Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: cMTjo6raVzt5clP2gIJOMV1NoMMWRFUCHLcjdteYNwk=
Subject key identifier: 15:22:31:70:F6:FA:96:F5:A8:06:EF:B1:C3:19:F7:01:85:44:8E:CF
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 019CAAC6A420EAA60398EA875743DE880BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 0EC7
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: TKt8PccB5k2P/E/1ojnu0r+Ze/IiCHoUkl5MnJJn+a4=)
2: s9paXHBMcHwPpUAhDzEk7fWyjI4.roa (hash: 6LvRMh7M/YPi7YR17wVKUzvm8pgqSzx1sR9wUzsZ/wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a4:20:ea:a6:03:98:ea:87:57:43:de:88:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=15223170f6fa96f5a806efb1c319f70185448ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:3a:6d:f4:37:ed:66:95:96:7b:5c:81:17:
54:4b:7c:e3:38:8c:08:48:36:92:5a:5c:96:86:60:
7a:42:e9:93:49:98:8c:c0:fe:9e:5a:04:8e:90:68:
9f:2a:30:e2:f9:68:9a:16:64:2d:fb:c4:5c:e7:d3:
e4:63:96:ef:62:28:4d:88:64:33:6f:ee:ea:8d:55:
2f:f0:16:76:32:2f:5c:23:38:81:d6:4c:fe:22:e7:
49:d7:03:72:a8:89:d7:a1:83:87:e2:93:f5:e6:f7:
fc:8f:f3:a2:d8:6e:b0:e1:70:9e:cc:76:d8:9f:4b:
db:69:3a:bd:e8:ce:46:41:c6:0d:a4:54:28:4e:25:
62:3f:1e:00:64:ef:e1:bb:88:67:c1:c4:45:5e:88:
72:d6:90:f7:04:df:f7:34:a1:16:7d:51:13:75:c3:
e3:ec:b5:b2:bf:aa:7c:c6:18:20:c0:4a:34:f1:fd:
12:d0:b8:12:c8:07:df:ee:d6:8a:09:c3:47:97:83:
98:b5:b9:2b:62:72:e5:83:6a:a2:fe:c6:7f:2b:fb:
e4:85:31:6a:ed:5f:01:9e:2c:af:c6:92:c1:a3:9a:
79:01:b6:60:60:a0:8f:b3:a7:8d:6b:33:6e:8f:99:
6b:3d:df:7c:ee:9d:b4:b6:f4:cc:af:13:88:75:94:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:22:31:70:F6:FA:96:F5:A8:06:EF:B1:C3:19:F7:01:85:44:8E:CF
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:16:c2:ae:3e:af:3d:52:00:93:5c:9c:58:4a:74:d8:15:26:
d6:d2:fd:fe:2a:e9:62:35:2b:f6:37:34:59:0e:44:f6:39:2d:
16:ea:b7:d9:20:ef:01:88:57:22:0b:f3:56:e2:f7:9f:eb:1d:
dc:e4:ad:0b:a5:61:83:76:3d:1d:8c:d0:0e:35:5c:10:3c:e4:
20:cc:9a:ad:00:bb:b7:5c:d6:e7:52:74:88:33:e3:3d:90:ef:
70:53:c0:95:02:cc:6c:a4:f3:e8:eb:09:7b:2a:87:a9:44:a5:
4f:94:a5:59:cb:aa:e8:c4:da:f9:68:5e:7b:ca:50:ed:3d:4b:
7c:5d:b7:94:cf:b7:d9:18:c9:70:70:f4:25:88:e4:40:77:d5:
64:2c:f1:c5:f5:2e:d0:36:22:e2:30:df:36:af:60:2e:f7:05:
d3:21:85:6f:09:67:3d:67:79:fc:76:09:40:4c:84:bf:43:ef:
ad:e6:21:c4:f5:80:d7:f1:83:9c:96:1d:5d:cf:83:d9:73:01:
48:b1:b0:18:f3:65:a3:2f:5b:66:e2:ce:89:a9:88:a7:ad:b7:
10:53:0c:6f:4b:5b:6d:ea:66:8d:74:9d:57:fe:4a:c5:89:89:
f0:28:a3:2c:b5:70:23:af:d2:d9:2e:d8:89:16:06:6e:1f:d9:
51:59:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:40 2026 by rpki-client