Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier: sF/EWPe88x2Bswk6Z3hwrEvK0FgRCUBUcX3Xi8Sh85k=
Subject key identifier: AF:65:25:86:66:92:D7:D1:61:96:68:AA:F4:AD:97:CB:45:F0:CA:BE
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 019CAB346DEE0304CF00BE5673FDF4F9CA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: AVxiOXJDrisHfmZgr2aXeclmtwU.roa (hash: 4L7UFMqLp3HNu/xc7sjo2ZgReOCpLyizZvJkZ1OP7h0=)
2: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: MwOLZPxSGtN/ydTn0+v7OKgS9dmtIJYpro/WJlnCSf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6d:ee:03:04:cf:00:be:56:73:fd:f4:f9:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=af6525866692d7d1619668aaf4ad97cb45f0cabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:97:cb:61:39:37:d9:f1:4a:99:f3:54:4b:
70:bc:92:da:c7:fa:53:8d:4c:e7:31:bb:f7:25:fb:
5a:f8:b4:63:76:7c:d9:74:72:b6:86:d6:f8:4e:fc:
c8:4a:45:e9:54:ec:85:17:69:4a:57:85:6d:ad:ba:
00:3d:b8:81:05:d6:6e:16:8a:1e:f5:a7:60:7f:65:
5c:40:74:34:46:aa:02:b0:a7:57:48:7e:f9:ad:32:
32:aa:c8:e5:e1:82:e4:87:07:af:3a:95:f4:b5:a7:
b2:ca:6f:d0:bd:ee:ff:0d:c9:bb:ed:cf:da:db:f6:
fb:31:6c:58:2e:13:65:3f:d0:5f:d5:86:84:7e:18:
86:66:fb:25:b6:3a:cf:64:85:9e:ce:0c:68:ab:98:
36:7e:0b:95:05:1a:bb:e2:55:72:f5:d3:7a:12:d7:
c6:69:b8:d5:58:14:4d:9c:be:b0:b8:1a:05:02:0a:
08:e3:a9:66:83:ab:93:d3:63:7b:3f:47:f2:80:1a:
79:8f:fe:53:57:46:82:2d:e4:78:67:90:58:31:22:
61:7b:33:2e:9c:d1:a5:bf:ad:a7:f0:1d:09:b3:60:
11:1e:8e:ce:37:d0:ed:a0:63:80:82:af:b0:71:84:
4d:86:10:e7:0e:6e:2f:35:53:a6:5e:3a:5c:4f:76:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:25:86:66:92:D7:D1:61:96:68:AA:F4:AD:97:CB:45:F0:CA:BE
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:af:ba:df:83:ba:66:67:7c:9f:72:46:31:a7:2c:ef:70:72:
e3:e4:63:b9:26:be:c4:ab:05:19:be:6c:ce:6c:80:54:11:15:
80:e0:6a:05:33:b2:6e:18:4f:7d:94:8c:5d:ee:53:c0:23:52:
88:da:db:49:89:14:ee:87:4e:eb:31:86:e5:9d:8c:ef:77:04:
22:b8:b7:66:d1:f1:41:29:88:a2:12:d0:e2:65:9a:a9:24:dd:
49:a3:02:2e:85:50:41:3f:30:dc:81:b4:40:6d:da:cf:ae:74:
c2:31:a5:6c:f1:5d:bc:58:4f:76:01:9e:a1:39:7e:9a:38:ff:
4a:a4:6e:c7:c1:d9:76:98:cf:ed:72:08:f9:f3:7f:9b:23:c1:
60:83:f1:cb:f4:67:83:88:8a:ee:85:e3:e9:ec:e7:bf:9e:16:
b4:3e:1e:d2:65:99:8f:e0:dc:b7:59:28:d8:92:bc:af:14:e4:
81:b9:d9:a9:a6:75:ac:a5:a9:5e:cc:77:e6:8c:08:ac:20:2e:
5b:bd:6f:8e:58:f4:b8:2f:b0:6e:9b:ca:83:23:7c:ad:0b:67:
12:71:5c:8a:b1:05:76:88:e0:92:0e:b1:b6:37:8f:cb:3b:72:
22:3f:18:d2:d9:fd:1e:ab:c1:13:24:d0:59:6c:b3:54:7b:c9:
c7:8d:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:41 2026 by rpki-client