Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
File: dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json)
Hash identifier: c+xuD6lRkjK5+N68VSk16kDrOP3CvlzekrKeSsLyAjs=
Subject key identifier: F9:FD:0F:64:95:B9:07:25:69:A1:7B:D6:CF:C8:77:9A:B5:68:24:0B
Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
Certificate issuer: /CN=770aed77999de7d67e9df33f55591dedeeb626a5
Certificate serial: 019D25BA044A847C7B49F3B9AB65BDA471B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
Manifest number: 0A88
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: Y8jEunuQdY8N-Q_wPNBi6EQ1so8.roa (hash: sxWYB45GJ6xUZu2JriMAd6bAc5EngOZoRfXuPOeM0mc=)
2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: 1Gv7Z3I6HSOg7KGG+vvLZLXQzai+XTSLtG24+jbx5x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:04:4a:84:7c:7b:49:f3:b9:ab:65:bd:a4:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=f9fd0f6495b9072569a17bd6cfc8779ab568240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:bd:df:6f:cf:7a:75:d9:3e:1a:e6:49:92:
21:bf:78:6a:42:3b:6a:c1:ba:3b:73:65:66:b8:b2:
5c:6c:6c:95:e3:9f:42:66:58:ed:0f:4c:9c:46:1a:
14:d8:5f:06:a7:c8:5d:d6:66:e7:ad:c8:f8:a0:6f:
43:aa:ea:5a:7d:c3:4e:2d:f6:de:74:c6:e0:da:c0:
a4:11:e5:08:ac:da:4b:5a:64:72:ee:d2:46:eb:a8:
df:81:51:44:5b:06:e7:1a:e7:d2:54:cc:38:c6:91:
b1:ad:3c:17:58:32:35:58:de:e3:4d:4b:5d:b7:22:
52:dc:8e:d4:8c:7f:84:ad:f7:05:13:59:ce:65:2d:
90:db:dc:7f:29:3b:fb:3a:43:ba:d7:68:8d:65:c6:
de:81:78:0d:d5:8d:2e:af:60:4a:46:fa:30:ae:ae:
1a:e8:9d:b5:19:9f:2f:d9:55:78:cb:18:37:ac:7a:
4a:2f:15:06:ff:80:f7:dd:75:01:0e:4d:d3:ef:88:
06:aa:d6:ed:72:eb:c4:86:59:06:a4:6e:20:03:e2:
e2:d3:45:23:1b:a2:b9:e7:42:ef:52:08:d2:fa:24:
09:67:af:0d:76:a3:a5:cd:c3:d1:68:d5:39:dc:0b:
8e:e9:59:e4:67:f1:ce:19:8c:b1:61:08:4d:77:b8:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:0F:64:95:B9:07:25:69:A1:7B:D6:CF:C8:77:9A:B5:68:24:0B
X509v3 Authority Key Identifier:
keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:d8:eb:fa:57:e0:70:93:a9:6d:27:a1:3c:39:a5:a2:14:
f9:0b:2a:2b:de:83:b2:1b:07:d1:3a:03:b1:36:27:62:89:70:
53:e5:41:58:4f:b4:fb:b2:90:dc:1b:ee:e3:8f:39:c5:38:55:
88:e1:28:09:30:c9:c6:a5:cc:07:f9:2d:14:1c:a1:81:f1:e5:
da:ea:51:22:32:bb:da:23:74:89:56:d0:58:ea:47:7e:63:af:
e5:45:80:56:57:ce:5a:10:53:73:64:1e:4e:8c:cf:59:c3:ab:
5f:be:7a:76:e1:e1:5a:be:b8:36:9f:21:54:84:47:c8:56:e8:
c3:4e:47:24:a0:d9:2e:2c:d3:40:b7:bd:4b:85:3d:eb:5b:c6:
05:23:31:47:09:89:b7:af:2a:7a:4e:75:1a:19:36:c6:93:1e:
89:71:e9:4c:32:b3:25:66:d1:a8:83:5a:af:66:da:b1:c4:c1:
f1:5b:cb:11:99:24:9e:80:6f:fa:28:a4:6b:5f:0a:bc:12:e3:
0f:53:a1:69:fc:20:98:ca:67:2d:45:af:3f:cc:2b:b6:10:ff:
f1:f5:68:a2:fa:f5:d2:e6:fc:cd:ea:03:fa:af:27:db:cc:56:
83:41:73:4a:c5:49:d0:d0:2d:1a:ce:47:d9:03:04:72:7a:3f:
c0:91:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:38 2026 by rpki-client