Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: mnvLsLSgafkskHN56LL26SKCWEjX3dBuUFitxDA1vfg=
Subject key identifier: 17:2D:87:9B:D5:29:45:60:68:5E:74:A5:9B:91:38:EA:30:AF:32:52
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 01A0EC2EE982FF60E4BD0ED4EB0066C657D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 08:01:32 +0000
Manifest this update: Tue 29 Sep 2026 08:01:32 +0000
Manifest next update: Wed 30 Sep 2026 08:01:32 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: g79LGcBqFUKwELDzuh0oR+ZDLngUylJq8AizO6RToe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:e9:82:ff:60:e4:bd:0e:d4:eb:00:66:c6:57:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Sep 29 08:01:32 2026 GMT
Not After : Sep 30 08:01:32 2026 GMT
Subject: CN=172d879bd5294560685e74a59b9138ea30af3252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:d7:b0:df:b1:cf:ae:e6:c5:49:cd:84:fb:
89:50:be:0a:4f:59:f3:4f:bd:7b:1c:8b:a9:60:8e:
06:02:9e:60:1b:bd:eb:3c:93:47:7e:26:99:17:24:
8d:bf:55:3b:ad:81:da:00:c0:ec:c1:61:e3:c8:ca:
44:63:01:49:c2:80:4b:3b:e8:ea:1f:d0:61:e2:99:
13:94:3e:73:5c:c1:df:14:77:b6:d8:4d:89:1d:9e:
fa:8d:8f:1e:9c:40:49:8a:50:11:ee:0b:2b:e0:74:
e4:15:d4:9c:63:ea:0b:be:55:b8:e0:db:df:3c:49:
b8:5a:09:23:7a:29:f3:77:ad:7c:b4:6c:b6:9b:1b:
62:ab:bf:bd:5f:5c:ab:6e:a6:15:97:7f:a5:e2:cc:
c2:b1:ec:8e:33:a0:ac:f5:73:8c:79:55:81:5e:a5:
2d:95:60:26:f7:7e:76:e9:f5:37:39:2e:92:60:6e:
fc:3f:e9:63:84:7a:20:af:50:02:f6:64:a8:37:33:
64:ab:cd:e7:ef:46:ac:02:32:fa:8a:30:91:aa:5c:
72:bb:13:45:8f:65:20:c1:c1:16:9e:91:ce:d0:4e:
40:2a:a7:9e:15:ca:60:9c:c1:d1:1e:a7:92:3c:73:
81:bb:bb:60:c6:06:27:ea:e5:85:61:04:2b:80:9e:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:87:9B:D5:29:45:60:68:5E:74:A5:9B:91:38:EA:30:AF:32:52
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f4:fd:8e:17:6a:01:a1:40:1e:e8:b1:ea:cc:67:d2:af:62:
a2:44:f2:5b:a4:f9:2b:78:19:8c:65:f1:e8:b3:ef:cd:47:e1:
ea:37:9c:1e:87:b4:ee:98:52:17:ad:19:65:fc:3f:87:ba:2a:
a8:ef:e2:0c:ea:1d:b6:db:57:a8:19:42:a3:f7:58:59:9f:0e:
86:8d:78:19:95:89:f9:a7:7f:fe:78:a2:99:ed:70:40:57:8b:
f7:5d:24:cc:51:8d:58:ea:f8:51:dd:eb:ff:62:6a:f5:bb:5b:
00:63:74:91:3e:5e:c6:5e:4e:b2:99:df:5b:5d:33:ce:6c:03:
7c:9c:08:bb:fb:02:af:e2:4d:bf:11:66:bf:fc:65:9e:fd:b2:
1f:18:bd:43:47:9e:90:78:ca:26:62:98:38:e5:08:9f:92:a0:
ce:a4:92:3f:69:6a:56:74:a7:33:cb:51:9a:7e:e5:01:57:19:
27:58:b0:42:86:a2:2a:54:de:82:11:ea:70:34:04:eb:a0:e3:
32:f6:21:04:7b:ff:2e:03:a9:ce:6f:3b:cc:27:41:da:d7:f1:
ed:63:41:3b:2b:ed:97:87:35:fa:f5:53:bf:c7:1d:d0:4d:78:
ed:e8:e3:de:1d:b8:4b:d7:2b:9a:f7:5c:83:9a:0a:4c:2f:f5:
2b:06:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:46:08 2026 by rpki-client