Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier: ftCq0Et321W8wg9DxEa/lhdHgJzt5QCgdMT8JIcir30=
Subject key identifier: 42:70:9A:E7:4D:85:BF:BB:77:4A:49:D4:F0:DC:3F:57:81:B2:F5:94
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 019D333E94A2F3D3098C6E75EC10D82749E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number: 0BE8
Signing time: Sat 28 Mar 2026 07:00:32 +0000
Manifest this update: Sat 28 Mar 2026 07:00:32 +0000
Manifest next update: Sun 29 Mar 2026 07:00:32 +0000
Files and hashes: 1: Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa (hash: WNChQ5FZcNT+Uy6r/VXAfEff5h4yB9HjomF668ERFPs=)
2: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: VSHtlZKpsXAv00YOL+0RFka5HHHpctKAQyUtO/IY3gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:94:a2:f3:d3:09:8c:6e:75:ec:10:d8:27:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Mar 28 07:00:32 2026 GMT
Not After : Mar 29 07:00:32 2026 GMT
Subject: CN=42709ae74d85bfbb774a49d4f0dc3f5781b2f594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:51:b3:30:45:bc:3f:69:22:d1:d1:f1:cc:
d3:ab:aa:a8:bb:71:21:2a:37:3b:36:8a:91:2c:35:
87:99:15:7d:42:7e:be:0c:85:5f:08:07:9f:e0:43:
99:7e:85:e4:32:47:89:ec:e0:e6:85:f1:21:13:33:
35:0b:23:16:da:fc:92:e1:47:ed:2a:d6:69:b2:13:
02:8a:0b:33:7f:2b:1c:7b:4d:87:f9:55:32:8a:72:
ae:53:81:10:d6:49:5a:f7:56:67:6b:61:cf:10:9c:
9e:fa:6e:5a:a9:38:33:eb:c2:d3:44:a8:9a:b5:ff:
02:be:4e:30:aa:ba:64:92:47:23:a7:60:0c:33:da:
4d:3c:22:0b:6f:2d:55:49:6e:e1:68:0d:8e:d7:00:
88:92:fa:9b:d9:09:87:7d:ac:fe:f2:f4:88:d8:56:
bf:0b:9f:30:6b:2a:57:62:76:5a:98:39:4d:4c:e1:
ac:f8:02:d9:02:db:fd:db:a6:bd:d3:a5:0a:0e:4f:
1e:12:db:e6:e2:dd:96:ac:be:f0:da:ac:1d:1f:46:
d3:5e:09:5b:d8:00:d8:c4:e2:a1:8e:f5:b3:88:98:
a0:a8:35:e3:34:b4:49:59:2d:22:a0:70:7c:e9:af:
a0:fa:0d:4f:2d:c0:ca:af:90:24:63:49:61:20:8c:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:9A:E7:4D:85:BF:BB:77:4A:49:D4:F0:DC:3F:57:81:B2:F5:94
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:51:1f:36:ea:9d:11:11:af:8b:65:88:69:1e:d4:05:6b:ac:
f4:3d:72:60:7e:46:99:e0:ab:7e:eb:1e:b9:75:6d:dd:57:88:
e6:67:1e:bb:7f:4a:35:7b:58:3d:6e:72:35:9d:84:f2:0b:d2:
b3:36:07:59:9d:56:31:dd:69:64:07:4b:8c:23:2b:cf:36:d0:
86:f6:7b:f5:23:1e:7b:67:b0:78:4b:b5:1e:39:55:06:d3:41:
b3:d6:68:92:67:b8:7c:04:93:1c:e8:22:e1:ae:d3:b0:b8:62:
0d:dd:8e:84:98:c0:6c:e8:24:d4:71:0f:53:87:90:9a:05:4a:
53:80:9e:e8:e8:b4:a3:43:6c:92:5f:08:9d:80:b6:37:05:c8:
3e:ce:78:f0:da:a9:88:4f:69:f4:5f:b1:16:15:f7:c3:69:1a:
b1:91:65:c7:03:29:04:48:71:0b:ea:ea:28:51:20:5c:10:1f:
7e:4b:c2:83:f7:2c:3e:b2:e1:e8:7c:40:22:66:13:c5:0b:02:
e8:c8:ba:3d:ba:7c:a4:80:db:70:a1:45:16:8b:cf:ff:07:ec:
14:c6:5f:c6:03:d1:f6:19:bc:7d:d8:34:8f:90:62:23:b7:a8:
4d:2b:2a:42:e5:b8:f5:50:2f:af:92:64:d8:b1:eb:26:cf:d7:
d7:9a:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:12 2026 by rpki-client