Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier: 9VH+AiN/Kj9Nsk7iUPHNcpexyiJQRw7J16QHr1kGfYg=
Subject key identifier: 86:98:8C:19:37:BA:27:D8:95:BA:31:6C:23:87:8F:1D:0E:F0:1F:64
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 019D27722144812AB4A222DA7966800114B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: Onkw20J3Jeq06l3BhcttsXGB3d0.roa (hash: Ot3mUR6mror5TcUgnoDKZwfM/GJizJrnhX1MdvXwCEI=)
2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: T30DCU4AHu76bIHKeDIK73ctIHXvQNt5BJxnQybjE30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:21:44:81:2a:b4:a2:22:da:79:66:80:01:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=86988c1937ba27d895ba316c23878f1d0ef01f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:f7:a6:51:64:b8:0a:3b:b4:b9:ae:80:40:
4c:2f:06:38:be:d3:c1:93:c8:c1:26:d8:42:0c:c3:
f8:f4:c7:46:4d:b5:7a:4e:ba:0b:d7:24:c8:ec:e3:
0a:bb:96:85:2b:5a:d3:8a:19:36:a0:95:e6:0d:c8:
84:1b:b2:19:e5:75:f8:88:2c:cd:9b:81:e3:61:e3:
61:1c:fe:c5:d7:9f:9f:aa:a6:98:dc:63:e9:8d:e1:
6a:a9:ec:f5:6a:d4:53:be:16:5a:cd:92:9b:2b:70:
19:57:97:8e:02:10:e3:db:18:20:02:d0:b1:8f:0d:
85:4d:b8:ed:c8:e7:0b:01:bc:61:47:89:d4:6a:0f:
90:cd:6d:34:97:6b:24:81:2c:4c:47:ec:59:66:42:
e8:81:d5:db:fb:0a:66:86:5d:5e:4d:ce:1e:97:01:
67:bd:37:f9:f5:c3:e1:da:2d:98:00:9c:9f:bd:8b:
07:67:3e:70:4f:2f:81:83:fc:ca:ab:d6:c2:d1:5b:
6c:3c:48:8b:55:38:f0:01:bb:19:df:51:77:9a:3e:
38:fb:33:58:35:a1:9e:01:6f:4e:bb:e6:a7:32:b1:
ad:da:e9:23:9f:b9:4f:d7:a9:cc:9c:67:6f:38:a8:
44:51:de:bc:40:c5:35:d5:21:e9:66:89:fa:9a:dc:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:8C:19:37:BA:27:D8:95:BA:31:6C:23:87:8F:1D:0E:F0:1F:64
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:3d:e9:c2:64:ac:01:66:b5:53:28:7d:4b:6d:d2:88:2e:
f7:da:c9:b7:ec:ba:60:4f:34:21:8f:5e:dd:fb:d0:a3:db:f0:
ed:49:90:6f:06:c9:5b:82:9f:ba:89:eb:22:b3:ad:95:b2:af:
49:c9:14:2f:43:6d:72:7e:ff:e4:35:60:87:5a:70:cc:7e:20:
36:dd:fd:cf:52:16:36:16:95:7d:df:13:d2:3b:bb:da:b1:16:
a1:69:da:9d:4c:36:1c:c6:54:59:bf:e0:44:aa:d7:bc:d5:7d:
eb:ba:ac:c1:d2:f7:56:c6:54:7a:a6:03:80:20:29:14:b5:32:
23:49:e0:14:37:f7:5f:8e:55:0a:50:23:97:62:ac:74:e0:b7:
77:8a:a8:ac:cb:ed:e7:8d:4b:38:ad:a0:fc:fc:d7:73:34:bf:
8e:cf:32:c4:64:c2:5f:b1:e0:2d:18:34:20:a9:dc:3e:5f:02:
df:8f:31:f1:ab:16:1d:f4:58:9d:58:99:1b:c7:02:c8:f7:6c:
f9:05:74:f6:ce:15:57:6e:eb:35:44:eb:3f:bf:04:16:54:d4:
65:31:56:13:6f:cd:9a:a6:42:44:53:2d:ea:68:cd:7c:97:91:
61:ca:46:52:6a:24:bd:d7:62:ac:08:ff:31:41:83:63:1a:ac:
d7:db:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:42 2026 by rpki-client