Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: HdL4o7JKxPAMNow/CUA9G2ROv24ilwD/P65R5Qw+vP0=
Subject key identifier: 1C:30:1D:17:2C:97:BE:BF:41:BF:10:C0:D5:2F:10:1C:11:DD:FE:86
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 019CAAC6E25ADFC2AB94FAFF7312391EB857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: dkQTrdNvtvje7aKttedC3FE0Fck.roa (hash: IBLR02ROwGRE+mKgwpI/u7N2DEv8jHgVC6B9SzrNPZc=)
2: jkV0poRpEabjs8GbnFFp-G9LAo4.roa (hash: FGABQx3WiC5iQbCtEVt4c6hjkgReQfgzufO5sALc4Wg=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: 7SIFWast/bEHTW/A7+bQlF+sziCC7r3d1iQCTQ5+FDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e2:5a:df:c2:ab:94:fa:ff:73:12:39:1e:b8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=1c301d172c97bebf41bf10c0d52f101c11ddfe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:2b:e0:e8:c5:e3:6f:8a:14:85:ed:b9:5b:
fd:6b:83:13:80:5a:7e:6b:22:8c:0b:c5:f2:0b:f0:
17:2a:0a:e0:6f:4d:37:a8:8c:49:cc:a4:e6:da:50:
1e:af:b8:06:2a:40:d7:b2:05:d5:80:b3:8f:32:19:
eb:b9:72:9c:df:e2:17:9c:2f:80:1c:a0:52:73:24:
60:fb:00:32:51:f9:71:1f:0d:94:94:ea:0e:cc:19:
63:ca:7d:4c:cd:74:07:26:ad:44:77:59:85:49:9d:
2f:13:c7:45:f5:14:d2:41:11:8c:28:62:6b:f2:5f:
8e:9c:23:bf:e7:6e:46:7d:be:69:4a:63:ad:f1:1e:
76:fb:b1:04:28:c7:9a:90:7e:0f:6d:50:60:d3:06:
93:27:cd:61:6f:dd:d3:13:b2:3e:93:d4:fe:4c:9b:
e8:ac:6c:8c:82:26:bd:a9:3a:72:2d:f2:05:cd:c8:
e8:cd:05:d2:94:67:d6:b7:13:6f:2f:af:0d:b3:b0:
25:71:80:cb:5e:8e:78:15:eb:d9:5c:17:a8:0d:ca:
72:8d:a5:29:a3:5f:cb:91:0e:00:e2:38:aa:17:5d:
17:b2:14:15:e6:69:8c:9d:62:10:b7:0e:62:f9:f9:
cb:6d:2b:1f:ba:9b:ac:84:f6:09:50:67:22:aa:5c:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:30:1D:17:2C:97:BE:BF:41:BF:10:C0:D5:2F:10:1C:11:DD:FE:86
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:51:59:f3:24:21:c1:db:e7:52:15:6d:3d:3b:ad:42:20:
59:ba:a9:0b:81:bd:a5:07:c3:62:7e:a1:09:1f:a3:61:02:7c:
1f:58:5b:2d:22:74:da:4b:2b:4d:64:06:89:ea:72:b2:9e:7a:
2d:7e:00:33:7b:01:1b:e1:2d:aa:55:38:7a:dd:1c:2c:fd:83:
e9:bc:fe:f0:64:e6:c2:9c:f9:f0:89:99:b3:a6:32:6b:7a:8f:
bc:0f:88:0d:1e:b0:e4:82:04:b9:fb:ed:32:d4:a7:0e:0c:a5:
1b:d4:23:74:aa:86:29:2a:5e:aa:0b:61:14:e2:b2:c0:84:66:
52:4d:0f:14:28:59:75:00:13:23:b5:ac:5a:d7:b3:4e:c3:09:
a6:7e:fe:63:44:ad:7e:85:c4:73:b9:a3:df:98:f4:84:23:d8:
f0:f7:84:11:41:7a:28:e2:01:41:04:0f:64:bf:db:41:9f:82:
77:81:56:bb:5e:f4:86:63:70:73:e3:57:f0:79:44:2a:0b:c7:
70:c3:5d:a4:00:fe:77:3e:d0:b2:8d:6f:7d:1c:62:5b:7e:27:
eb:62:f3:58:95:d1:15:e1:ec:3c:e9:a9:4a:95:fc:8a:cb:9a:
7f:fb:73:81:a4:8d:ee:41:1b:e6:19:28:32:d6:76:2c:08:c9:
c4:47:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:05 2026 by rpki-client