Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: s6sC4BeBHYZcGkA2yWyuJh8/V9OVRw196caxbfd1oTs=
Subject key identifier: FF:6F:D0:08:60:34:2F:AE:C7:FE:2A:BE:1B:B1:03:72:34:2C:0F:D7
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 019D265F7C37994C2113C6CBDA90B6753E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0DA8
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: RMn4TELy9/sidqhrZUHFrnOjhoBX3q+/eCNmrAux3o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7c:37:99:4c:21:13:c6:cb:da:90:b6:75:3e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=ff6fd00860342faec7fe2abe1bb10372342c0fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:26:29:4a:52:52:25:ad:e5:0e:0b:8f:fe:
67:83:d8:1a:30:04:ed:dd:98:3c:08:c5:50:dd:5c:
5c:17:1c:ec:8b:a8:8d:82:4c:ef:38:56:62:6b:37:
e5:c8:6c:cb:eb:ce:92:40:15:2c:6a:13:03:10:b3:
49:78:44:94:cd:d7:53:95:f5:2a:da:7b:fd:ad:01:
62:7d:c5:9b:5e:2f:40:9c:ad:29:93:0e:29:3e:36:
e4:fc:0d:46:14:4c:d6:61:68:2a:ee:f6:7f:54:02:
25:c8:f7:44:19:18:9a:74:75:1a:14:5f:e6:eb:14:
e7:b8:a4:f4:62:8c:4b:c5:44:49:0a:b2:c2:64:25:
34:cd:a2:fa:29:25:b4:53:ba:9e:3c:6c:04:b0:1e:
dd:8a:1f:35:87:7e:be:00:7e:cf:32:05:d8:bd:11:
1c:03:03:6d:49:f5:55:53:9c:a3:81:33:70:db:f4:
c0:24:fd:b3:1c:84:4a:dc:9c:31:11:73:65:35:64:
53:e7:6b:ba:68:f4:a3:20:f3:af:4d:4b:f2:2c:26:
13:53:88:a4:dd:09:d7:60:2a:c6:22:8c:c5:c0:10:
20:ba:70:b6:4c:f6:62:45:0d:c8:30:dd:10:85:16:
02:91:ba:d8:9b:f9:b9:4b:2c:d3:52:1c:68:4e:66:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:D0:08:60:34:2F:AE:C7:FE:2A:BE:1B:B1:03:72:34:2C:0F:D7
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:35:3b:7c:6a:d0:c9:00:04:20:2e:53:29:6c:eb:46:55:b6:
fa:fa:56:f3:94:d2:f2:57:ff:ef:0b:2b:da:7a:b5:8b:7f:94:
5c:d2:50:32:c6:95:1d:01:75:a0:9f:07:db:db:c3:c6:54:6c:
fa:cc:e2:7c:5d:39:bd:b5:0b:b7:e8:e4:ef:75:b8:b4:b8:30:
42:b6:1e:ca:94:74:ae:09:3d:a7:70:20:9f:1d:38:ab:7f:09:
06:54:de:d7:e7:9d:bc:06:be:bc:ea:b4:59:3b:53:14:d1:71:
0d:e0:54:31:17:9d:9c:e8:91:6e:f1:18:38:e9:33:a6:27:fc:
74:7a:7b:ab:31:58:cb:e8:9f:14:7d:49:16:93:ca:04:39:c5:
01:02:36:6d:1e:94:52:fc:90:6f:0f:83:5c:e9:9b:4d:b1:cd:
fc:11:b9:5c:09:30:40:ca:2e:fb:0e:ba:e6:c0:83:45:a1:0c:
af:87:4f:a7:78:d4:0e:2d:d7:c5:70:eb:ae:84:5e:ab:5a:19:
7d:61:b8:1f:46:60:0c:0b:ff:3e:ca:8c:4f:aa:f5:b9:a2:fa:
c1:b0:f4:31:06:bf:52:fe:99:2b:4c:bb:12:94:07:e5:e4:6f:
c5:5e:4f:09:42:21:d8:1e:aa:ee:c9:be:fa:af:32:4f:b1:81:
20:a2:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:32 2026 by rpki-client