Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: W4Gw4JYKYXn7ai6sGcpiTkCUHCIf1tKczKnZ0XTrpKk=
Subject key identifier: FF:67:A7:8A:ED:62:6A:56:14:97:64:A9:27:17:DC:5A:FA:3B:53:AD
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019D27A8B8FDA763C720CEF378CD27D664A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 17B5
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: 7ieRky6DrDtdTxGXQoTQmo0WX4QJJSbGsAYm60Ikvzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b8:fd:a7:63:c7:20:ce:f3:78:cd:27:d6:64:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=ff67a78aed626a56149764a92717dc5afa3b53ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:1e:8c:70:00:8c:95:e0:93:7d:cb:bb:16:
b2:c5:5c:7c:80:82:52:c6:4c:05:56:fd:8b:f4:db:
fa:ed:b6:bc:10:d9:48:0a:f9:21:8a:9f:04:36:81:
36:a8:5b:90:74:be:89:ff:5d:e8:20:72:60:c7:5e:
0c:82:b0:f1:a9:a6:bc:d0:c4:8c:62:04:ab:6e:8e:
ec:f9:95:e3:2e:d1:78:9e:9a:6b:75:0e:23:0d:6d:
5f:fc:d8:03:aa:a6:09:3a:df:59:82:83:16:ba:88:
63:36:17:b7:97:28:c6:e8:6e:8c:a3:77:34:f9:32:
b1:28:77:e3:1e:e8:ed:a7:b2:3c:59:d0:68:ee:1e:
e7:5c:8b:07:1b:43:a1:e7:95:df:32:26:a9:b1:e9:
58:b3:9d:88:95:38:3c:1c:ce:75:12:8c:35:0f:e8:
f8:6c:d4:91:ef:2f:64:63:e2:db:fd:cc:f8:46:55:
4a:d0:81:b7:96:17:fb:60:93:93:dc:ad:91:15:b5:
54:b6:ec:6e:54:4c:e1:4e:f9:9d:55:ab:cd:95:cd:
b4:f5:8a:1d:07:cc:03:e3:17:11:63:43:48:99:90:
8f:bc:9c:27:43:7f:09:cc:46:db:da:aa:63:73:54:
7d:bf:29:b6:5b:3b:08:b2:ad:33:ec:bc:52:d1:2e:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:67:A7:8A:ED:62:6A:56:14:97:64:A9:27:17:DC:5A:FA:3B:53:AD
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:04:1c:d5:2f:68:d7:5c:9a:b7:e4:18:bc:91:6a:5d:e8:51:
84:de:32:3c:15:88:6f:72:bc:08:23:8e:89:bf:e2:45:35:67:
bb:61:b2:61:27:f4:48:a5:fc:ca:36:94:b3:9e:a1:4f:f3:b2:
f2:cc:58:d4:c0:9d:f9:65:2d:9c:8d:07:60:ae:b0:33:47:af:
f7:d4:75:8b:da:7f:36:6f:81:0f:62:c6:94:e1:ed:cb:ee:e7:
2c:2c:61:8e:83:5c:26:00:07:a4:33:a8:ed:cc:54:a8:09:56:
f1:f2:34:d8:b7:e3:be:c4:96:49:68:a0:cd:91:66:4f:39:e6:
64:9c:ac:72:d4:81:d7:59:9e:fb:03:3d:8a:66:6d:63:4f:57:
80:ed:fd:70:d7:f8:0b:5d:fe:9e:d9:c6:41:99:f7:28:4b:2d:
e7:a1:3f:a5:5f:4e:d8:fa:ff:b9:b6:d5:01:10:92:5e:59:24:
5c:94:c2:46:c4:8b:37:e7:08:72:39:fc:a8:b0:74:75:af:f5:
ce:12:53:ad:3a:84:48:1e:fb:d5:d4:cf:82:d6:af:a4:86:74:
e3:d0:a8:77:a0:8f:ed:78:0d:31:b4:16:f3:21:ba:2e:c2:7e:
9b:30:7b:a0:d5:04:ec:a9:6b:a1:88:ba:1a:b7:b3:fb:07:3d:
79:c8:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:12 2026 by rpki-client