Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: e3NvPO+FaPjEqhhH620WtbkbD0H0VBhktaoVm8QU8MM=
Subject key identifier: 1C:9D:DD:7A:FD:56:EC:AD:D2:F4:F4:0F:18:41:CB:76:25:6E:DE:5E
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019D2772C08D5F2F6067BFADF878D38D83CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 1760
Signing time: Thu 26 Mar 2026 00:02:04 +0000
Manifest this update: Thu 26 Mar 2026 00:02:04 +0000
Manifest next update: Fri 27 Mar 2026 00:02:04 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: VM1M+pekvumR/vxoDTY9T4E7cCaOYnFuFeHIBCB+aek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c0:8d:5f:2f:60:67:bf:ad:f8:78:d3:8d:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Mar 26 00:02:04 2026 GMT
Not After : Mar 27 00:02:04 2026 GMT
Subject: CN=1c9ddd7afd56ecadd2f4f40f1841cb76256ede5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:8b:12:74:db:cb:95:18:e8:78:77:4a:9c:
36:c5:2b:f4:4d:1e:08:dd:b9:e4:35:e3:33:1b:92:
a2:59:63:e2:81:f4:39:74:fe:05:f7:e1:07:db:31:
e7:2d:cd:36:27:50:f5:61:7e:4e:55:c1:f1:04:ef:
ad:a5:ea:fa:38:22:ec:92:27:22:d6:01:ea:66:b5:
2b:db:cf:43:ac:2f:bc:c3:f3:a8:d5:b8:de:f4:8d:
10:30:97:b8:c0:e6:d6:c1:ee:c5:33:6b:f8:57:58:
b9:56:e2:34:7c:3e:79:79:f7:c3:85:56:6c:6b:63:
1c:21:b2:20:33:bd:d7:b6:e3:d7:ce:d8:1d:68:dc:
bc:6b:31:c2:da:c7:48:6c:ff:b7:08:1c:87:96:4a:
a9:31:7c:90:7e:f9:e3:b8:fd:54:1e:5d:fd:e6:1c:
b1:dc:e6:36:81:d8:87:ef:ed:5e:25:96:2a:e3:a8:
d9:9d:2a:37:8b:ce:94:d9:3e:f5:d6:46:68:c2:5e:
04:6c:fd:65:da:d1:83:c6:e7:fb:e8:81:b0:cd:6a:
e4:74:57:52:f3:35:a6:13:b7:4e:0f:fd:f3:48:4c:
73:92:cb:62:23:1e:19:a5:f0:e7:0f:68:34:39:9f:
bd:32:05:1a:0c:10:ab:cf:9b:cb:ed:f1:55:fc:95:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:DD:7A:FD:56:EC:AD:D2:F4:F4:0F:18:41:CB:76:25:6E:DE:5E
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8f:5f:91:6d:c8:2c:be:63:d7:93:f0:79:96:cf:90:3f:b1:
a5:e3:31:94:e4:e2:a7:7d:7a:39:d6:b4:5b:5c:05:de:3e:10:
0d:49:8a:05:97:cc:e8:8c:fa:4c:e3:f3:90:12:e9:4c:61:ea:
8e:da:d4:81:c7:61:a1:fa:5e:e0:05:74:f3:f1:7a:78:50:c7:
fe:a9:6a:93:4a:ad:ae:20:61:6b:dd:1e:f5:60:e3:de:50:8b:
0a:cc:37:1d:76:49:8b:61:0d:4c:6b:51:45:e2:0d:6e:ce:bc:
9b:40:0c:ad:6e:7e:b7:48:17:6c:06:b8:d4:e7:2d:d9:c6:f6:
af:a2:86:2d:ce:a0:b0:d9:01:9d:b9:b2:0b:81:31:47:79:bb:
cf:13:fe:5d:44:fd:4c:5d:14:6d:b8:6b:7a:34:ad:b2:2f:c7:
ff:1a:25:1b:19:4c:f8:09:63:c2:65:a1:d8:00:ab:81:d4:9d:
f0:46:6d:5b:71:eb:27:59:8b:5c:ac:ae:c5:2c:d0:6b:ce:14:
8d:1b:0e:4d:ae:8d:d2:56:37:e5:9b:a2:6c:31:3b:7d:1d:d4:
4a:23:c7:ca:ae:f6:7e:66:a4:97:9e:0f:b2:e1:fc:73:c0:55:
1a:6f:16:24:f1:fc:3a:b2:e4:4d:de:07:19:50:a9:2d:d2:aa:
96:da:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:23 2026 by rpki-client