Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: 2f92uIpVXmdy3hkf0XlJQwE/q+5zfpbkuW3tuQoY+nE=
Subject key identifier: 2C:BA:03:47:58:91:8F:17:4A:5D:17:64:1C:18:B2:87:91:59:51:43
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019D2996DE2CD90A991860EECB9865FF3BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 17B6
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: ij/nYxlGp+nWMC0vZW/V8FzXvniafReSJgviA0K32yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:de:2c:d9:0a:99:18:60:ee:cb:98:65:ff:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=2cba034758918f174a5d17641c18b28791595143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:80:f4:fd:51:a3:43:c3:d0:10:56:46:50:
64:27:ee:1c:b6:0e:0b:98:b6:f4:34:13:80:64:3d:
85:9a:99:9f:ac:52:35:46:68:03:1d:ea:37:0c:4f:
2d:29:ee:47:10:c1:5a:49:89:c7:f5:6c:8f:b3:5d:
7f:aa:79:a0:fa:a6:4d:6f:2f:49:ea:29:57:bd:39:
e9:e0:1d:73:08:df:c5:6d:e2:79:4a:85:80:4c:6c:
db:3e:6d:d6:97:7e:37:4d:08:4e:7e:94:6a:57:e8:
e9:d9:41:9e:1f:d7:8e:14:d0:66:d2:f5:83:6f:e5:
9d:68:74:27:a9:7d:bb:52:62:e7:a9:0e:01:36:0d:
40:c9:62:cf:59:ff:3f:b8:a5:24:e9:fe:e5:48:8a:
76:66:f8:07:96:9e:2b:87:e8:0f:83:5f:94:a0:41:
6b:00:69:e0:d8:17:8e:fc:ce:bb:6d:ae:f9:d2:44:
40:77:62:58:f2:8f:8c:94:15:be:d7:39:4d:3b:82:
d9:f5:79:94:a1:66:03:23:5e:d5:02:d9:04:3e:82:
6a:58:06:70:2a:e2:2c:b5:23:fd:d5:e4:21:ae:fc:
7e:21:47:83:e0:5e:71:42:c3:e2:ba:eb:98:7f:d9:
a7:c4:2f:0e:a4:e3:47:ca:0f:44:ac:55:c3:cf:9d:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:03:47:58:91:8F:17:4A:5D:17:64:1C:18:B2:87:91:59:51:43
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:9e:49:5e:bc:ad:02:31:6e:02:65:eb:41:17:25:82:b7:
94:e2:c8:ad:80:fb:af:66:85:d1:9f:83:e1:3e:13:68:62:9c:
64:a5:fd:b5:b4:36:f5:58:bd:17:70:e4:51:ec:34:32:59:ff:
3f:95:44:5b:a0:48:c3:ec:e3:47:63:a3:03:dc:d8:82:42:34:
74:86:4d:a0:ef:d0:02:fe:ab:65:29:6d:88:16:d4:8a:f3:a9:
1a:cf:a0:36:5c:e8:da:87:e8:49:5e:7d:5f:72:11:17:1a:9e:
a3:ca:1f:df:26:f2:74:0b:60:f4:9e:64:61:17:0d:d1:12:48:
6f:28:c2:e1:8c:ca:30:72:06:20:c8:d2:f0:6e:3d:65:5f:32:
96:60:d0:a1:be:2a:70:2f:53:75:20:70:e9:22:92:b9:c7:d0:
e1:2b:21:49:c9:93:df:43:cd:22:7a:09:8e:0e:8f:c5:09:b0:
3c:b9:d8:d8:30:9d:08:db:49:fd:ad:38:1a:be:5f:7a:6b:12:
58:0c:3a:e8:9a:93:18:78:35:b9:6d:61:85:95:1e:91:b9:5c:
b3:d2:9b:14:dc:d1:d1:4c:e8:57:b7:30:02:1a:c2:6b:fc:25:
30:98:83:4f:a8:44:fe:95:ef:63:4b:c4:64:55:44:9e:4a:65:
65:fe:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:15 2026 by rpki-client