Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: xC9ZlxWMngQDvC7J6yYm4NDly5AHkFaSFrTUxrj58cQ=
Subject key identifier: 10:98:85:E2:B5:42:CC:14:E4:16:D8:72:DF:98:7D:29:F1:DF:20:63
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019D29CE471E2591BA286E56D2A8AAA7CA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 157D
Signing time: Thu 26 Mar 2026 11:01:17 +0000
Manifest this update: Thu 26 Mar 2026 11:01:17 +0000
Manifest next update: Fri 27 Mar 2026 11:01:17 +0000
Files and hashes: 1: OBjM2iKRMxSjqa98ychsixD6X5g.roa (hash: q2aIFop5k0Cp3GYeaHHvGFWE530UcdAx8s7zzr0tPgM=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: uWmpBp81IDiCewMirhaPPfi9CeHmv3jMDuhrSP3v/Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:47:1e:25:91:ba:28:6e:56:d2:a8:aa:a7:ca:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Mar 26 11:01:17 2026 GMT
Not After : Mar 27 11:01:17 2026 GMT
Subject: CN=109885e2b542cc14e416d872df987d29f1df2063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:a5:bc:42:62:db:b5:d2:d5:e5:53:e6:b1:
50:5a:e7:f0:bb:0f:94:19:c2:96:0e:a0:5b:68:08:
a8:c2:2c:86:b1:a6:be:97:20:6f:8f:95:77:53:df:
6e:10:48:68:f9:d0:f1:27:a4:55:10:7f:2d:0c:4b:
43:16:52:62:32:3d:92:f3:87:b2:93:13:93:61:8b:
83:be:29:67:ba:fd:51:4b:74:d7:de:28:4e:c6:07:
c6:e3:6a:6d:26:50:5d:b8:4b:59:66:b4:50:3d:36:
28:3a:4b:39:a6:e5:0f:51:7a:93:ef:65:25:89:63:
19:8b:81:5b:6e:c9:c7:54:7b:88:ea:05:18:4d:81:
8c:11:b0:c3:c6:8a:a9:79:ec:b7:b3:d7:2d:8b:e8:
48:9b:b1:c9:40:bb:66:35:b8:0c:38:27:71:da:de:
6d:e4:19:a2:45:05:fd:f3:ad:72:d8:46:39:3f:1d:
7d:27:26:29:ef:f1:c1:64:df:05:5b:b0:19:d6:be:
00:4d:66:e8:5d:c8:1d:1b:fb:a0:04:b4:dc:77:9d:
96:86:f6:79:29:d8:61:d8:5a:bf:15:d7:1a:61:9d:
e6:29:6d:dd:5a:6d:4a:58:93:58:6a:6e:13:f8:44:
f4:25:a4:da:9d:0e:11:f9:74:5e:75:12:33:31:e9:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:85:E2:B5:42:CC:14:E4:16:D8:72:DF:98:7D:29:F1:DF:20:63
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:06:f9:67:95:dc:f0:8d:2a:f3:b3:d0:e8:41:49:62:7f:
e3:b3:10:5c:4a:fc:bb:e2:69:bb:f5:4a:42:ad:83:97:82:ca:
22:61:f4:83:7c:9f:d9:72:e7:92:68:dc:78:40:c1:60:81:e3:
51:90:aa:6d:d5:ad:d8:e4:d3:f6:55:66:54:63:8d:df:c3:c0:
52:2b:6c:e7:20:80:be:93:1e:11:a4:eb:8b:16:1e:33:c1:36:
29:de:44:79:28:6d:c6:3c:75:43:97:86:ea:f3:06:bc:b3:b8:
c9:0a:ae:6b:21:15:01:35:a5:38:e5:6d:ae:d3:3e:10:ca:b1:
a7:70:34:e1:45:2b:b1:c4:dc:2a:34:c6:d8:82:1d:5e:14:79:
0c:6a:d8:b8:17:03:89:6a:bb:02:f7:a4:66:67:1f:01:a5:e7:
cf:fa:76:92:a5:c6:b9:99:45:bf:32:cc:ee:30:14:9d:29:1f:
5e:55:4b:74:22:5d:6d:02:fc:cb:7b:32:53:46:ec:0b:ce:02:
ae:43:d1:9e:bf:ec:3d:5c:6f:90:c1:04:91:50:67:50:07:48:
4c:71:45:38:7c:0e:4c:f0:26:9c:2f:04:e6:d3:2d:e5:d1:3b:
2d:f7:da:26:86:74:c3:c1:05:4b:a7:d5:0a:a9:62:f5:66:cc:
35:a3:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:18 2026 by rpki-client