Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier: GGoIvC78m6+nCzSH01cu44862m8q7shb5VvvsXfonM4=
Subject key identifier: 87:02:21:2F:7A:98:7D:3E:F7:10:DA:66:41:C9:F9:C6:83:FF:B4:35
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 019D25F16D98B0237CA69E146D0EC70C41C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number: 0E70
Signing time: Wed 25 Mar 2026 17:01:12 +0000
Manifest this update: Wed 25 Mar 2026 17:01:12 +0000
Manifest next update: Thu 26 Mar 2026 17:01:12 +0000
Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: j3Ib7MxSLwJqvpSvZ1Pc7dyDFiY8lIOlE0HAfIrswWg=)
2: nileVr-DQfSJAZFmbcbQEtK8Yk0.roa (hash: 9mZq8h73P9FU0Z0VCgdb2KmGquLGZE66QT5Z6ZqwuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:6d:98:b0:23:7c:a6:9e:14:6d:0e:c7:0c:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Mar 25 17:01:12 2026 GMT
Not After : Mar 26 17:01:12 2026 GMT
Subject: CN=8702212f7a987d3ef710da6641c9f9c683ffb435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:c3:52:b6:6c:6f:2f:d9:ef:b8:16:ca:01:
0c:a9:5b:c0:8a:ac:e7:1a:b6:3e:61:d0:4d:e7:c9:
f9:95:92:d7:e0:af:71:4d:3d:38:d1:8d:68:6d:e4:
2f:d6:8e:a2:cd:fb:82:45:06:6e:af:10:b3:bd:19:
49:d5:65:be:42:c3:93:a2:27:6d:8a:5a:65:78:d7:
ad:eb:3e:ec:88:2e:ea:7f:45:af:13:9e:a6:ab:11:
6e:11:c4:c9:77:ed:ff:5c:1f:b9:9f:6f:5a:68:4a:
01:e7:35:b9:17:9f:c8:aa:4c:df:2a:f7:9a:c7:dd:
0a:1c:68:f5:64:fe:24:af:a8:ca:cd:45:7e:a8:29:
75:09:c7:0a:03:ee:60:af:7d:ef:95:94:a6:33:ec:
2d:23:ea:89:8a:94:aa:51:bb:d4:a1:60:f0:71:29:
d5:bd:09:7b:98:2d:2f:32:d3:af:03:00:cf:87:74:
56:aa:19:35:3c:cf:d6:8c:01:ee:f6:dc:c5:66:7d:
79:35:8e:79:8e:5b:85:b7:5f:ac:85:a0:43:df:98:
4c:79:27:dc:62:86:86:35:c1:6b:3a:7e:f9:f1:13:
45:bb:ce:8a:3b:b4:07:81:a7:7a:41:9d:17:74:ce:
9c:23:8b:24:8d:fd:72:00:30:da:27:48:f3:85:17:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:21:2F:7A:98:7D:3E:F7:10:DA:66:41:C9:F9:C6:83:FF:B4:35
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:55:26:2d:35:94:e5:0c:89:23:31:7c:bb:48:7f:5f:11:
62:b1:a3:d1:28:ca:b5:6a:f6:ad:fd:2f:ba:76:c7:87:61:ae:
97:1d:f6:60:d5:24:d6:0e:48:26:26:f1:8f:c8:09:44:76:78:
01:c5:e7:bd:24:08:e4:a0:b1:42:bf:0f:2b:94:d6:58:33:2a:
b2:0c:06:fa:5a:f6:b9:c7:2d:30:0e:06:99:e2:f6:95:d0:77:
1c:99:0c:39:89:4d:db:94:c4:ee:dc:c8:38:78:99:ee:71:21:
a3:aa:02:b8:bc:7b:7c:36:c3:75:04:4f:80:7b:9e:f2:35:c2:
8c:ca:f3:0a:87:bb:95:b4:5c:22:7d:ff:b7:17:d6:00:0f:4f:
c8:6a:4e:22:19:a4:9f:c7:57:3d:44:18:21:05:af:1c:cb:da:
fd:59:41:1c:87:76:0c:c7:da:6a:e5:59:a6:9f:bc:e3:d4:cb:
78:95:3c:60:6b:7e:8d:87:9f:84:44:74:6b:ef:33:40:0b:ff:
e8:7a:6a:71:9f:aa:27:33:b0:8c:d5:8a:d9:66:44:74:56:7c:
26:25:64:35:57:c9:f2:2b:ec:e5:67:c4:dc:bd:c6:d7:a2:aa:
0a:c0:11:65:9b:ad:c7:1c:fb:5c:64:bf:3e:81:9b:b2:c1:dc:
06:87:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:15 2026 by rpki-client