Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier: c2KxvCMfU90QTJxG8Itl/YXY5nY9fUShAICZ5OXC7DA=
Subject key identifier: 97:A5:43:EA:FB:7E:1F:4A:08:5C:66:80:F5:C4:7E:6B:D2:E9:19:49
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 019D322C3C7040BFD64C9E1DB9B6E5A93CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 02:00:52 +0000
Manifest this update: Sat 28 Mar 2026 02:00:52 +0000
Manifest next update: Sun 29 Mar 2026 02:00:52 +0000
Files and hashes: 1: 2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa (hash: cybpkVwdsMajo+j6GQEPWPYPJtxhQXNnJjY27Ojj6kI=)
2: H-6m9OAus7SJdJgHPXm_EOjYjKw.roa (hash: gi8ow+847xYV+vC4uNruDQ8q4FPVqzKl6+lW3Re5puA=)
3: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: jtWZcvpoMdexVCbo9NlKTyIwTQ4LaNzVJaUKtbYXr3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:3c:70:40:bf:d6:4c:9e:1d:b9:b6:e5:a9:3c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Mar 28 02:00:52 2026 GMT
Not After : Mar 29 02:00:52 2026 GMT
Subject: CN=97a543eafb7e1f4a085c6680f5c47e6bd2e91949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:c5:2d:e7:71:54:33:56:d3:80:9f:79:50:
81:d9:73:69:2c:2a:ca:b5:1f:47:2d:d7:da:73:34:
78:9f:1a:f3:d0:1f:7c:eb:46:ad:56:5e:0d:aa:3c:
39:03:4c:d9:cc:e9:a8:b1:5b:87:0e:3e:3e:e2:68:
70:dc:80:f8:15:13:b1:7a:1d:13:24:d7:0b:d9:56:
37:ee:c9:64:d0:b1:9e:a1:1f:bd:52:74:2c:35:0a:
94:b5:71:00:0c:96:26:34:eb:f7:e5:02:22:a5:31:
dc:de:5b:0f:63:50:af:50:97:43:61:c8:6c:18:fa:
ad:25:16:fe:79:38:9d:a1:1c:38:0f:25:4c:be:f8:
91:0b:8e:a1:d2:be:6b:24:a5:f7:e4:c7:63:b0:52:
b7:03:4f:cc:c9:c0:50:a7:24:8d:cb:e7:b1:38:c7:
c3:ee:d7:a1:6c:6a:09:7e:81:3e:65:af:66:fc:fb:
e4:6c:ab:f0:85:75:09:cb:8d:b4:a8:2c:0c:ea:70:
38:0a:60:8b:7e:85:db:61:33:42:ec:2f:52:26:b1:
47:97:1e:f1:9d:ed:8c:80:01:f0:2f:6d:3b:b9:d4:
bc:ed:c7:dc:02:04:c0:43:3a:45:db:c1:83:95:ea:
18:01:2d:4d:99:1f:f8:ff:1c:43:51:96:75:56:d0:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A5:43:EA:FB:7E:1F:4A:08:5C:66:80:F5:C4:7E:6B:D2:E9:19:49
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:48:b0:d6:ad:51:13:b0:1e:5c:d4:f3:cc:c7:2e:83:70:fa:
9c:62:8c:34:a5:45:5c:65:c9:65:59:e8:9c:c0:e2:39:aa:02:
6c:08:4c:eb:ac:5c:90:12:97:82:d1:30:a0:af:fc:92:68:a4:
d5:61:e8:62:68:fa:16:05:1e:15:b4:df:c7:42:c9:da:9d:53:
a9:66:61:56:e5:44:c4:71:44:b6:fb:03:93:1f:1d:dc:6f:6c:
01:e4:10:e0:b4:dd:88:5f:a9:a8:ba:ab:d7:17:bd:c7:ba:04:
8a:6d:8d:63:a1:8f:b2:9d:2b:b2:c1:93:7a:4a:40:cc:28:d8:
c9:4b:cf:83:d7:4f:a9:41:fa:a2:39:ea:f9:ec:e3:85:16:08:
fe:0a:25:43:eb:16:60:92:e2:23:c7:a6:e4:4e:14:85:af:97:
99:6e:bb:21:7a:22:a7:0f:13:10:aa:e9:b3:9a:87:51:25:0c:
74:c7:b7:03:1b:7b:3a:46:67:4a:67:d5:ec:0c:10:1e:7b:08:
86:82:4b:19:16:83:bd:d7:e3:d7:67:82:3f:2a:e4:3d:ee:ae:
24:6b:ee:fd:3c:6e:29:aa:71:2f:db:a9:e0:b4:c1:69:af:f0:
51:39:dc:72:ed:97:68:2f:db:22:f4:43:94:db:27:82:49:a4:
26:6b:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:54 2026 by rpki-client