Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
File: w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft (raw, json)
Hash identifier: el22CHADURjsusmMqphWV2iH8bKMkfu/N3hrF3vxOus=
Subject key identifier: 15:FD:DD:8C:1A:19:BD:26:52:C4:2B:6A:C1:95:9B:0C:F7:43:8F:2C
Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
Certificate issuer: /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Certificate serial: 019D28BB52071AA9B08BABBB5C3135765046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
Manifest number: 0DF3
Signing time: Thu 26 Mar 2026 06:00:57 +0000
Manifest this update: Thu 26 Mar 2026 06:00:57 +0000
Manifest next update: Fri 27 Mar 2026 06:00:57 +0000
Files and hashes: 1: W8dKjXBUt-fUvq_EeYi3tYn44qg.roa (hash: WuUbLEYtlTk2nWLaWd31Mi6WPwho3xJbhqbEmnd2kdo=)
2: w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl (hash: HS9hZWZTU/SNYNqgiFq9OZcwhy0VBZZd3cMdroLbTRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:52:07:1a:a9:b0:8b:ab:bb:5c:31:35:76:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Validity
Not Before: Mar 26 06:00:57 2026 GMT
Not After : Mar 27 06:00:57 2026 GMT
Subject: CN=15fddd8c1a19bd2652c42b6ac1959b0cf7438f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:63:12:65:23:c0:21:11:fc:49:37:24:52:
6f:98:17:cd:a8:5f:1d:cd:d0:52:b7:d7:91:01:ba:
02:ae:bf:2e:dc:c0:74:de:f1:f3:00:a3:c0:e1:dc:
cd:67:8f:c2:53:d9:64:45:63:36:a5:c9:e5:af:2d:
42:9f:85:00:de:2c:90:eb:7a:ec:88:40:2a:ef:38:
41:27:11:ed:97:b6:aa:53:c4:40:f0:84:4f:c3:78:
a0:5e:09:6f:99:5d:ca:22:00:ca:21:97:b8:23:57:
11:20:94:a7:48:4b:67:ca:95:30:3d:cd:4a:4b:76:
97:bc:78:a1:17:ec:d5:0b:93:45:a2:63:0b:6e:12:
b1:ee:58:2c:1d:1b:19:c5:e6:ba:dc:7f:68:0d:96:
40:62:bd:47:f5:3a:92:ae:82:d8:9b:06:8c:15:47:
89:c8:87:38:4d:72:7b:ec:6f:38:3c:1b:42:0e:c5:
49:65:f3:ae:2b:5f:a4:f0:d9:da:09:a9:7a:9c:6a:
be:e5:50:2d:21:a3:76:0d:5b:d8:5f:2b:56:06:88:
16:21:8f:3d:fa:6a:35:d7:50:72:73:ed:f6:14:fc:
1a:77:7e:f9:22:e5:af:2f:f0:f4:53:52:db:c3:71:
fe:9a:29:8c:eb:ff:ab:f0:87:22:91:fd:eb:9c:47:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:DD:8C:1A:19:BD:26:52:C4:2B:6A:C1:95:9B:0C:F7:43:8F:2C
X509v3 Authority Key Identifier:
keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:68:ca:71:d5:c6:38:64:41:fe:ee:62:98:ea:f5:4f:10:9b:
67:d6:f9:d5:17:82:9f:bc:e5:40:fa:ba:4b:07:1d:9e:6d:a2:
e1:fd:2a:b1:fb:72:c8:13:72:b0:cf:fb:b9:15:4e:79:a1:1e:
de:d4:84:18:0d:65:ee:e1:de:3f:c5:ac:69:02:0b:25:00:92:
d6:60:98:d1:21:5e:a6:ef:42:05:17:a4:c2:f0:90:e8:95:55:
43:71:b1:15:06:11:8d:8b:4c:32:d8:a8:30:2b:a4:62:10:9d:
e7:db:39:3a:8f:bd:22:22:04:06:6d:a5:7b:eb:88:a9:71:f4:
27:d1:54:4c:2a:d1:64:4b:9e:56:df:0e:b0:19:75:41:d4:c8:
4a:8a:5f:21:60:f6:17:68:44:e6:01:e0:49:51:25:d6:ea:67:
a1:79:12:53:db:96:cb:a3:32:86:20:03:22:54:d5:d6:f8:be:
91:fc:bd:9c:cf:80:0a:ce:48:cb:fe:7e:b6:c8:fe:70:81:ce:
33:db:ff:fd:48:f6:64:44:5b:f7:3d:9f:05:e5:17:d3:45:4c:
54:3f:7b:e4:35:af:3a:3d:55:06:f2:22:81:a8:e8:75:50:cb:
41:84:85:fd:8a:5c:f5:1b:a8:a4:5b:16:13:d6:61:c0:04:0d:
39:af:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:46 2026 by rpki-client