Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.mft
File: w2YArHrQkrL0xxqoGQcEARHGMHU.mft (raw, json)
Hash identifier: tze1j/EQI6u72B20mKbHVopPxik7qp8l3LebP05qlyc=
Subject key identifier: 50:00:0C:B3:09:A4:FA:FF:AD:3D:F9:A3:E7:F3:9C:6B:F3:B2:9A:54
Authority key identifier: C3:66:00:AC:7A:D0:92:B2:F4:C7:1A:A8:19:07:04:01:11:C6:30:75
Certificate issuer: /CN=c36600ac7ad092b2f4c71aa81907040111c63075
Certificate serial: 019D2704651746A4A9DD31651E5DAEB26A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2YArHrQkrL0xxqoGQcEARHGMHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.mft
Manifest number: 66
Signing time: Wed 25 Mar 2026 22:01:32 +0000
Manifest this update: Wed 25 Mar 2026 22:01:32 +0000
Manifest next update: Thu 26 Mar 2026 22:01:32 +0000
Files and hashes: 1: e4tkO_f-8sLW4IOzod1hYlDJWR8.roa (hash: vByudprL6j+tmTk8XzAiLNnsGuB+rpeqOZ6CgLdWdD8=)
2: w2YArHrQkrL0xxqoGQcEARHGMHU.crl (hash: 5W9j2RlbAiS2dD77zTO3RfCXaMFrUyw5eOSqX6WSrdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2YArHrQkrL0xxqoGQcEARHGMHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:65:17:46:a4:a9:dd:31:65:1e:5d:ae:b2:6a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36600ac7ad092b2f4c71aa81907040111c63075
Validity
Not Before: Mar 25 22:01:32 2026 GMT
Not After : Mar 26 22:01:32 2026 GMT
Subject: CN=50000cb309a4faffad3df9a3e7f39c6bf3b29a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:20:db:49:eb:7a:1b:9d:78:a9:5d:3f:4f:
4c:c9:37:13:90:63:87:ad:33:7f:fb:55:7b:05:c5:
41:d4:1e:bf:6f:c6:3c:e5:3e:74:1f:c9:43:ea:ea:
c1:63:3b:70:bd:94:71:81:48:34:fc:87:8f:49:02:
ce:eb:f8:31:54:dd:a3:ce:57:e6:16:8c:3c:ee:93:
80:96:fa:94:0a:31:23:2c:37:68:6a:79:7e:59:1b:
b9:f0:da:5f:94:33:7c:c1:3c:96:f6:f4:71:42:08:
54:79:88:e9:0f:e9:40:a7:92:14:fd:9b:4c:ef:e8:
4c:ee:cc:8c:b5:b3:c1:f3:13:e5:6d:af:d5:b5:18:
9f:94:e9:f3:60:3d:aa:40:32:18:4c:54:5e:a0:3f:
87:96:06:a6:ac:11:0e:a9:18:60:c6:a2:41:9b:2e:
03:0a:e0:73:5b:90:a1:f3:b4:58:c0:a8:6f:8f:7a:
0f:15:c1:19:b7:0d:3a:93:a5:1b:dc:3a:ad:80:9a:
5a:17:af:d5:52:c2:a6:a5:2b:62:1a:7c:e6:01:08:
4f:76:4b:23:f1:26:8c:91:6d:5b:83:3a:f2:4b:76:
9f:01:b9:62:ea:06:41:e5:2f:53:ae:c4:4a:b7:6e:
31:b7:d4:a3:36:33:38:13:73:8c:6f:33:5e:1d:1b:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:0C:B3:09:A4:FA:FF:AD:3D:F9:A3:E7:F3:9C:6B:F3:B2:9A:54
X509v3 Authority Key Identifier:
keyid:C3:66:00:AC:7A:D0:92:B2:F4:C7:1A:A8:19:07:04:01:11:C6:30:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2YArHrQkrL0xxqoGQcEARHGMHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:35:dd:66:c9:f4:ad:eb:f2:9b:a1:16:da:cb:5c:a9:1a:
98:54:58:62:2f:21:0e:60:2f:e0:db:67:a1:69:76:a0:b6:52:
03:b8:cc:46:0d:15:1d:c3:86:3b:c3:60:7d:f3:75:d0:58:fb:
21:70:af:8f:a0:97:15:b8:7e:ee:c5:60:78:88:33:f3:9c:91:
78:5c:49:7f:9f:3e:ee:f0:9d:8c:e0:51:af:ec:5f:fa:06:0c:
59:b0:4b:59:20:7d:4b:7e:f5:35:4a:8f:01:b5:aa:1b:4b:fb:
21:18:48:7c:52:9c:58:08:3e:f6:86:d6:63:3a:2e:9d:9f:f7:
c5:bb:b1:95:50:b3:c9:83:cf:0b:66:f0:ba:6c:38:34:c6:b8:
70:39:b7:af:d2:db:40:4b:f4:72:b2:ea:50:53:06:4e:b2:bb:
13:a4:a9:70:e5:86:db:01:45:38:bb:a7:e0:a6:c7:09:40:37:
f8:a2:77:28:6d:14:02:23:ee:b6:c3:77:c7:33:6d:b8:9a:e6:
c8:b7:33:2c:01:ca:92:70:7a:de:fb:f1:82:7e:46:ec:6e:03:
ac:6c:c2:2c:c4:40:b7:66:42:fe:e4:10:c1:98:e3:55:72:c2:
f5:5a:69:23:b3:3d:e6:d7:42:fc:85:98:2e:f2:a4:36:9c:d4:
a9:b5:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:20 2026 by rpki-client