Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: twVbxpk8NmNHuyVlOxX5X92kbcJNd5fATgoCfHTXaFM=
Subject key identifier: 9A:1A:D0:38:B2:68:48:64:47:10:6A:FD:44:30:F2:4C:B3:4E:47:EE
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 019D2B4F402A0617C8D9B4459286FD623C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 18:01:47 +0000
Manifest this update: Thu 26 Mar 2026 18:01:47 +0000
Manifest next update: Fri 27 Mar 2026 18:01:47 +0000
Files and hashes: 1: Vs3cpjLkojhEeoteudtEVAgCQwo.roa (hash: yiuHOMQwcx3KrxmcRKZ69rV4XNynfYY+/zYAKiGbSDw=)
2: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: wU55bg33siyug0AVthuYlPh/BsSpRFd/g3PlFi/O4gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:40:2a:06:17:c8:d9:b4:45:92:86:fd:62:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Mar 26 18:01:47 2026 GMT
Not After : Mar 27 18:01:47 2026 GMT
Subject: CN=9a1ad038b268486447106afd4430f24cb34e47ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:7e:7a:2a:2c:3d:0b:c4:cd:d3:3d:7b:37:
7e:44:22:f2:60:c9:61:21:99:ae:0d:4d:f0:b1:58:
31:45:a3:79:2a:e5:9f:09:9c:69:14:51:d3:f6:fd:
a0:e8:e7:2e:07:25:4b:09:4f:19:af:9e:8d:6b:64:
3f:7b:25:c1:22:69:e1:08:50:20:c3:e6:46:bc:f3:
5a:20:ec:56:d1:df:38:c2:ee:db:a3:ba:72:a5:f3:
da:53:9e:88:e0:26:bc:a8:93:b2:b1:07:b5:3e:bd:
c2:1f:cd:df:c4:98:eb:a1:0e:f0:67:9b:af:bd:35:
c6:5f:54:6d:13:db:6c:52:12:25:a1:dd:ea:8c:91:
43:77:44:e0:d9:83:c3:cf:9f:2d:06:d1:08:6d:fe:
55:d6:d8:53:06:45:c8:82:bd:17:62:cf:e3:b6:0b:
d7:20:ed:31:66:ba:23:53:e5:03:63:ba:03:9f:7e:
c3:94:9a:6d:7b:94:85:b8:2b:81:7f:3f:09:1f:fe:
e4:64:06:61:19:fd:e9:31:67:a8:8a:d1:47:8f:ce:
50:ea:86:f5:42:b9:3e:93:be:4a:c6:93:73:fe:04:
55:35:65:ce:bd:c7:5e:bd:12:ea:5d:47:c3:11:d4:
cb:92:46:e7:db:60:af:c0:8c:5e:5b:2a:2d:5e:e4:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1A:D0:38:B2:68:48:64:47:10:6A:FD:44:30:F2:4C:B3:4E:47:EE
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9e:9d:b2:dc:90:bf:7b:21:35:f4:b2:ea:16:7d:35:37:c8:
b6:b0:95:bb:de:e5:f0:0c:50:7b:dd:10:4e:78:f2:13:d9:9d:
d6:3d:c8:f6:aa:67:b3:64:e4:54:45:42:2f:a7:15:bd:b8:68:
66:d6:0c:11:b8:76:c0:5c:d2:5b:ff:dd:a5:08:92:28:90:70:
bb:fd:8c:28:cc:6a:00:6a:45:e0:20:9b:f7:2c:85:6b:ef:bd:
d5:8d:8f:ab:03:f3:cd:1a:d8:95:31:50:27:98:4c:f1:1d:6c:
82:39:61:86:9f:22:d9:7e:6d:55:0e:6f:2e:36:e6:24:6f:4c:
bc:30:95:89:56:8d:2a:e9:3d:d9:5f:a2:9d:ec:e9:f8:94:cd:
23:46:a9:da:90:d4:c9:d5:2a:45:a4:2e:bb:2d:3f:c1:81:c6:
2c:97:87:74:6b:e9:4c:da:c5:53:f6:bf:82:a7:c6:2c:cc:64:
3f:d8:51:66:37:7d:52:eb:f4:21:04:8a:d7:b9:92:74:71:e1:
ea:e8:be:e3:d7:b1:00:9b:a6:c5:56:9d:c8:bb:c2:30:ad:7a:
fb:37:c8:7f:46:d6:a5:27:b0:56:3d:0a:b6:b1:25:a8:be:29:
92:5e:9c:2d:43:f6:85:12:a3:13:be:c9:0a:c2:c6:64:cf:fa:
f4:c4:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:28 2026 by rpki-client