Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: 6wDWmGpYXkns6Ogc5HUmkplKX8B7s86j+tGz5ZMxNPo=
Subject key identifier: 83:6F:42:A3:89:4A:A8:4B:E6:FB:B8:BD:6A:1F:DE:ED:07:0C:26:43
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 019D29CEB0F1F5CF96DC80343AE59C91E053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0C47
Signing time: Thu 26 Mar 2026 11:01:44 +0000
Manifest this update: Thu 26 Mar 2026 11:01:44 +0000
Manifest next update: Fri 27 Mar 2026 11:01:44 +0000
Files and hashes: 1: VQhXdpnb-jTQY6PqAAihZNZwDw4.roa (hash: Q2jemjgfE2gR0vDgu/bUC/EL1Il/dNd22FjPO0/dvVY=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: gO4flgCoDRkRRPpGHZYTP0xldCcgYWssSAepgrNmVPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:b0:f1:f5:cf:96:dc:80:34:3a:e5:9c:91:e0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Mar 26 11:01:44 2026 GMT
Not After : Mar 27 11:01:44 2026 GMT
Subject: CN=836f42a3894aa84be6fbb8bd6a1fdeed070c2643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:1b:0f:0c:97:c0:36:7e:f3:c3:13:20:48:
ea:2c:4f:5b:8a:04:e4:a8:6d:5a:0b:1e:06:dd:19:
0c:f7:a1:1a:5e:b9:af:29:85:68:b9:27:5d:e4:92:
bd:64:63:62:e9:33:7d:8b:3d:a2:16:98:f1:9c:12:
92:f5:90:38:6d:d5:fa:e7:11:ac:c1:ce:10:b4:c0:
27:8e:24:bd:a0:d9:b7:d0:57:cd:b8:07:51:fa:b4:
1a:e2:ed:a6:ac:c8:d1:98:17:5b:bc:50:b2:72:78:
9b:95:0e:5f:bf:a7:55:57:3f:8b:8d:87:32:73:52:
2c:6b:af:c1:87:e0:2e:84:ed:80:00:20:e8:a3:bc:
82:f6:72:2c:79:df:cd:bc:d4:37:c0:0c:49:0d:c5:
d1:f8:f9:7a:2b:e4:7c:c5:e5:9f:ae:a5:15:f2:da:
95:98:44:a9:a1:e0:84:2b:05:01:15:fc:59:35:41:
26:58:32:76:43:5c:a5:cb:14:45:db:65:1a:a1:80:
4b:ef:23:dd:b1:58:bc:d7:28:68:26:0f:08:9b:9a:
b4:dd:0e:82:a3:ca:5f:95:3f:82:02:ae:3e:60:84:
9e:04:28:8e:ac:a4:0a:6c:bb:75:a2:b8:28:8a:77:
c7:67:12:68:c5:f5:8c:f4:3b:66:0c:90:ca:e3:a8:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6F:42:A3:89:4A:A8:4B:E6:FB:B8:BD:6A:1F:DE:ED:07:0C:26:43
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:01:be:aa:16:f3:aa:ae:1f:1b:57:1f:2a:0f:ed:c6:44:
52:ed:39:90:70:5e:40:fc:3d:27:5f:d4:f5:60:90:40:ad:cf:
44:9a:b4:a8:94:c6:95:ce:e2:16:c5:2c:58:d7:4a:38:d3:d4:
ce:8a:d3:76:0c:23:09:d2:5d:62:17:80:51:c1:88:b0:e7:ef:
48:e0:23:29:d9:c1:d7:02:0c:35:fd:5e:2e:37:19:8b:db:c3:
8b:b1:f4:16:a8:50:05:fa:09:4b:a2:64:db:4b:e4:28:9d:86:
62:7e:0d:2e:53:18:5a:27:d5:67:30:43:3b:c7:91:17:57:3e:
80:0c:28:2b:9e:4e:12:42:29:7c:dc:e3:c2:9c:e5:25:74:76:
81:af:03:1e:06:fb:38:3c:f7:ab:4a:bf:74:32:24:80:ce:56:
37:16:10:76:a2:04:d9:3e:5e:35:6a:e9:73:cb:cf:bf:7f:62:
d8:d1:aa:35:c9:55:6b:88:26:32:15:71:5c:93:7b:06:18:1a:
fb:e7:a3:95:ab:e6:2d:23:5e:6f:a8:47:97:15:b4:5b:5a:ab:
06:11:ef:a5:1c:d8:4f:61:22:d4:77:00:e6:4a:ce:11:41:32:
71:c8:fc:59:65:50:0b:cc:aa:05:ae:23:4b:ca:11:dc:47:5e:
cd:ac:00:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:13 2026 by rpki-client