Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: RUqxq9pj01atqJQYm5Plb1ppTkx8yOdZjzuQVSkcKpY=
Subject key identifier: C2:3B:83:FB:3D:93:91:BD:B2:A9:5E:09:81:2B:98:4B:0F:9B:EE:77
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019D270493D201B4ED2AE457C76E00251001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 1632
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: JHlwQGDbvrC4juRVad57B3oI92U.roa (hash: oSK/eP8u/19D2+8PlzxQLpygFc07vdIXajuQXABfEZE=)
2: fomrS4dX5UyQctRbUOlEOReM51s.roa (hash: OwhdfcJ0K62trAYFFVz/ZuzwZmZiy8nl9/D+tMVNouE=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: Os/LrCK7Hs0ZxEQ9UDZpaZCcgyPqNFDNJrMcnSn6oYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:93:d2:01:b4:ed:2a:e4:57:c7:6e:00:25:10:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=c23b83fb3d9391bdb2a95e09812b984b0f9bee77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:f6:9d:ef:bd:0c:1d:2a:9f:7c:cc:76:21:
6a:89:2a:7e:79:68:1d:01:8c:8b:35:5e:87:ed:59:
89:2e:5a:dc:e2:9c:7b:0e:27:d0:a4:3f:3d:37:e8:
bb:25:db:39:fe:13:c4:dc:ad:8c:1b:6f:71:eb:a2:
32:e3:50:f9:2c:71:46:5a:4d:9f:98:60:b0:07:3c:
93:05:ef:f3:6b:ef:de:59:2b:4d:9e:db:36:63:43:
79:96:dd:e7:f9:fd:aa:4d:f4:36:70:e5:d0:a6:02:
95:0a:49:64:19:32:f3:2c:d3:21:47:1c:d9:df:73:
97:9d:c2:5c:fc:ce:4e:a0:2c:95:6f:d4:88:5e:6e:
10:71:e0:f9:26:d7:11:cd:7f:31:90:40:ea:6a:c1:
60:e2:8d:b2:be:8c:32:b1:dc:37:0e:6d:ba:4f:46:
a4:bf:96:ed:b8:b8:2e:e8:9c:7b:ae:9b:f6:5a:f0:
b7:fa:9c:71:ce:39:95:b6:8a:5d:2b:a6:3c:27:f4:
e9:4d:95:86:45:3d:13:9e:5b:9e:21:97:0c:03:97:
cc:60:07:87:65:06:fc:72:09:7d:08:a4:67:c9:2a:
e5:30:80:f3:5f:63:0a:c5:25:4d:95:42:6e:e3:86:
47:2a:33:61:4f:cf:f3:b5:da:ab:98:68:e3:84:4b:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:83:FB:3D:93:91:BD:B2:A9:5E:09:81:2B:98:4B:0F:9B:EE:77
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:29:0c:29:90:a0:c4:d5:f1:44:a5:ca:32:c3:92:01:c7:30:
43:26:1c:fe:6a:3c:af:83:99:f6:21:77:e4:2d:75:a0:ae:14:
1a:9d:cf:b3:3c:dc:bb:2b:19:0d:56:82:f3:ed:bf:cb:88:b4:
1d:11:79:15:4b:80:61:2b:aa:0f:54:8b:8c:71:70:e4:cf:96:
90:5e:ee:0a:4d:4f:7b:94:52:1a:f4:7b:1f:f6:24:68:d0:a1:
3b:20:c5:55:69:4f:95:04:2d:91:e7:9c:65:c4:0f:ea:ee:a5:
eb:2c:36:d5:85:28:45:24:b5:48:ea:1e:f0:c3:14:72:b5:60:
08:56:f5:e9:35:d2:cd:3f:6b:2f:c5:fb:1e:52:5e:3e:71:18:
25:06:6d:17:d9:d7:2b:2a:f9:1b:c6:e3:ac:38:50:61:61:f3:
8f:63:a4:38:5f:1c:84:0e:af:07:dd:ed:1f:2b:7b:12:0b:e0:
dd:07:49:a7:a7:98:cc:37:d7:1c:1d:5f:61:5d:c6:b7:52:81:
ea:0e:a4:ec:58:f8:6e:d2:46:c0:f9:44:fb:95:05:7f:37:9c:
76:f7:8a:b6:0f:68:85:13:fa:a7:d7:4a:da:4f:4d:31:1a:65:
a3:ff:80:3c:0f:7c:96:c2:01:7c:3f:7e:b2:52:32:f5:dd:fb:
bc:66:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:32 2026 by rpki-client