Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: WsBEsy1sXqPAL6+SUQRGx8XQJOEYQJSAPIM0mq6A/HI=
Subject key identifier: D5:33:3A:4F:A3:86:4B:D4:6A:29:DB:BC:28:EE:3D:77:D3:EC:8B:F1
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019D2884E3DD01196C630BBC3F72DE57DBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:30 +0000
Manifest this update: Thu 26 Mar 2026 05:01:30 +0000
Manifest next update: Fri 27 Mar 2026 05:01:30 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: mOnnvaMu1MFrdcJYiNyv4dzZv7hnrkvL1JGw92a6lDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:e3:dd:01:19:6c:63:0b:bc:3f:72:de:57:db:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Mar 26 05:01:30 2026 GMT
Not After : Mar 27 05:01:30 2026 GMT
Subject: CN=d5333a4fa3864bd46a29dbbc28ee3d77d3ec8bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:a6:58:a7:47:a9:d3:dc:6b:bf:e3:ac:c4:
e9:fd:5a:71:03:4c:56:ab:01:94:4d:32:0e:a8:cb:
54:7c:69:7a:e2:44:8e:43:d8:fd:38:22:d1:2a:df:
e4:8b:16:cd:a5:2a:70:54:e8:d9:79:3b:85:6c:a2:
7e:20:42:5a:55:7f:bb:c3:e8:03:09:9c:76:2a:30:
53:38:26:4c:66:e2:38:f8:af:6b:4f:72:60:73:dd:
19:09:ee:b7:3c:e2:44:98:5f:95:15:06:5e:ca:5b:
b5:8c:ba:98:ec:35:1d:cd:79:1a:1f:ee:80:82:74:
a8:4a:4c:f3:f1:1c:2c:e9:a7:a0:12:6f:ca:95:86:
81:09:07:57:37:26:f2:d9:d7:7c:76:b1:b8:21:53:
3c:da:79:91:49:a0:cd:aa:ae:10:a9:f5:a0:96:58:
79:58:a8:05:7b:97:1b:53:d8:56:5f:64:dc:30:30:
02:04:28:ec:1f:47:0d:af:04:f1:25:15:0b:20:0a:
81:95:75:ee:71:ad:6d:a8:99:1e:20:ec:3b:5d:87:
f1:03:13:2a:89:e7:2e:bc:91:6f:75:ee:e1:79:65:
79:99:41:40:b5:22:b7:83:46:e1:e4:ee:d7:ae:d8:
18:94:05:9e:62:28:33:be:fc:d8:c2:05:94:b1:f2:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:3A:4F:A3:86:4B:D4:6A:29:DB:BC:28:EE:3D:77:D3:EC:8B:F1
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d4:ec:30:de:09:27:e7:f1:5c:9e:64:f8:0c:f1:fb:76:e3:
60:41:3d:ed:5e:ce:e3:b8:66:ab:74:c7:96:11:46:0d:e0:01:
a2:0f:64:16:ac:1d:91:8c:b8:3e:db:a9:89:d1:74:b2:16:95:
8f:23:b3:c5:3c:d6:35:10:46:1d:cc:37:fa:7b:6b:4e:da:f5:
9d:94:a3:be:ae:88:de:52:5d:2d:51:62:60:aa:35:cf:e8:66:
8c:55:c1:b7:62:1d:c4:f8:a9:ac:58:2c:06:b3:5a:3e:db:a0:
f1:ba:9a:97:f7:25:79:51:42:f6:b4:a1:39:f4:71:22:32:00:
8b:01:bf:07:32:54:5a:80:1d:50:7f:2a:1f:b8:9f:92:2a:21:
d6:74:f1:63:7b:79:76:90:78:73:4d:60:43:6f:50:c9:8a:d6:
96:61:93:ad:1f:bb:2f:77:0c:43:fa:b1:e6:21:c8:e0:d5:7c:
00:be:7d:c1:62:eb:55:1c:fd:65:88:d0:46:c5:a3:a0:93:a5:
4d:02:6b:db:5b:16:91:67:47:85:9c:40:03:2a:f8:bb:ef:3b:
c4:dc:0a:bf:a0:d3:d2:65:4f:30:8b:69:95:4c:3e:9c:7a:ba:
9e:4c:d4:44:0b:76:21:26:76:d7:4b:d3:1b:19:fa:9a:40:b6:
8d:63:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:38 2026 by rpki-client