Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File: W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier: DchzcTMsue3QkxAh85czWcFa3468gkxmwCk+s82aYo8=
Subject key identifier: 4C:DB:C9:05:9F:A8:BF:A2:AF:C3:4A:69:75:3A:42:92:47:E2:81:E9
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer: /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial: 019CAC1013167834736A0FF1D0AFCF7AF073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number: 126D
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: DIGCQbMEvX3S2DQ7VERDwaNmPgI.roa (hash: vrQP6CoSztwA+KPM4HiP9pP5zfEZ7MxF+t1JeC7UBYM=)
2: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: 1iEpRL4ZueIoPa7rBDlPI3g7eusY4eKOzIgSfiAWqsg=)
3: ubWTx4s1XitX6PHQT8bII0Sr8VA.roa (hash: OkiBE/NUzkKV+xXfw7sua6AgcBbcZ2vjT39S06HxuOw=)
4: uhG95XF25QmjvzLstx1n9pIbB5g.roa (hash: nKE/loz1ortOdOeQYwJVvnlVW4oJD/w1eygAfQW6kko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:13:16:78:34:73:6a:0f:f1:d0:af:cf:7a:f0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=4cdbc9059fa8bfa2afc34a69753a429247e281e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:af:6c:15:84:d1:c9:c5:d8:c8:3e:9b:67:
c6:a4:19:28:07:84:ad:10:bb:35:d7:b8:82:11:2f:
94:31:b7:6f:ff:67:c2:0d:7b:7d:5c:0e:d0:bb:93:
13:11:b0:50:82:41:9b:47:3f:5d:36:da:0a:80:57:
87:31:33:6a:6b:05:ed:03:7d:57:c2:fe:bd:4b:04:
10:7c:f5:7a:9e:38:93:0d:b1:e1:12:33:25:db:71:
d6:9f:1f:cf:c0:9c:34:5a:0c:08:8e:3f:5b:10:53:
98:a2:b8:a8:57:e0:b6:29:35:c5:d5:f6:9e:dc:0b:
ea:d6:e6:af:b9:be:d2:61:19:ae:e4:41:62:93:df:
96:24:8f:ac:b5:59:e8:0a:f7:5b:2a:c3:72:36:ec:
10:09:1e:5b:92:d2:2c:4d:93:e5:50:6b:e0:cd:bb:
b6:b6:f4:5e:5e:c0:fe:2b:be:ca:a1:fc:c6:fd:cd:
86:5b:d3:2f:bb:69:ba:f5:76:58:4f:16:f5:5c:9f:
02:d1:50:82:00:0a:e2:2d:1e:45:c5:b4:81:1a:53:
a1:86:7f:7b:17:14:60:e4:6f:50:c4:e7:de:9f:b3:
9d:aa:c1:e2:2c:7c:bf:66:33:38:68:f8:61:95:4e:
bd:5d:7b:27:1b:b8:14:22:6d:9d:f1:dc:9f:82:55:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:C9:05:9F:A8:BF:A2:AF:C3:4A:69:75:3A:42:92:47:E2:81:E9
X509v3 Authority Key Identifier:
keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b2:e4:89:cc:fd:78:c8:01:0a:f8:12:16:84:dd:33:4c:f1:
f2:98:56:c8:1b:79:16:c4:2e:7c:dd:65:73:18:85:81:08:7a:
7c:e3:9d:08:45:09:6a:8a:4b:ba:19:d5:75:6f:50:9d:f8:80:
1c:9e:7a:21:82:be:1b:54:c1:b1:25:c0:34:e5:e7:b8:cb:1a:
37:b1:2a:25:17:6b:49:7f:fa:d1:50:2d:ec:e6:4e:69:7d:f1:
6c:b8:51:64:80:28:5e:cf:b2:98:60:91:53:67:49:1c:41:7f:
af:a7:01:a5:cf:d1:40:28:3b:9f:af:eb:b1:ff:56:82:a5:f3:
91:c2:a8:8c:e2:50:0e:26:9b:fc:0e:63:fb:02:6a:9c:5d:58:
c9:76:ed:3a:42:83:34:20:35:cb:2c:7f:7e:da:1a:41:78:a1:
3e:89:da:a9:f6:48:28:8c:16:cd:27:4b:ca:bd:0d:24:90:a2:
57:74:04:8d:ed:eb:aa:ee:82:f8:ff:7c:49:c8:bc:25:79:b4:
1d:c9:d9:65:5c:4c:d9:77:d3:97:6e:f8:4c:91:84:cf:48:bd:
2a:0f:25:ef:8f:61:2c:f4:10:2d:d9:1a:09:2e:f7:7b:40:f2:
65:9d:35:25:1f:a6:2c:0a:1c:b6:a7:59:73:c0:83:45:4c:4d:
59:64:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:50 2026 by rpki-client