Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier: dmehQSE3RkIGoUPNxoAGRlWVUzFhg98UNcyhiu+8w3Y=
Subject key identifier: 78:31:F7:7F:09:5D:88:0E:E8:A1:01:3B:2B:6E:A2:3A:08:64:5E:06
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 019D25831B1E80C73546A8FA109B90FBD1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number: 05F1
Signing time: Wed 25 Mar 2026 15:00:42 +0000
Manifest this update: Wed 25 Mar 2026 15:00:42 +0000
Manifest next update: Thu 26 Mar 2026 15:00:42 +0000
Files and hashes: 1: TVDGXyDJKjGf9M2l61hPydz0GW8.roa (hash: GPBRCtJGeJYsInHOu3V8vVubHvszvLhmWvGPlsGdKsk=)
2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: DJyp5Fx5qm30UVrVDS2SHThL1Tr6Oc423/TmmGwgH3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1b:1e:80:c7:35:46:a8:fa:10:9b:90:fb:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: Mar 25 15:00:42 2026 GMT
Not After : Mar 26 15:00:42 2026 GMT
Subject: CN=7831f77f095d880ee8a1013b2b6ea23a08645e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:45:2a:16:ba:bd:53:da:4a:0a:63:25:a6:
23:7a:05:70:fe:d4:b0:ca:85:13:e2:36:82:08:72:
d3:2b:c2:a2:f3:d7:30:08:15:74:ca:d3:c0:b1:09:
c2:e6:44:3f:01:5e:ae:b8:87:ba:01:f2:a3:23:18:
aa:a3:37:e3:2e:a4:73:ce:83:5f:36:c7:bf:0e:54:
27:3c:68:78:ab:12:e9:25:00:15:33:f8:a5:df:9f:
ce:e1:f0:e4:8c:bd:5d:fd:a9:61:e9:86:ab:0f:1a:
a6:56:4f:c0:84:16:59:99:be:67:19:10:6d:c8:79:
48:56:01:b3:29:49:6a:82:6b:3f:d8:cf:9d:22:5c:
7e:48:36:9c:a1:d1:b1:e5:32:5a:40:67:be:2f:96:
14:4d:8f:8b:77:66:64:5d:77:5f:86:36:b7:14:05:
b1:71:6a:26:0b:0c:fb:68:3b:f7:be:be:1d:47:4e:
d2:19:e2:97:cf:b2:bb:43:a9:fa:a8:56:ca:cd:02:
a3:53:65:19:cd:c8:bc:83:e4:8e:10:61:a9:1c:89:
f0:a9:fe:90:91:81:99:3b:45:d8:31:c1:4c:e0:9b:
4b:50:6d:fd:75:3b:2e:ff:ae:f2:b4:a1:ec:38:43:
d3:15:49:db:8d:29:bf:29:0c:0f:a2:a4:a5:96:c5:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:F7:7F:09:5D:88:0E:E8:A1:01:3B:2B:6E:A2:3A:08:64:5E:06
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:73:32:49:f6:65:c9:c0:18:5a:dc:f8:f6:11:39:c3:f8:cf:
eb:57:a2:dd:4b:2f:b7:89:d6:5d:a8:a3:75:17:8f:43:40:64:
ad:52:80:a8:80:db:f8:78:b5:51:09:e4:db:e0:b8:a2:53:ad:
10:c3:2f:2b:9a:be:d0:f5:c2:b5:ec:14:ba:05:9c:a6:45:e0:
3d:1d:be:d3:74:25:5f:8d:4d:40:86:98:2b:1a:e7:68:1d:ec:
fd:58:99:41:a7:68:5d:49:f8:cc:74:62:1d:d4:68:90:ce:83:
38:e3:79:68:d6:8b:c4:5c:1e:a7:08:d9:6a:64:f2:a0:c2:ac:
ba:06:f7:11:2f:96:85:02:7e:0d:53:2f:39:e0:25:27:ef:9a:
6e:d9:16:fb:67:6d:4d:17:8e:b9:7b:ef:38:d0:6e:f8:4e:41:
95:04:aa:ba:c1:9b:15:84:5a:28:8f:ef:80:79:85:86:7f:2d:
cf:c7:59:a7:be:b3:5f:24:a8:ee:f4:88:f9:a4:75:c3:1a:8f:
c4:2b:8d:4a:32:a4:d2:d2:9f:1e:ae:99:41:3d:a8:67:da:45:
ee:1d:03:c9:91:de:c2:57:29:15:eb:df:61:22:f1:fe:fc:9c:
8b:d1:ed:0d:11:85:a8:54:56:f3:b3:34:7d:3d:69:78:72:5f:
fe:be:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:07 2026 by rpki-client