Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: Ny0L48jVCxojO+zCfandJ0OG4/AJnSQ3Xh5uwbUkkwM=
Subject key identifier: EF:22:E5:C7:E8:E9:BE:31:07:A3:6B:42:AA:B1:A9:01:83:50:88:8D
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 019D26CD52F6F0763FF3443DA843A3A0A717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0CF1
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: fIbVvetmqfwKcVLYYYkLwxA3LT2SbmW2gTMfSggcSwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:52:f6:f0:76:3f:f3:44:3d:a8:43:a3:a0:a7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=ef22e5c7e8e9be3107a36b42aab1a9018350888d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:ef:a7:bc:a5:48:06:38:7d:a1:a6:63:98:
0a:d7:04:f9:6d:10:88:bf:61:01:c5:c2:b4:d8:4c:
3d:d3:ca:56:63:fe:cd:7c:87:f2:0f:ed:2a:40:a7:
42:26:ba:6f:08:50:b8:dd:0d:55:b0:ea:5e:1b:87:
00:d7:aa:2c:b8:63:4e:fd:0b:dc:eb:59:bc:f9:50:
6a:ef:90:b0:3d:e3:90:b3:05:57:04:54:48:6e:e3:
d0:02:66:39:1e:6d:b3:dc:06:a4:c1:35:3e:22:91:
84:7c:36:40:f2:ca:2c:7a:ad:25:9f:b7:01:9c:63:
eb:ec:16:ea:27:f7:86:9d:22:21:a3:fd:94:b6:f0:
de:da:2e:57:16:b8:81:51:a9:01:bd:69:b9:22:c9:
a5:d6:b2:d7:cf:7d:e3:97:42:d6:0c:93:1f:65:ec:
3d:fd:22:46:58:50:8a:db:f3:a2:77:f2:ee:25:78:
93:9c:6a:a7:6e:ce:bd:82:57:a7:87:80:56:d2:ad:
59:3b:b3:1c:44:c2:25:4c:90:b1:3f:85:26:11:c7:
27:99:ae:88:a4:fe:8d:af:d9:f0:f2:67:83:f4:80:
6e:80:13:c0:df:17:e6:85:6d:d1:6c:d3:a2:8d:9c:
1b:69:b7:b5:58:c3:50:ee:f5:2b:1e:73:51:1e:75:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:22:E5:C7:E8:E9:BE:31:07:A3:6B:42:AA:B1:A9:01:83:50:88:8D
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d4:34:16:f4:0d:b6:1f:5a:28:4a:c4:7d:4d:39:6e:e7:ee:
89:a4:e5:ae:cf:57:18:c0:ab:7c:3a:09:af:df:1e:f1:cc:47:
be:03:04:fa:28:32:83:ec:00:ce:40:5c:df:a3:96:8e:ac:1d:
57:be:33:d7:37:f9:61:af:cd:82:69:e2:35:6b:52:c4:ad:9b:
61:f9:4b:4a:ca:98:6c:1e:91:19:c3:a5:ac:13:dc:3a:fd:bd:
75:b1:ae:56:10:9f:dd:8a:7b:e1:77:77:9b:9f:74:11:6f:b2:
59:05:93:f4:1f:87:fa:ea:3f:34:08:c6:e8:f8:d0:5d:84:3b:
80:1e:b6:18:9b:dd:2c:1f:bf:c1:75:b4:10:eb:9d:44:71:cb:
1a:5f:36:82:92:13:e3:2a:16:d0:24:eb:35:0f:e9:4b:b5:a6:
c2:6d:2c:5f:4a:c7:22:62:7d:2d:94:53:cb:33:db:ff:3f:b7:
49:b6:d1:a3:c1:73:85:48:4d:53:0c:aa:89:7f:44:49:22:d4:
36:8e:c0:91:f6:04:a1:d0:5a:b4:c7:f6:7e:a3:ed:b3:53:63:
e8:94:16:f7:c1:8f:be:94:50:c7:c8:27:1c:1b:10:16:b8:a5:
96:d9:d3:7b:e6:de:67:5f:c9:ee:f7:7c:76:35:80:47:ab:4c:
cd:77:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:51 2026 by rpki-client