Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier: Dt55mzr0VxnMbkrqKS7LL5sRDkHj+2FGzYN08wULVPw=
Subject key identifier: 59:88:D9:0E:0C:9A:D1:A0:24:2A:E8:22:9B:4F:8D:E3:9A:6A:99:E3
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer: /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial: 019D2695DD6B62F22A192F6C2A524080290C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: +n50ZriW6+cNWxab/l39X5HW0NLFBpVunchkY+dpXQs=)
2: tPa9pSwrFvB1K6LXnFP7QgOZmQg.roa (hash: EuLOm9LNu+vdtWKW8xKy1jbrcq+2BOsoUg00XaJJYUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:dd:6b:62:f2:2a:19:2f:6c:2a:52:40:80:29:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=5988d90e0c9ad1a0242ae8229b4f8de39a6a99e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:eb:32:bf:1f:27:f2:75:d1:ce:7d:64:e4:
c1:84:a9:32:f4:e1:8a:b3:c4:88:65:d8:04:a1:14:
da:cc:7f:9c:6c:cc:0a:59:d9:9d:d8:85:f1:3a:4d:
98:55:64:51:44:df:75:84:bd:fc:be:e1:61:7f:f6:
0d:14:86:65:d1:eb:e0:75:e9:8d:33:87:63:ac:30:
04:8e:23:a2:58:bd:51:1e:f8:fc:ee:d6:ca:42:f9:
68:55:fd:e6:78:77:07:73:3e:52:3d:de:ab:77:33:
f3:86:b0:42:a3:ad:ea:e2:08:b4:0c:87:95:97:b5:
3a:ec:d6:40:80:30:4d:3c:eb:71:f1:f2:85:66:ad:
56:36:d1:db:a3:a2:6b:0b:2d:90:ca:dd:53:b2:c6:
89:d8:c2:7d:1a:84:3b:9a:a0:f2:da:5e:60:81:45:
9e:77:55:7c:f7:17:fd:93:c5:b6:51:da:22:cf:e8:
40:45:3b:d7:7a:ba:19:41:44:e8:8e:cd:49:c0:d6:
85:08:72:d7:8b:2d:f6:21:ff:ff:0a:08:58:59:11:
fe:68:d9:da:b3:76:de:17:be:ad:18:0c:58:2b:85:
b8:41:a9:87:40:51:48:87:53:30:f1:a2:69:25:e5:
e7:6e:00:13:c4:18:3b:d4:70:ae:5e:4b:42:d7:94:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:D9:0E:0C:9A:D1:A0:24:2A:E8:22:9B:4F:8D:E3:9A:6A:99:E3
X509v3 Authority Key Identifier:
keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:35:59:9b:e3:aa:71:ef:94:ef:a3:b0:20:0a:7b:94:76:0a:
f4:35:0f:6b:d6:9b:89:26:8e:a6:cf:ce:c0:45:4b:77:ab:f2:
29:fb:63:d4:30:b3:5f:bb:d6:8f:ad:b3:38:d8:ce:d9:96:03:
81:4a:6b:f3:8b:f7:03:1f:4c:1c:63:3d:21:7d:98:f9:66:13:
b3:fc:17:21:8f:39:d5:d0:7d:28:09:dd:92:f4:0b:74:68:e9:
5f:b9:11:54:f8:72:a0:65:07:82:6c:c1:c2:4a:fb:fb:15:20:
9f:75:1b:45:0c:d0:2d:f8:1a:01:01:3a:73:f9:9d:67:96:b4:
91:f9:20:51:4c:00:23:da:c8:86:a2:ed:79:e3:19:eb:54:d8:
bf:00:3a:ba:4f:73:ba:8d:6e:1c:44:e1:78:ac:a9:31:66:fe:
d9:1b:93:ae:66:b1:22:1e:75:26:62:28:7d:72:50:e3:0d:33:
9e:f1:e2:77:96:f7:7b:24:96:de:74:c8:42:89:bb:78:ff:81:
45:f2:66:8e:26:ba:8e:ee:89:2f:82:43:0d:9e:c0:83:c7:fb:
ab:46:08:6f:6c:50:41:d7:30:50:75:a7:6d:fc:c2:5f:c3:bb:
c5:4c:f1:ea:cb:a3:1d:20:94:fb:18:b8:de:44:3a:be:39:11:
f1:09:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:59 2026 by rpki-client