Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: iyT/z1TMhZdGFykkPJqjUSpXv63bMddPbzPbV+QAIXI=
Subject key identifier: E8:92:12:DF:15:12:AD:98:F2:20:AD:7C:62:E1:9D:B1:55:C2:90:14
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019D2704D127F18915352B87D9FA6677DCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 0762
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: fC8M6p2X4hE5w4nCF5DocOt6Ly2X5qyAw+/faIRoqzI=)
2: vlUmsnf6hFJJ_ExSqkIBAJq54y0.roa (hash: Lg+/aX3TWQ0Z5VlbPaXH4EbEoo4bdOS3f3c2Bb0++BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d1:27:f1:89:15:35:2b:87:d9:fa:66:77:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=e89212df1512ad98f220ad7c62e19db155c29014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:5a:b3:bc:43:dc:0a:fa:3f:dc:e2:95:e9:
71:f9:1a:92:fe:41:dc:04:c0:69:36:bb:b4:63:d4:
56:29:af:a8:26:92:36:ce:e0:fa:38:2c:bb:d6:53:
59:d1:b2:1c:c2:60:50:da:3c:f8:a6:48:cc:20:72:
ba:52:d6:9a:1c:f2:32:97:82:55:ab:f0:66:00:0f:
8e:07:32:10:79:e8:2f:17:96:12:34:e6:41:c7:99:
e2:c8:4c:53:73:77:57:2d:3a:9a:7f:46:fc:f0:7f:
91:de:a8:2c:e4:27:d9:d4:71:aa:4e:93:e4:51:59:
d2:0c:1c:8e:f9:4a:df:55:1c:97:0c:3d:64:50:88:
62:45:bf:bf:f6:fa:00:05:2e:11:86:60:bc:8a:2e:
93:2d:52:64:2b:ef:34:e0:ef:92:13:62:c3:74:d5:
1d:22:02:43:33:17:83:51:9d:01:d4:f8:16:8c:9d:
84:cd:fc:c3:86:1c:58:37:67:eb:f1:d0:c8:1b:22:
55:d2:37:31:38:b5:8b:49:51:5c:65:6e:cb:01:fe:
8e:4f:34:4f:fa:ed:55:7a:a6:1c:8f:e5:66:77:03:
ed:a0:0d:4d:90:b0:ec:a0:0d:e7:62:4a:92:40:00:
63:85:b6:36:06:5e:ff:53:64:b0:12:5f:3c:7e:df:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:12:DF:15:12:AD:98:F2:20:AD:7C:62:E1:9D:B1:55:C2:90:14
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:26:fc:67:57:68:9e:16:1f:ee:87:70:b2:46:b3:22:5a:40:
48:2e:f8:e0:90:7b:c2:f9:c2:ff:a4:08:f5:e2:86:c1:bd:11:
4e:00:3c:6f:e4:71:d4:17:93:7b:49:2f:cc:e4:9f:e3:9b:8f:
27:f0:11:55:4f:d9:66:ff:45:23:87:36:f9:d3:ac:6c:bf:c6:
08:67:89:00:4a:88:37:9b:4b:23:55:91:97:ca:c5:37:4c:ed:
ac:50:7f:58:f9:6c:0b:2c:5b:f3:86:aa:c4:f9:38:93:c7:1b:
fe:e0:1d:59:3d:fd:7f:f0:9e:97:be:88:7b:b7:52:d5:24:2e:
33:82:e8:a5:ed:9b:d8:a7:58:78:78:ec:b5:a8:cb:e6:7b:92:
6d:5e:1e:39:06:f9:a0:28:12:f3:f4:11:93:2e:fd:1e:2d:8c:
85:fc:89:ce:3d:13:25:3c:f0:0b:50:ee:8a:d3:d2:e6:82:ec:
62:b7:34:cc:20:52:58:e8:9d:df:d5:f0:54:75:34:3e:37:7a:
98:ff:2b:bd:f0:29:95:d4:a9:e9:c3:c0:e0:4f:ce:c1:f4:6c:
99:ba:27:2e:59:c9:3e:73:45:7e:d9:00:9a:a3:51:5a:95:cb:
54:3e:b3:9c:4f:eb:d1:96:60:f7:26:ea:22:b2:e5:10:68:49:
14:ac:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:46 2026 by rpki-client