Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: Y1gmNv8aol8PeaM9LZKTxcgTDExbF8Vy6RkWuXbxTsc=
Subject key identifier: C4:D1:A2:07:95:2D:18:FB:AD:30:C2:1C:08:C7:AE:BA:D7:4C:59:B1
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 019D2960AAEBA62A71744C141FAD33F71DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 086C
Signing time: Thu 26 Mar 2026 09:01:34 +0000
Manifest this update: Thu 26 Mar 2026 09:01:34 +0000
Manifest next update: Fri 27 Mar 2026 09:01:34 +0000
Files and hashes: 1: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: vJelw4cyda3jtl0vfEUNNqVy6pI2ErOEhnwUF8h+4o4=)
2: oog2fr3azEwEvR96dUyVexH-pPI.roa (hash: 5Y/z/o0CKihXpA4MvidWc/Ioyt/faMA9m4DgHjwqJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:aa:eb:a6:2a:71:74:4c:14:1f:ad:33:f7:1d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Mar 26 09:01:34 2026 GMT
Not After : Mar 27 09:01:34 2026 GMT
Subject: CN=c4d1a207952d18fbad30c21c08c7aebad74c59b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:66:1c:a6:1c:f1:d9:2c:da:24:0e:b2:98:
7b:fe:4c:7e:2f:64:a0:cf:13:3b:96:9a:51:4f:bd:
6f:00:c0:25:75:6f:27:86:84:78:cf:11:10:4b:29:
ef:b2:f1:dc:70:8c:c1:2f:d6:3b:58:b4:fb:fb:db:
59:3b:e5:e2:2a:3d:f6:75:92:4d:2f:19:1e:19:14:
df:99:dd:c7:f6:a1:fb:14:4e:cb:eb:ff:77:bf:37:
e3:05:df:75:69:af:7e:a5:5f:9b:c3:d6:69:e2:af:
4f:39:f4:30:91:7b:e0:6a:10:ca:f5:d5:f3:7e:74:
ef:3b:af:d3:59:9d:48:02:90:33:f1:7f:1d:95:af:
07:ea:b3:5b:e2:58:78:4b:08:ed:50:df:0a:17:5a:
54:bb:52:11:5b:de:bd:0e:7a:3a:21:2d:27:38:c1:
e7:6f:fd:85:23:13:65:e9:39:8e:52:09:b2:4a:f0:
71:08:e5:a1:1e:f6:0f:eb:97:db:92:dd:64:7b:4a:
79:ca:09:78:40:24:35:a9:26:cb:d8:2a:31:03:6d:
e9:93:06:4e:5b:2a:cf:71:a5:ff:ef:7f:f6:2e:59:
ac:6d:e2:8c:ae:32:c5:81:fd:42:c1:ef:6e:bc:b5:
c7:14:25:b8:3d:61:25:05:78:75:64:64:d7:3b:5a:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:A2:07:95:2D:18:FB:AD:30:C2:1C:08:C7:AE:BA:D7:4C:59:B1
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:81:9b:37:a2:3e:ae:0e:67:29:3e:18:f3:3e:c0:28:d1:ad:
a2:3c:e0:9c:48:a0:dd:57:cc:37:6b:19:8e:42:61:ce:37:a4:
6b:85:57:1e:92:cb:8a:3a:e8:29:50:d9:6b:20:59:f9:b8:da:
76:3f:9e:ef:0c:f1:36:5e:d6:dd:ac:ba:2a:e3:a4:c6:17:14:
73:ed:e4:e9:1d:5b:24:83:5a:d0:6a:96:8d:b5:57:0e:8f:02:
57:3b:94:42:d9:fe:eb:fc:69:a4:4b:af:1f:39:6a:8a:96:8a:
95:de:3e:32:e3:20:32:3b:bb:3b:31:78:ad:a5:39:21:5e:70:
9a:45:d6:55:f5:44:93:73:c5:77:91:da:47:54:00:33:06:9f:
8d:1f:29:46:d0:24:06:f0:52:82:81:9c:df:50:27:e7:54:8c:
f5:a8:78:d3:d6:f2:50:94:7c:d4:28:4f:d6:c0:8c:a5:cd:e9:
10:03:fa:69:07:eb:5d:d7:05:b2:a5:95:e1:9a:cc:f2:69:9c:
35:fb:f5:49:ca:a3:04:57:fa:a4:df:e8:59:4b:42:ec:ae:af:
88:74:9d:d5:38:01:b8:ef:24:78:45:a1:df:7b:a1:d1:9a:46:
86:f6:cc:8e:aa:94:69:65:10:6b:0e:7b:13:0b:18:38:8f:72:
59:48:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:48 2026 by rpki-client