Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
File: wSWw9XiOWBEj5eSfAB1S16f89a8.mft (raw, json)
Hash identifier: Avfp2WoIghaC5ebXQxuwHLX1qs7SR3XBMG/yBJYfj1Q=
Subject key identifier: 9A:4A:23:E9:AE:B0:A1:A4:65:81:30:25:5C:29:F1:E0:64:27:82:9C
Authority key identifier: C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
Certificate issuer: /CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Certificate serial: 019D273AD291B9225559F98265DC700D8EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
Manifest number: 02E1
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: vmkoqoQ_otv0F89R60xz-Vuo-2g.roa (hash: iq0VYDEcTpvgBWZIkkSwVuASLLS7URTHNl2Z2J0KqqE=)
2: wSWw9XiOWBEj5eSfAB1S16f89a8.crl (hash: GZ2ZunQEP4cpN/NKIWgrtLYgV5rQGTozOs07BZhU2sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d2:91:b9:22:55:59:f9:82:65:dc:70:0d:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=9a4a23e9aeb0a1a4658130255c29f1e06427829c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:2d:a4:34:19:74:77:c0:63:bb:41:d9:e7:
8f:db:45:78:81:61:3c:65:38:75:fd:61:c9:34:4d:
99:46:1b:da:7d:f8:dc:5d:d6:a9:60:08:34:06:0e:
59:44:ce:a9:24:90:5b:c6:cf:a6:8d:ea:84:d9:6d:
72:57:df:fc:7a:ff:44:cf:f0:18:5e:32:e0:70:3f:
b2:7d:dc:da:a6:b1:88:ee:1b:42:f9:79:d9:d3:f7:
e3:41:06:14:42:e4:37:93:46:b3:ff:b0:ed:7a:a8:
83:96:9a:fd:d8:65:30:e9:25:9f:8e:d6:65:03:00:
06:38:87:19:b2:d3:b3:04:1c:86:8e:99:2c:78:f8:
5e:31:62:e4:e4:b0:9f:cd:13:c9:13:37:ca:37:b3:
5f:4e:f0:21:79:5a:fa:2b:da:93:ef:92:6a:1f:77:
52:b3:9b:0c:09:9c:7f:1b:6c:41:c8:84:20:fa:f1:
2b:f0:1b:f8:e3:a1:7f:9a:bb:a3:2f:73:4a:0f:76:
17:d0:d0:fc:e8:e7:27:2c:30:b5:5c:ef:b5:8f:d2:
db:51:37:5f:ca:77:8f:96:fd:4a:d0:ed:01:7a:2e:
d9:96:64:1e:0f:20:fb:7c:64:c1:92:29:0a:93:99:
11:70:c0:74:96:4a:b7:66:a4:53:32:13:51:9c:64:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:23:E9:AE:B0:A1:A4:65:81:30:25:5C:29:F1:E0:64:27:82:9C
X509v3 Authority Key Identifier:
keyid:C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:0f:38:a2:51:0b:e2:3f:f2:ff:f9:2d:c2:28:46:81:04:
65:6d:55:f7:c3:81:85:8e:f0:87:68:9b:fe:b7:db:e3:da:b8:
e1:32:42:93:57:a2:df:4b:04:d2:e4:e0:65:e1:09:88:f1:2b:
21:b8:9e:95:2c:9d:aa:73:28:24:85:b8:64:01:a3:58:5f:36:
ab:72:67:2a:36:91:cc:de:90:2d:26:ba:f4:27:e2:41:a7:cd:
5f:68:ad:c0:1a:d2:a9:89:f8:e1:e4:cc:dd:d9:23:fe:4f:23:
ef:be:31:ca:9f:e7:14:5a:ad:32:c2:3e:7e:6f:5e:bc:43:2c:
df:37:b6:28:86:43:b8:60:60:83:9a:4d:a8:db:92:9d:20:8f:
45:d2:96:c7:ec:c4:49:55:01:92:a9:3e:82:6f:68:67:4b:08:
ef:21:65:ce:76:6b:d0:9a:06:f4:94:81:83:45:d6:d3:48:a3:
f6:8e:0e:e6:d8:fe:2b:4c:27:0a:25:e1:9e:46:94:23:85:cf:
17:9f:08:df:78:07:0f:39:a4:65:d7:7b:62:fd:bc:b9:fe:f3:
68:48:29:f4:f3:8f:e1:0d:9e:4a:7e:a3:0d:2b:96:b4:e8:b1:
b8:13:bb:fd:cf:f4:df:79:fc:29:b6:36:45:05:a5:ad:a3:72:
7e:d9:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:19 2026 by rpki-client