Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: JiAA3dOfzJMm0iHGw3bhXUCoFieqeVl8X8lV3Fh2Cz8=
Subject key identifier: AC:23:38:D4:6E:1B:2F:1D:6E:3A:94:2C:00:71:E0:CE:02:34:E8:20
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019D26CCC4FD6CD6A4870A56AD9BE4FAAA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 040B
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: OViX2JwHQfhogzqLP0uOT7Ym1i0MWYWNlwLBPcabJuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c4:fd:6c:d6:a4:87:0a:56:ad:9b:e4:fa:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=ac2338d46e1b2f1d6e3a942c0071e0ce0234e820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:f1:cb:dd:a2:fe:b8:e5:02:b9:6c:62:cb:
90:fa:80:a2:ea:ef:fc:a4:76:ca:70:d7:76:64:5d:
45:f3:f4:d0:d2:9c:9d:23:2f:ed:9e:4f:12:cc:91:
12:cc:5a:9a:ec:55:00:d5:7a:4d:7c:d1:87:dd:5e:
74:be:4e:f9:08:35:d1:1f:c1:a1:29:ee:b5:c9:53:
62:db:a1:5d:1e:1e:09:4b:fa:cb:3a:ce:48:5d:8b:
4a:9b:7e:03:ec:75:02:a0:9a:c7:f7:1c:17:ff:5b:
93:d1:b9:21:ec:66:14:c9:5b:a1:b4:37:36:9b:f7:
46:a1:d8:ba:b8:54:86:e1:4e:8d:8e:75:79:1b:42:
51:e9:a3:e3:df:e7:73:d7:3b:80:57:43:02:cd:48:
f9:f3:38:f3:19:01:ac:12:c1:5f:ef:d6:64:54:73:
e3:6a:57:ce:00:f7:01:f7:d3:5d:ca:a6:65:08:e9:
e7:35:c6:2a:93:dd:70:cb:c1:be:c5:49:9e:71:52:
01:07:35:25:37:71:d7:a9:22:64:84:64:58:25:95:
4d:31:25:e7:58:41:11:ee:9e:1e:a2:aa:8b:21:71:
c3:06:d5:4d:19:ec:7b:ab:95:5c:99:f2:95:ec:13:
bb:21:d4:a6:0f:f6:5e:5d:66:cc:ad:6c:6b:09:3a:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:38:D4:6E:1B:2F:1D:6E:3A:94:2C:00:71:E0:CE:02:34:E8:20
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:a4:fa:45:30:b7:8e:26:db:9a:c2:5a:1b:6a:67:ec:1a:
2a:01:c6:99:59:a9:d4:ef:af:dd:ba:0d:6e:f5:51:13:fc:ae:
e9:ed:71:0e:58:aa:d0:49:48:75:a6:20:9a:f4:8d:95:a7:1e:
a9:fb:82:70:6e:5d:af:32:a7:64:95:70:00:31:61:56:20:43:
13:c0:a1:0e:80:03:52:5d:d3:f7:21:3a:d3:be:db:01:b9:f2:
01:81:df:4b:fa:06:86:87:bb:7f:65:0f:1c:ba:1a:1c:46:80:
03:20:d1:a7:5a:d8:62:0c:71:95:bd:d2:79:ab:6a:fa:e7:27:
44:c8:25:86:b0:41:ed:7d:e9:66:45:d5:91:8f:1b:36:60:d1:
07:63:f2:26:20:e6:5e:09:68:81:ed:23:5f:9b:40:47:a1:43:
da:df:12:56:83:cd:52:82:c3:99:a6:8f:52:4c:9b:e7:fb:38:
98:f7:0a:0d:06:f5:18:d0:a9:22:2b:7b:a7:8e:20:b5:cf:18:
56:ee:fa:3d:e9:1c:af:33:42:6d:8a:a6:1a:68:1e:35:d8:a7:
4c:f7:ad:ed:0b:df:c2:af:10:40:07:de:3e:94:22:3b:59:35:
a8:9f:dd:07:81:99:cc:97:69:8d:20:12:49:1b:aa:2f:ef:ff:
c7:26:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:09 2026 by rpki-client