Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier: cPao5MLVrrF0v3lZ2aZo37muHIEEo2wF7ve55q/R7J4=
Subject key identifier: 2A:EC:DA:16:A4:5A:48:6E:57:EA:21:8A:96:21:C6:DC:EC:B8:42:FF
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer: /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial: 019D2704271E22C2E1864BA00874235E8853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number: 0AAC
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: h0udnEUnZF4CgPhVM04ofBmSvzQ.roa (hash: 86Ue2QRslfOBTNicHKV9wxjZDnUc41ToAUPvqZQH7cs=)
2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: 5m/j8+exiDuoE4a7vkughLBVOANt7FyV3IfxBfnB6JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:27:1e:22:c2:e1:86:4b:a0:08:74:23:5e:88:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=2aecda16a45a486e57ea218a9621c6dcecb842ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:b4:e1:66:16:5f:e2:22:7a:3f:97:60:5c:
fe:3f:86:13:c0:4a:79:1b:b2:c7:49:31:0b:ce:ca:
ff:ec:be:08:b7:90:bb:4f:0b:26:21:b7:cf:c9:45:
f8:4f:1e:ba:6a:da:26:46:50:9d:43:83:20:0e:07:
3d:88:4c:27:64:74:79:ed:b9:8e:fc:fd:c6:e9:7d:
79:6f:47:9e:20:ff:a6:4a:86:8e:db:9b:41:17:f5:
af:aa:cd:f5:bb:41:16:db:d6:82:d2:66:6d:95:62:
ba:86:f5:ae:5d:95:a6:77:a4:01:6d:7c:fa:71:10:
1b:a2:9f:8b:43:b3:3a:30:64:39:c3:f8:d6:ff:53:
5e:52:4e:03:fb:5a:06:3d:7f:1c:ef:f1:99:0f:35:
d5:01:3b:c7:b6:dd:20:4d:3b:b9:3e:3f:c3:92:b1:
69:04:3c:da:61:6e:f2:d8:ee:79:37:50:93:1e:91:
a1:2f:13:29:6d:65:b8:61:5d:82:3c:d2:6e:a2:be:
cd:c6:09:1e:1b:20:6c:1f:d7:41:b8:29:1e:58:1c:
22:44:d9:63:cc:44:67:60:d0:68:30:5d:ec:2d:ad:
25:28:94:27:b4:3b:69:6d:1d:e3:33:f3:e8:ac:f3:
a9:d0:3e:f2:61:d9:53:d9:7e:6a:d8:9f:e2:d9:42:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:DA:16:A4:5A:48:6E:57:EA:21:8A:96:21:C6:DC:EC:B8:42:FF
X509v3 Authority Key Identifier:
keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1a:07:8d:66:6e:10:60:f5:1b:78:98:a2:ea:70:e2:ab:c0:
e3:50:ba:3c:01:94:7f:63:ce:5c:b2:09:8c:eb:90:62:b4:1a:
60:a6:01:df:a5:44:9a:8c:35:cd:6d:e0:95:60:18:59:10:26:
7c:91:95:50:35:4c:6f:be:f6:63:72:8b:ed:3f:b3:2e:41:41:
ec:41:6f:c5:81:29:80:66:97:0e:40:a8:7e:e9:9d:74:35:c5:
32:3c:eb:49:b9:ad:3a:04:01:96:8b:8c:1b:6e:3a:66:ef:b8:
22:fe:6f:8c:56:33:de:02:12:8a:a5:61:56:66:81:12:6c:02:
67:ff:af:ee:dc:3e:b4:0c:58:c2:7d:be:99:0f:ae:7d:d0:cc:
e5:b7:6c:aa:83:57:94:34:83:81:ae:43:e8:50:95:31:3b:bc:
05:17:a0:eb:e0:c8:d6:11:66:e7:de:a3:ed:31:17:2a:58:c6:
9b:c0:86:08:03:55:f1:d4:e8:0f:4e:5e:5a:e4:15:b2:15:c0:
05:7a:71:3e:6f:70:41:17:48:74:a9:90:c4:58:3e:52:cf:24:
9b:39:0a:1b:75:ff:24:70:e3:a2:a2:c8:25:fe:47:1e:ce:38:
8b:66:47:67:60:a1:ce:aa:ef:f7:6a:4a:2d:b7:ac:c1:35:76:
8d:33:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:21 2026 by rpki-client