Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: Lca08UOO5bzewMqvvRoaK+tzm6r0kcOk5PBjRDI7Edc=
Subject key identifier: A4:E0:60:35:34:C1:7A:A0:ED:0B:30:1A:F3:F0:45:88:C1:EE:96:58
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 019D26CCCB823A9E664CC77E11B92C287C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0F67
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (hash: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: cVcZkfg3TbpEiL8e56Ct8g2ayjPb7oEenYKqjl5otOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cb:82:3a:9e:66:4c:c7:7e:11:b9:2c:28:7c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=a4e0603534c17aa0ed0b301af3f04588c1ee9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:2e:93:51:ab:6d:c5:79:9f:69:14:8e:bf:
af:a0:62:29:1b:36:b0:2f:ac:d6:56:71:92:39:a3:
85:dc:d3:d6:f8:72:99:16:b7:5e:d5:0d:73:18:39:
6d:e2:2e:43:34:ab:72:49:cb:a8:7d:36:d7:b0:4d:
85:e2:89:85:27:e1:10:d5:fe:1d:9e:bb:a8:14:03:
41:d8:06:35:2e:b6:38:05:42:1b:00:fd:81:4c:8b:
86:5e:80:bc:7a:34:60:1a:d4:89:ef:31:6a:3f:cd:
aa:4a:d8:5b:f7:1a:ab:a3:a2:0e:6d:7b:a5:7b:84:
b4:9c:e7:47:93:03:f3:b1:e4:4f:b1:28:2d:41:4f:
f5:7d:6c:70:68:b8:e3:b7:61:10:8e:6c:a3:3c:55:
84:86:2f:0a:e0:45:5c:a8:f1:31:f6:4f:64:6b:ce:
7f:dc:b1:10:75:66:2e:6d:7d:9a:89:a9:3c:f2:77:
a7:e8:ff:84:84:f8:94:70:0f:33:71:e0:3a:8f:cc:
f6:b6:ff:04:05:b5:63:dd:14:bb:47:c5:65:78:79:
60:fe:a0:b0:06:b0:a8:7a:65:9f:9b:ea:88:42:7c:
60:cc:7d:be:51:d7:82:7d:f4:c2:e9:e4:49:a7:75:
b8:45:89:1c:1c:e1:55:06:4c:12:29:fd:05:75:12:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:60:35:34:C1:7A:A0:ED:0B:30:1A:F3:F0:45:88:C1:EE:96:58
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a1:ce:23:a5:d4:ed:4b:5a:2e:6e:be:68:12:a0:c3:95:22:
e7:f6:b6:b6:03:88:08:53:4c:b0:c2:51:eb:16:07:b4:7e:34:
b7:6b:df:0c:47:b6:fb:73:a1:6a:1a:c7:99:25:c3:6e:e6:1e:
df:f8:ab:a9:96:a9:4a:d2:3c:36:01:f5:4c:85:2d:b5:80:28:
ca:3b:68:c6:9f:cf:ad:f5:a3:cf:1a:ae:6b:56:17:58:0f:d5:
f3:0d:c3:6d:d6:d9:4d:fd:07:6d:c3:fd:64:54:46:83:66:28:
98:5f:91:32:9d:1e:89:7c:79:6e:9d:98:d0:68:8a:cd:93:16:
4e:72:0e:da:df:88:d2:bb:e6:2e:c4:e3:94:08:f2:ae:c1:b8:
d0:39:a2:ef:ae:10:a7:e7:4e:c4:ea:72:ce:0b:8b:10:c3:bf:
a4:15:3a:60:e4:e1:89:c6:5f:ad:11:65:4a:99:8f:38:03:7c:
56:ed:03:86:d8:ae:6b:0b:26:16:46:07:46:a9:ce:a5:29:5a:
5c:d4:b6:fe:74:7a:49:2f:36:94:0e:59:95:b8:c4:09:f2:72:
16:51:cc:ff:92:f0:3b:9a:13:ea:d0:0d:f7:1b:98:e9:31:30:
c0:35:9e:5b:63:4d:be:08:62:71:ee:28:f0:4d:4b:b7:6e:27:
0d:27:e8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client