Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: KX2LCD3o2ISxIyeWcywHmIG7iCnDlHx0hlS2ZPz7l7s=
Subject key identifier: D3:55:72:52:65:2D:12:76:47:AC:A7:61:FC:FB:C9:73:9C:8F:E4:44
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 019D33082C36632CDEA60D8726BB11536AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 17E3
Signing time: Sat 28 Mar 2026 06:01:06 +0000
Manifest this update: Sat 28 Mar 2026 06:01:06 +0000
Manifest next update: Sun 29 Mar 2026 06:01:06 +0000
Files and hashes: 1: 8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa (hash: t4kbmcJ+5L6lxyTeqkC36Es5ovqBT600hloF270F10g=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: oZDKGRvlGL3ctpOEIpfl1szWbY2QGeHtogTCe/SHuTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:2c:36:63:2c:de:a6:0d:87:26:bb:11:53:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Mar 28 06:01:06 2026 GMT
Not After : Mar 29 06:01:06 2026 GMT
Subject: CN=d3557252652d127647aca761fcfbc9739c8fe444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:a9:d4:8d:f4:70:56:53:76:d4:72:cf:42:
ca:44:b3:67:46:0c:3c:54:77:98:2b:2d:4b:ae:bc:
54:a0:37:70:b1:78:3a:22:75:ed:51:b2:9f:24:55:
ee:e3:8b:0c:ff:5a:1a:fb:b2:94:aa:91:89:fb:fd:
bb:8e:69:12:21:a0:d1:d1:81:56:14:20:66:17:33:
bb:43:29:25:ab:75:49:83:bc:dc:05:44:8c:86:b7:
af:a9:5f:b2:94:a4:f8:b7:82:38:f6:3d:3a:8f:be:
81:d9:f5:3d:3e:e3:a4:80:1a:d8:7f:58:d8:06:08:
05:2d:e2:d0:17:89:96:3e:f4:b2:ae:ab:9f:81:46:
a8:5a:5a:e6:42:ce:91:44:72:e1:8d:a1:75:e1:7b:
87:e2:f9:bf:75:df:49:b6:aa:bc:13:40:dd:08:65:
ba:8a:4a:1e:77:25:d2:70:65:a8:60:0b:94:ab:5f:
83:76:e9:6d:53:76:a5:7a:74:1b:83:67:86:27:2d:
de:e0:25:d4:5d:80:a3:5f:11:5b:cf:05:e6:94:6f:
ea:ff:5b:c6:46:8d:1d:00:c5:01:d1:47:72:8b:c3:
d8:d1:53:5f:c0:48:b7:38:52:cf:6a:5d:38:61:52:
f3:3c:2a:fa:de:61:44:7d:66:7e:e0:67:84:97:9d:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:72:52:65:2D:12:76:47:AC:A7:61:FC:FB:C9:73:9C:8F:E4:44
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:1d:9b:0d:11:25:03:ac:4f:b2:85:72:12:42:29:d4:6a:
70:97:7d:2c:ca:97:ec:4e:78:ea:ab:3f:76:5e:3c:fa:3c:ce:
99:0f:51:56:2c:23:1d:bf:e6:23:f8:dd:46:99:49:81:e4:37:
65:2a:44:46:49:be:b4:f1:c5:2a:9e:a5:bf:93:35:ea:29:2f:
20:c4:b4:43:b1:7f:bf:fc:fd:e8:32:ba:5c:1e:3f:f9:39:35:
26:e4:c3:e0:61:20:ff:b9:8a:c9:f6:5f:6e:8b:2f:a9:ce:7c:
32:ba:de:91:52:b8:d1:24:57:e7:05:45:ad:94:75:11:23:4e:
69:20:e0:a1:59:96:df:f7:53:02:8d:80:73:cf:ed:75:06:c9:
fe:f1:ae:4a:72:7a:26:de:96:42:10:cb:54:f1:50:c4:f1:bc:
e7:7f:5c:75:57:58:ed:71:5d:2b:40:5c:4a:f6:6e:76:96:c4:
f5:c5:b0:f1:10:b1:29:bf:cf:3c:0e:1f:99:93:10:42:ed:cc:
0e:4e:98:fe:60:b6:8c:1e:68:0e:6b:0e:c8:d9:72:9b:bf:8d:
c3:83:25:2e:a5:0a:0e:13:d8:d9:f6:15:2c:b2:1d:71:35:97:
41:38:07:da:f6:28:84:0d:6d:11:c5:4d:75:d4:0a:c8:b7:7f:
cd:46:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:45:27 2026 by rpki-client