Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: 7J1m9TrkRobwxp7qBsO4Exk40ZopeASc6LOBEuBYq1M=
Subject key identifier: 04:37:25:BE:B7:C6:B9:82:CF:47:1D:25:98:B2:7C:20:54:1A:4A:3A
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 019D33E3CA688E831D563BF0E6BC188EAE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 10:00:59 +0000
Manifest this update: Sat 28 Mar 2026 10:00:59 +0000
Manifest next update: Sun 29 Mar 2026 10:00:59 +0000
Files and hashes: 1: PV6yxtYeyOgeAtdCuyx-Wp2snBc.roa (hash: N4MZJRHi0fr7ViMCQpFC5R5kvKtxpG034IO9Kg1NAg8=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: 6gRvzvoiUwecEyCqgCg60RN2wooy+xKr8rs4tnE19MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:ca:68:8e:83:1d:56:3b:f0:e6:bc:18:8e:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Mar 28 10:00:59 2026 GMT
Not After : Mar 29 10:00:59 2026 GMT
Subject: CN=043725beb7c6b982cf471d2598b27c20541a4a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:85:02:e1:79:27:15:7b:c0:47:3c:1d:9e:
b6:5f:11:17:cc:e6:ce:7b:b1:06:46:cc:c7:55:63:
86:f2:fb:97:ff:88:9e:de:c4:cc:4c:d2:8d:c2:d8:
ba:49:65:14:35:9e:9f:9f:6f:f2:5c:9e:45:55:e7:
e4:bf:45:ac:20:f7:22:26:cb:9f:d7:c1:dc:6a:b4:
f0:f5:51:d1:9f:9d:ab:e3:08:60:bf:3e:e0:86:74:
b3:f4:72:09:08:9d:46:68:a8:f9:cd:8d:2a:3a:3f:
24:d6:b4:0a:4f:9a:b3:85:c6:e5:f6:4c:67:f8:fe:
b0:5a:ba:09:99:ed:ce:21:72:89:2e:d2:00:b6:db:
c0:e6:d8:86:8a:7c:ec:65:57:57:37:47:fe:2c:62:
f9:b0:fd:31:70:20:06:b5:41:6d:4d:61:fb:be:b7:
b4:fb:49:19:17:75:5e:20:52:83:97:d7:a2:38:19:
4b:19:89:81:41:10:f2:12:34:05:af:f2:e1:4f:33:
8a:b9:8b:5f:37:5e:09:df:60:d7:6f:4b:4b:63:5c:
bf:9d:f3:db:12:c1:2b:27:f8:93:e6:f7:56:ec:97:
8e:ed:20:48:cc:4e:b9:84:4f:61:12:e8:78:6f:31:
29:33:3c:e3:58:e1:f9:5d:de:d6:53:19:65:89:0c:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:25:BE:B7:C6:B9:82:CF:47:1D:25:98:B2:7C:20:54:1A:4A:3A
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5c:2b:f7:c1:78:ff:69:18:c6:3a:01:21:dc:ef:1e:ad:8a:
42:4a:d3:39:c7:f6:a0:5e:34:2b:e9:f0:7e:cb:3e:fa:3b:0f:
51:88:84:12:ec:76:1a:fb:34:d8:20:9e:3c:e7:68:c8:27:85:
40:26:ff:78:ed:4d:12:03:64:26:f8:7f:ea:92:3e:23:97:cb:
89:3a:97:ec:1b:23:90:d6:c9:1f:d9:b5:88:ac:84:3b:8e:1c:
56:94:32:31:d7:60:04:b6:51:84:76:90:43:1b:51:8d:05:73:
6d:c0:1b:0a:59:cc:f5:4e:45:91:37:ca:91:22:5d:99:13:41:
37:cb:3a:35:69:f3:3e:e7:21:2e:71:ec:4a:b1:06:b4:4a:34:
6a:3f:0f:44:d4:e1:29:ce:1b:cf:c0:fb:54:93:bf:3d:59:31:
05:3c:45:68:e5:5d:9d:d0:45:f8:00:df:5b:6b:86:28:67:21:
75:70:15:1f:f3:5b:61:06:e5:2b:01:4d:40:92:a7:dc:9f:9e:
c8:4b:81:04:93:cc:73:59:85:e0:a0:cd:02:f3:e1:07:b6:89:
80:23:a1:c9:0c:78:2c:98:ea:15:fd:ed:7a:47:8d:34:47:ce:
7c:23:34:1e:18:38:33:80:b0:03:35:6f:3b:e0:5f:45:2f:d1:
b3:b5:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:07 2026 by rpki-client