1 13:01:02 2026 GMT
Not After : Mar 2 13:01:02 2026 GMT
Subject: CN=dd6780ab9efea7734a084fbc9d36e8f0d2e83ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:82:5a:7d:5f:95:a3:36:b1:11:b3:56:fd:
d7:67:e5:60:31:6d:54:c8:cc:03:e2:d0:eb:7f:f6:
6b:e5:17:96:83:79:cd:aa:bc:3e:35:d3:33:b1:78:
51:10:32:c9:fc:bd:90:0c:b8:91:54:1e:3d:b7:d5:
fb:23:9f:de:f9:fd:e9:30:8c:da:de:8c:1a:d3:41:
d4:af:ed:78:a0:ea:c1:35:9a:99:01:f3:99:cf:06:
2c:72:c8:fd:16:2c:44:22:2e:67:25:a8:87:8c:c2:
2a:6e:b0:c5:07:0b:51:a9:70:4b:fa:78:40:33:b0:
cb:0a:8b:02:ce:13:de:ea:b2:eb:a5:dd:b5:49:68:
bd:24:c2:80:32:3c:48:21:da:4b:44:ea:d7:38:69:
fe:18:ef:21:8e:2d:91:9e:66:84:39:e2:2f:f4:1a:
65:32:cf:65:39:a2:bc:40:b5:d3:5c:33:cc:16:56:
8e:2f:62:56:51:e1:24:24:52:f1:bb:d5:89:4b:40:
fe:f2:c5:2b:75:bc:a3:5e:15:3e:ac:4d:47:0d:93:
46:64:8b:3a:db:16:07:2a:d8:78:1e:12:4b:f9:23:
2a:1c:16:c5:58:2c:3b:92:4a:dc:06:22:02:7a:16:
a3:72:3c:97:2c:26:e0:77:49:47:16:72:be:65:89:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:80:AB:9E:FE:A7:73:4A:08:4F:BC:9D:36:E8:F0:D2:E8:3A:CE
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:d4:4e:c1:88:21:7c:0b:b5:32:b9:36:78:fd:d7:9f:68:
56:0e:cb:d7:c1:b5:ad:02:69:72:20:a3:14:7d:16:76:cd:62:
b3:d0:a7:31:63:87:0a:12:36:de:73:92:c4:8d:a9:99:0a:33:
89:ef:b5:5d:8e:55:f2:ee:fa:85:f0:ac:fd:a2:d5:ea:6f:0d:
80:d0:d8:9b:0b:30:12:14:95:f5:f2:e7:fe:d8:d2:e7:0c:07:
23:99:7f:89:ef:4d:7d:1b:31:0a:83:94:b6:7e:be:de:ba:0e:
15:2c:8c:b9:06:e4:30:19:1b:b7:09:2c:3a:32:2b:54:a9:2b:
3c:11:8b:d2:79:4f:8c:0e:9e:20:b8:90:cf:76:63:16:00:18:
ca:b7:90:f4:9b:72:8d:8d:20:54:c2:af:42:a5:21:5d:cf:8c:
92:49:56:01:f6:da:df:4b:b6:72:37:c6:17:fd:1d:3c:1a:da:
41:dd:f5:db:e5:38:87:58:6b:b3:e1:a5:1c:5d:f0:46:bf:ba:
b4:af:1d:7d:6b:7a:3d:21:19:76:fe:bb:24:91:fe:dd:07:63:
b3:d4:f6:30:c4:51:3f:a4:09:42:89:b1:a0:99:56:a8:78:da:
ad:d7:08:52:6a:94:37:c1:d1:12:0f:ec:58:84:b5:16:91:98:
91:aa:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:33 2026 by rpki-client