Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: dQNSSatubx+oMNJtg73CnqhVcsrZN73BOQlUVl3HnXM=
Subject key identifier: 9C:BE:00:B5:31:55:3F:33:B7:FA:C9:42:17:4B:A1:9C:10:C2:62:4F
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 019D2816676DC47232F09FC7FF098E54D3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: 1-Z88AMUmP4f9jCMcq7W-T-SR5yw.roa (hash: 5q6qg65y9JwUuOw3HEGI3kuvz/rp8QoSa+GfSi94XUM=)
2: T1HaQCOa922ywanRdZuOyFcSnLM.roa (hash: 0qKkM2h/9bHDgIcIK/Uz+qlsAYQ0n2pteQdmrD0+CB0=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: bT12Z07IHpc5XQWBVOO1afAgFABD32bb5DPrjvX0+jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:67:6d:c4:72:32:f0:9f:c7:ff:09:8e:54:d3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=9cbe00b531553f33b7fac942174ba19c10c2624f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:59:9b:13:24:6c:b7:95:f0:3f:d1:94:88:
01:6a:d1:7d:f8:9b:fb:b8:13:ee:5d:86:bc:74:1d:
c9:54:ea:57:41:00:b5:f2:4c:bb:b0:c5:59:cc:8c:
d3:0f:7b:4c:c6:55:1c:06:41:dc:c2:e0:4c:92:48:
4b:0b:d0:a5:40:46:4b:62:30:98:9a:de:45:52:42:
05:0f:69:b1:4d:01:0d:75:aa:27:7e:81:82:11:00:
bb:8d:13:ed:96:17:79:f6:ce:27:78:ae:fb:6d:cb:
1c:bd:47:f3:b3:02:5f:5b:7b:ce:15:ac:57:81:df:
2b:9c:a0:3e:d6:8e:85:eb:a1:71:ac:f8:6f:e3:59:
a5:bb:5f:02:ed:5c:8a:cf:0e:cd:10:c2:e5:66:8c:
09:c8:a8:34:27:24:5f:db:15:86:56:d0:ee:e4:85:
a8:c7:e9:79:ed:19:7c:0e:8b:94:63:47:29:9b:5c:
23:35:3f:9e:fa:ad:81:14:69:6b:5f:f1:92:9b:15:
d8:ee:23:3c:ac:82:1d:be:74:c6:5d:91:94:d4:d5:
07:97:85:f6:ac:e1:b6:b8:e3:bf:f5:6a:70:57:50:
0c:2d:c3:12:1b:c3:1e:bc:f8:08:21:a4:7c:8b:a8:
ad:b5:75:bf:63:52:90:9d:72:46:21:63:5a:c8:bb:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:00:B5:31:55:3F:33:B7:FA:C9:42:17:4B:A1:9C:10:C2:62:4F
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ec:8e:a9:6e:b5:b1:1e:d3:52:7f:17:ae:c0:09:4a:f8:e9:
2a:1a:fd:5c:33:df:8e:87:1d:ad:de:d6:6f:7a:76:aa:b7:6c:
00:fd:1a:fb:18:03:af:73:4c:36:f6:06:99:1e:9b:3a:13:63:
81:d9:65:1c:9f:0f:76:04:2d:99:2e:d1:e5:c0:0a:3c:45:0b:
95:b7:16:cb:73:48:57:44:aa:19:db:92:4a:73:6f:e8:81:69:
ec:c7:62:4b:31:e1:e5:c7:44:9a:76:5e:ca:71:8b:1e:fe:32:
27:48:04:b6:76:bb:1a:81:35:80:52:77:a7:91:4a:b9:28:14:
c1:33:24:da:54:1d:63:36:22:2a:20:91:2c:e8:56:81:97:62:
93:46:90:62:05:cd:c3:67:47:8d:4c:37:c4:9e:38:ba:2b:0b:
e0:d9:84:e0:c9:9f:c1:30:c3:a4:16:e0:17:b7:66:15:53:f2:
ac:e4:6e:b3:f0:fa:33:8c:80:dd:b9:86:93:65:c5:f5:3a:be:
43:8b:bd:ee:67:3f:f5:e5:97:86:60:7b:bc:74:fc:62:09:eb:
05:25:ef:7e:b6:1f:1d:02:60:e4:08:e7:20:5e:3e:88:57:21:
52:b9:b8:7b:6a:12:4a:a9:26:01:99:90:20:e7:e9:48:c5:a8:
c2:db:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:09 2026 by rpki-client