Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: v5vuE5PlUQ3S6c5cB6BiAmScXIDUCLGo87GSryO2Xyc=
Subject key identifier: 1B:B6:A9:6F:99:E8:31:D7:2E:FA:E1:DD:E0:39:CD:9F:CA:72:9E:55
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 019D2703E00F1927A40266D2C9834CE3E4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 1809
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: I3IHAQxug4_1HmrgrU3KXo2mQRg.roa (hash: tVJzGCypdjSGtH0l+tgmxq2DhN32eao9EGkffOxQoKo=)
2: j7onYVKyg1iqOkhgPIlBhO1dKV4.roa (hash: khaXvMQHEBCcdY8/F/quXstwIlSJT3LdiRt0dJ8Ljrw=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: +9ItlWSF+A8mgaB8LarvFvgy3YDT9u2X1zWZIZ99fTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e0:0f:19:27:a4:02:66:d2:c9:83:4c:e3:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=1bb6a96f99e831d72efae1dde039cd9fca729e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:58:43:eb:8c:0b:e1:c2:5e:99:40:89:db:
b4:72:51:f4:30:fd:a1:bb:a9:d7:f7:69:14:7f:3b:
c1:2c:16:59:b6:54:4e:3a:1e:1c:28:89:f5:4c:8d:
02:cf:31:f2:b8:c7:ea:b5:9a:1c:19:6b:41:e3:87:
4f:d2:73:e0:77:3b:f0:70:56:10:9d:ae:10:55:f5:
68:bb:a2:ae:05:d5:9d:a1:67:c8:d4:fb:5b:0e:26:
77:50:24:83:42:41:4d:40:e5:4a:5e:d8:7b:6e:67:
56:8b:65:ee:ef:56:f9:9f:6e:7e:eb:99:7c:2c:f4:
5e:53:52:2b:45:18:39:fb:ef:a0:fc:92:7d:20:a9:
08:be:64:6e:3f:fc:2e:30:52:29:45:82:81:a5:ce:
c5:38:63:01:3e:71:88:80:74:e7:55:9b:ab:36:af:
3e:99:12:69:af:1b:c0:06:29:1b:56:d5:c5:c1:b1:
e1:4d:49:38:d8:86:6e:d2:01:4d:b1:ce:84:5a:e7:
ec:8b:5c:7f:a8:de:84:da:dc:a5:d8:38:5c:33:44:
98:21:e9:58:d5:58:c0:c3:02:66:ae:a5:ab:18:5c:
d1:f9:9a:e2:8d:00:f0:5d:b4:60:c4:05:ea:24:3b:
a9:45:c4:e3:01:6c:8a:0a:0f:60:98:92:52:6c:04:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:A9:6F:99:E8:31:D7:2E:FA:E1:DD:E0:39:CD:9F:CA:72:9E:55
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:64:f6:cf:4d:3e:4f:73:fc:09:7f:f4:bf:6c:84:b1:fd:76:
c7:dc:8c:2b:ff:c8:25:f8:24:5d:2e:af:06:fb:cc:1c:cb:d6:
97:c0:4a:f7:4b:05:ce:02:d9:ea:80:01:c4:3c:f8:8f:22:ff:
a6:e6:21:c2:e0:0b:c9:8d:87:67:6d:f4:6f:8b:5a:a4:4c:49:
50:76:99:5c:57:11:00:7b:b0:83:0d:d8:2b:e7:e1:65:ed:50:
c7:cf:94:59:13:8c:1e:78:46:c6:fa:3a:6e:b3:93:91:5b:91:
ab:0a:bb:bf:43:09:cc:60:39:f5:76:7f:95:7e:1e:10:4f:d4:
e6:b9:d5:68:39:71:d0:df:63:f7:c5:08:2d:48:f3:92:db:4d:
db:1f:cb:66:e8:ef:39:a2:0e:44:52:b9:11:f6:10:44:3f:8f:
a2:8d:87:82:32:b8:ee:87:d3:91:80:f1:0b:10:54:02:8a:b2:
63:6d:65:b4:16:a0:d4:4c:bd:ea:35:19:df:b9:5e:10:26:ad:
73:a6:5e:18:8e:87:66:4f:93:8e:8b:cc:31:7d:d4:61:0c:84:
55:53:fe:03:00:98:a9:02:98:72:17:40:0a:a1:8c:73:bd:d9:
cd:3c:e8:df:d8:ed:95:bb:39:cb:68:16:36:ff:70:51:40:b3:
5a:cf:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:09 2026 by rpki-client