Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier: /6yU75OVwyURe0W7zOLtWOcZ7t4NjZXNiHGNUWtbJIA=
Subject key identifier: 4D:D6:4F:77:00:C2:69:F4:B5:1D:D1:E2:D8:ED:0E:28:2F:EA:C7:CD
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial: 019D29292E17EE117A5FB1ED5BB2CB643DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number: 058D
Signing time: Thu 26 Mar 2026 08:00:57 +0000
Manifest this update: Thu 26 Mar 2026 08:00:57 +0000
Manifest next update: Fri 27 Mar 2026 08:00:57 +0000
Files and hashes: 1: 0lgng2rjDy26wvLpufoJ44YGSa8.roa (hash: Sp2gMQIGghJdGnoU3YO/ErS7zVxVldScly14Bqy0M6k=)
2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: WHbZqIwQ1EdbaCxrzeiR/fbvE2dEwRnQGG+nXgoJNig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2e:17:ee:11:7a:5f:b1:ed:5b:b2:cb:64:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Validity
Not Before: Mar 26 08:00:57 2026 GMT
Not After : Mar 27 08:00:57 2026 GMT
Subject: CN=4dd64f7700c269f4b51dd1e2d8ed0e282feac7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:84:4a:39:78:41:9c:12:4d:f8:69:21:00:
5d:cb:2f:f5:f8:5f:8b:9c:e9:71:3d:ed:ed:cd:21:
10:fe:5a:9f:27:f0:45:00:df:65:32:7d:23:4c:4c:
3c:b4:66:6d:3d:72:10:ec:e0:50:92:35:d2:b0:50:
cf:ee:06:ae:27:eb:f7:ff:de:cb:1e:21:a7:9d:c8:
04:9a:ce:9f:9a:f5:48:a1:61:f4:dc:67:66:d5:40:
d5:5c:f8:08:35:46:7b:14:96:c4:03:03:db:84:67:
ab:78:59:58:74:68:6f:e4:bd:bf:39:ec:fb:ab:06:
81:57:95:37:49:e0:04:1f:3f:1a:be:be:b9:9b:2b:
66:8d:94:73:69:cf:f8:f5:ed:96:60:9f:14:c2:60:
96:ee:ad:b5:f2:c0:c8:e3:c2:51:68:2a:df:de:43:
f1:bd:14:90:a5:d1:fc:05:e0:e9:a0:10:dd:14:f2:
6d:ae:d1:7d:c3:7e:9d:bb:f0:7d:4e:3d:72:0d:99:
bc:21:ab:65:0e:48:26:8a:e4:76:e5:4d:54:13:fd:
cf:86:72:13:ea:21:ea:b2:92:8d:a7:6b:5e:20:e7:
3b:1a:1e:0e:19:17:1e:43:68:95:1b:ef:40:26:5b:
88:e7:94:43:5b:f2:26:a6:0e:ed:42:c3:c7:6d:d1:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:4F:77:00:C2:69:F4:B5:1D:D1:E2:D8:ED:0E:28:2F:EA:C7:CD
X509v3 Authority Key Identifier:
keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a9:26:6d:2f:7f:76:1b:3e:a2:3d:f4:19:82:43:9e:19:ff:
d9:c6:14:07:c1:a7:7e:ea:ac:4b:37:7c:b9:dc:5a:e0:ee:a5:
43:1f:d2:76:bf:70:9a:0c:77:75:af:5b:72:43:1c:80:94:4e:
c3:b9:2a:5a:3f:3d:89:31:d5:6a:bb:5f:bc:50:56:77:37:16:
e8:41:7c:70:9e:e3:d8:84:71:f5:fc:5d:df:8d:6d:be:52:63:
65:30:96:6e:40:a0:1b:ca:11:3b:a8:57:76:50:61:b0:3a:30:
1f:0a:ac:52:8a:fc:2a:be:7f:5a:17:49:0a:4f:db:62:32:3b:
a0:dd:c5:7c:0c:db:3a:d9:fa:ba:a0:3f:e4:c4:8b:c0:49:44:
d3:a4:2d:af:a8:66:a9:41:f8:83:18:b9:92:f2:4f:44:c1:82:
74:55:90:bf:4a:4e:b1:9f:0c:df:5d:27:0a:5f:0a:72:21:c5:
86:5c:c0:fe:96:ba:ea:bd:bc:a5:8b:8d:3e:c5:fe:fb:77:0b:
ed:7f:e4:a4:4c:43:b2:cf:01:0c:b1:c2:b4:90:8c:b1:9b:c1:
7e:20:18:90:7d:0f:82:f3:e7:9c:9b:51:e0:6f:74:fa:e8:02:
b0:31:c3:a3:a0:da:ff:c0:c0:a7:44:78:5a:6c:35:3f:43:4e:
9c:21:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:33 2026 by rpki-client