Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: 9r/aaalP0Thmry8IF7iZfw1IcXF5Q9qNjGUy1n15yhE=
Subject key identifier: 38:11:2D:A4:D9:FE:6C:4C:A7:90:72:25:E7:B7:10:FF:BC:36:01:A7
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019D284DD915CA9C3F5682DE1E1BB97E5E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 04D8
Signing time: Thu 26 Mar 2026 04:01:23 +0000
Manifest this update: Thu 26 Mar 2026 04:01:23 +0000
Manifest next update: Fri 27 Mar 2026 04:01:23 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: uBpxh8pVqqhJ9ItFICiSWQf/GVEXqmHfRjovyqpwE28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d9:15:ca:9c:3f:56:82:de:1e:1b:b9:7e:5e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Mar 26 04:01:23 2026 GMT
Not After : Mar 27 04:01:23 2026 GMT
Subject: CN=38112da4d9fe6c4ca7907225e7b710ffbc3601a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:fd:21:e6:38:13:1d:ad:bc:09:51:a8:6a:
42:1d:7d:cd:b9:de:d4:89:09:de:3a:2e:e5:79:42:
22:0c:26:93:19:7b:85:56:1c:56:f5:af:5b:36:66:
cf:1d:00:7b:a6:e9:5a:cd:ce:11:5a:d9:25:3f:87:
24:3b:28:1f:87:1f:11:b3:6b:4f:e5:5d:51:16:b4:
49:a5:c2:e0:5a:e9:b7:56:15:0d:bc:f2:d4:07:8a:
cd:45:ad:69:53:15:25:dd:ad:f3:2f:dc:72:99:2a:
cc:61:67:f6:69:1f:a7:6a:87:89:f6:88:64:6c:44:
61:f5:af:af:c2:a5:b4:5d:14:c5:70:dc:06:cb:6f:
13:df:72:5e:04:e7:bd:a6:ab:de:7b:0b:f6:f0:97:
16:1e:10:30:c3:38:ba:34:56:7c:79:e2:aa:26:36:
8d:b5:08:4a:f9:1c:3a:0f:17:46:b8:06:58:22:22:
4f:7b:5c:67:3b:4f:bb:fd:58:3c:fc:80:52:9f:bb:
98:c7:9b:f1:df:31:d2:6b:c3:29:9b:ec:3a:3b:dc:
0e:c1:f4:5a:c1:ed:09:e8:06:66:00:c8:10:ef:87:
d0:f0:03:bd:c0:3d:30:2c:c1:f4:51:e7:22:1e:94:
bc:2a:41:45:4a:6a:c1:d1:09:98:aa:f2:28:3a:53:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:11:2D:A4:D9:FE:6C:4C:A7:90:72:25:E7:B7:10:FF:BC:36:01:A7
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:64:33:f2:ad:c6:d4:02:50:6e:3c:bc:40:dc:68:dc:c3:f7:
31:58:95:4f:cf:d3:28:28:97:b3:cc:28:44:33:69:ef:6f:c9:
53:39:2f:47:14:a3:c3:2f:89:a5:92:d1:b2:66:04:ab:72:36:
e3:0b:e7:cd:7e:cf:cb:e6:16:36:3e:81:59:9a:ab:8b:0e:dd:
f8:6f:7e:a9:d6:cc:cb:39:12:55:b6:10:17:4c:68:93:7f:5c:
98:da:60:b7:6e:2d:6e:58:cc:92:3d:29:13:9a:d9:ab:93:3c:
86:85:e5:79:a2:55:be:76:65:dc:2a:8c:c9:f7:c2:ae:6c:bd:
55:6a:25:22:99:d6:4e:44:10:8e:4f:0a:98:fd:ad:5a:10:62:
ab:19:d9:b1:df:c2:73:54:2f:20:c8:ec:39:e1:f4:99:69:e0:
72:14:fc:f5:f2:90:25:f4:b4:fd:d0:a5:8e:1a:f2:e1:5d:79:
44:60:5f:7a:e0:84:ee:7a:fb:9d:c6:ee:7f:0b:80:d1:a3:2b:
4f:10:55:e1:92:b1:c6:6c:63:c4:f7:1b:16:3d:70:e7:d1:e4:
cf:d0:27:2b:6f:e3:2d:1c:d3:06:d9:ce:e1:5f:b1:1d:ac:d1:
bf:aa:ca:f9:cf:5a:07:82:18:65:91:1c:9a:c5:f4:58:b6:2a:
6b:ba:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:01 2026 by rpki-client