Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: VXNN/4xxGEgSksCGaF/O1dAFZ0UafRkPMTh+1ufCLKQ=
Subject key identifier: A4:AF:E0:63:90:D9:01:3F:AB:BB:1F:9F:10:16:A2:FC:35:01:B2:EE
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 019EBE7F60CF4857EC3465414E6A7D8313A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 01:01:19 +0000
Manifest this update: Sat 13 Jun 2026 01:01:19 +0000
Manifest next update: Sun 14 Jun 2026 01:01:19 +0000
Files and hashes: 1: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: llt9PPAYOhDWnBC3agA6N31bhprY5ZWQxVhFQb+uSV0=)
2: eEPTZT6Cu9Z_P3_raMWIwWmS4XU.roa (hash: QSgLB7ALo1ZtZRISbHuHkO61FWxfLx7/83BtDc+Ihaw=)
3: vlffUXbbe03bAModfKshSSav8vw.roa (hash: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:60:cf:48:57:ec:34:65:41:4e:6a:7d:83:13:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Jun 13 01:01:19 2026 GMT
Not After : Jun 14 01:01:19 2026 GMT
Subject: CN=a4afe06390d9013fabbb1f9f1016a2fc3501b2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:e9:1a:5c:50:c9:ee:4b:2b:be:2d:d8:0e:
b4:c7:16:43:e4:41:0f:c4:0c:94:4d:24:77:a5:2b:
36:15:ee:aa:4d:d8:7f:4d:a7:e6:1d:b7:73:19:b3:
86:40:33:43:5f:3e:08:ae:e6:92:f2:7b:6d:67:c4:
d8:c2:34:f0:c3:aa:54:c9:67:a5:8f:8b:61:bc:ed:
da:59:2e:34:23:58:c2:3f:d9:a4:ed:dc:6d:0b:e4:
f9:ca:44:20:9e:01:84:fb:1d:4d:06:ca:9e:0a:51:
b8:32:75:e1:65:ca:12:4f:53:5e:ea:52:9c:a0:5e:
2c:fc:d6:b6:75:47:96:2c:c3:a8:29:1f:ce:41:2b:
25:3f:f9:c0:6c:15:22:ff:6b:3c:3b:85:b7:b6:80:
b7:38:20:a8:19:5b:bc:ab:bc:ef:26:c6:e4:f2:0a:
a6:52:12:66:f9:09:f4:38:4a:d1:0c:de:d9:7e:b0:
3e:b5:8a:68:f4:e4:d2:3e:57:07:20:7b:b9:9b:0e:
79:27:6d:cf:ca:8b:3f:30:d5:21:50:bb:dd:31:2f:
e8:2b:94:e9:cd:ab:23:d6:d2:86:34:37:1a:7e:3f:
34:b6:7f:64:2a:b6:16:37:98:dc:24:71:90:fc:20:
d7:53:df:68:f8:ee:50:03:e5:6d:a6:da:29:bf:a8:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:E0:63:90:D9:01:3F:AB:BB:1F:9F:10:16:A2:FC:35:01:B2:EE
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:6a:a4:a7:c7:df:98:cd:28:6a:fb:e0:bf:a1:ed:ab:9d:
38:09:5c:7c:bd:71:00:ae:c8:43:d5:32:18:fd:31:39:a1:f1:
d2:9a:a9:3b:40:76:87:79:88:69:69:28:73:06:b7:3e:61:95:
a8:68:f4:31:10:cb:d0:69:5c:0a:af:a4:54:46:cc:c6:fa:1d:
8d:24:64:27:7e:8a:bf:d9:2a:bc:c9:b1:e7:db:19:10:75:30:
cf:c8:40:32:a2:28:3d:aa:1e:7c:99:83:7f:89:03:47:62:1a:
37:c3:68:61:a4:da:25:b1:e9:8c:8c:37:08:e2:66:af:db:37:
99:b2:0a:47:c4:9a:1d:da:29:90:be:0f:07:d8:c0:09:bb:1c:
9f:88:7f:d2:bd:af:81:9c:6f:ee:01:cf:e2:65:95:cc:f2:d6:
bc:28:44:2e:3f:3e:3e:a3:e8:41:d7:dd:c2:cb:f1:86:d5:0e:
98:44:82:04:ad:30:41:9d:17:07:3b:6a:8e:87:46:6d:6a:3e:
73:22:fd:ad:82:e3:a2:5f:f5:4f:58:53:2b:e1:ac:44:87:44:
3f:a5:a0:de:c2:f6:0b:8e:56:0a:74:b0:5d:b8:d8:6d:a7:21:
06:f1:60:0b:64:8c:dc:6c:67:7d:4b:1e:d3:bb:d2:32:94:f5:
f0:76:59:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f2DPSFfsNGVBTmp9gxOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjYwNjEzMDEwMTE5WhcNMjYwNjE0MDEwMTE5WjAzMTEwLwYDVQQD
EyhhNGFmZTA2MzkwZDkwMTNmYWJiYjFmOWYxMDE2YTJmYzM1MDFiMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx87pGlxQye5LK74t2A60xxZD5EEP
xAyUTSR3pSs2Fe6qTdh/TafmHbdzGbOGQDNDXz4IruaS8nttZ8TYwjTww6pUyWel
j4thvO3aWS40I1jCP9mk7dxtC+T5ykQgngGE+x1NBsqeClG4MnXhZcoST1Ne6lKc
oF4s/Na2dUeWLMOoKR/OQSslP/nAbBUi/2s8O4W3toC3OCCoGVu8q7zvJsbk8gqm
UhJm+Qn0OErRDN7ZfrA+tYpo9OTSPlcHIHu5mw55J23Pyos/MNUhULvdMS/oK5Tp
zasj1tKGNDcafj80tn9kKrYWN5jcJHGQ/CDXU99o+O5QA+Vtptopv6i5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSv4GOQ2QE/q7sfnxAWovw1AbLuMB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdtqpKfH
35jNKGr74L+h7audOAlcfL1xAK7IQ9UyGP0xOaHx0pqpO0B2h3mIaWkocwa3PmGV
qGj0MRDL0GlcCq+kVEbMxvodjSRkJ36Kv9kqvMmx59sZEHUwz8hAMqIoPaoefJmD
f4kDR2IaN8NoYaTaJbHpjIw3COJmr9s3mbIKR8SaHdopkL4PB9jACbscn4h/0r2v
gZxv7gHP4mWVzPLWvChELj8+PqPoQdfdwsvxhtUOmESCBK0wQZ0XBztqjodGbWo+
cyL9rYLjol/1T1hTK+GsRIdEP6Wg3sL2C45WCnSwXbjYbachBvFgC2SM3GxnfUse
07vSMpT18HZZzg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:55 2026 by rpki-client