Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: H51jPwP242Eb1yaQ+gtQb1XSGPsoQZL4shOyjdqpvNA=
Subject key identifier: E8:93:8F:7D:E5:07:D6:5C:C4:F0:DF:0A:93:21:D2:35:04:84:97:79
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019D273AE98A6D9FA9E4BB56D995092EE24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: bTfKZuUhnq8IkBlau5EraAP0ZUHTB8juL7jfVd5jsLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e9:8a:6d:9f:a9:e4:bb:56:d9:95:09:2e:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=e8938f7de507d65cc4f0df0a9321d23504849779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:40:5a:9c:73:46:76:a5:01:e1:20:5d:b7:
61:66:12:f9:9c:1f:70:b4:8a:da:8e:fd:32:8d:23:
d2:cb:e4:2b:d2:ef:c8:e2:3a:86:38:54:ab:39:83:
10:6a:d2:a2:82:0e:0a:ce:7c:61:5a:82:82:9d:35:
e1:70:3e:d6:db:a2:c3:9b:44:54:46:8b:52:e2:a5:
9b:82:2d:20:91:a7:16:1d:5b:02:05:93:0f:45:aa:
7e:bc:28:ca:2d:41:81:2a:f2:30:85:1d:94:f6:07:
70:fb:42:e4:ed:47:ef:4c:d3:6c:46:bc:2c:ee:82:
37:bb:58:56:40:24:74:6f:31:c3:a5:d1:34:c3:fb:
c6:5a:42:bc:71:fe:1a:99:1d:f1:90:99:b3:ae:26:
38:07:1a:f4:9e:e4:a3:34:43:9c:97:89:33:2a:26:
be:be:5e:db:0c:db:d4:bf:35:f4:30:4a:eb:62:0f:
f1:2a:64:20:b0:01:24:37:04:fc:fd:58:3b:8e:77:
fa:1d:b4:53:b2:34:ca:4b:4a:a4:d7:1a:f7:0d:d4:
24:a8:73:8f:7e:11:78:e3:bd:1e:3d:e8:9d:0f:a8:
8e:66:7d:5a:05:12:97:9b:67:ea:63:ca:f3:97:86:
a2:29:72:06:7b:d7:47:e2:50:19:ef:c7:15:b2:db:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:93:8F:7D:E5:07:D6:5C:C4:F0:DF:0A:93:21:D2:35:04:84:97:79
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7f:d6:9a:b3:c3:e0:5b:df:85:b7:85:21:0e:da:35:ec:97:
9b:a4:e9:a2:c1:e0:ee:a3:1d:11:1d:7b:ac:6c:6b:f2:09:16:
48:0a:86:3d:8f:2c:49:49:f7:ab:27:ea:87:b8:f6:70:4d:19:
a5:b8:22:19:f4:f7:a5:71:83:e7:98:5c:23:4e:3b:f8:a1:a1:
bf:5f:6e:b8:fd:5b:1f:46:c1:e7:4b:53:53:6f:18:61:12:89:
97:61:3d:f6:b3:9a:b8:62:36:6f:9d:ea:9f:c3:bb:5d:e0:90:
98:2f:cc:dc:75:48:14:76:1d:06:aa:ee:9a:60:fd:e1:d1:66:
5a:2b:42:e6:b7:39:63:6e:07:4a:65:8f:9f:26:b8:e6:9a:ac:
8e:89:d3:37:27:00:b8:41:bf:8f:01:14:a8:dc:54:68:f1:03:
15:5d:fb:44:8d:22:ea:e1:37:a2:ed:60:56:9f:4c:5f:96:25:
78:f2:86:b2:0d:a0:6d:98:7d:f4:3a:cb:71:18:fa:07:b3:d9:
ae:88:24:8a:cf:c1:0a:dd:f8:32:43:b4:2f:e1:19:12:b6:55:
f8:5d:b6:2e:19:98:6b:e7:83:38:e8:11:0c:01:bf:f8:57:ea:
e1:8c:32:6a:30:7a:ff:d4:04:0b:09:6b:19:32:c3:89:a9:8c:
d0:b9:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:13 2026 by rpki-client