Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: cqmiUxQCp/VoobJpZZ+k+SRau6ACytqqaYpfUpoH93A=
Subject key identifier: 8F:84:96:21:2A:94:88:9E:09:EB:6C:13:27:92:B9:2B:2C:A2:6E:D7
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 019CAC7E52B0C9F37EC5C6AF5683D1ED9F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: 1-Z88AMUmP4f9jCMcq7W-T-SR5yw.roa (hash: 5q6qg65y9JwUuOw3HEGI3kuvz/rp8QoSa+GfSi94XUM=)
2: T1HaQCOa922ywanRdZuOyFcSnLM.roa (hash: 0qKkM2h/9bHDgIcIK/Uz+qlsAYQ0n2pteQdmrD0+CB0=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: U4jMW72HB7iE/PU0t64H4sDGu9AC+D1PBggtD02tUrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:52:b0:c9:f3:7e:c5:c6:af:56:83:d1:ed:9f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=8f8496212a94889e09eb6c132792b92b2ca26ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:47:f6:a2:59:97:a8:2d:f7:06:13:21:98:
9c:79:43:fa:e1:59:de:bd:74:8c:b9:d0:a6:e6:93:
ab:c4:d5:49:0e:c1:b0:f9:62:04:85:1b:98:e3:88:
32:2a:df:11:5b:7c:33:52:0b:bf:0f:1a:1b:e4:25:
96:2a:09:26:ab:7c:e2:9f:9d:86:56:ed:d4:62:41:
9a:86:9b:36:cd:7b:57:8a:99:6a:f2:77:e2:a5:a9:
f7:48:6b:5a:51:7b:72:78:d8:30:b3:6c:5d:17:93:
c6:7d:4e:99:ab:b5:48:c4:ef:37:75:1b:a4:1d:b5:
98:e8:c6:3d:a8:4a:ea:a1:32:58:87:80:8d:34:c1:
86:f4:61:77:74:7b:7b:cf:de:dc:eb:5f:85:af:c6:
28:87:ab:6f:e4:51:a0:3d:69:6c:80:f9:8e:f3:fd:
97:40:0d:14:61:0b:10:ba:df:9c:8c:2d:dd:c4:88:
a7:46:1d:0a:30:27:8e:12:01:28:4f:9d:c5:ba:37:
c7:b1:df:ad:c2:e0:e8:6c:79:9d:df:08:e1:53:26:
03:5a:03:af:aa:b9:f5:6a:e0:1d:ed:c4:cc:7f:fc:
6e:3e:c1:d6:e8:99:57:c8:aa:71:d9:c7:04:db:10:
2d:32:4d:f3:24:a8:47:ac:66:df:37:3d:fa:8e:a5:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:96:21:2A:94:88:9E:09:EB:6C:13:27:92:B9:2B:2C:A2:6E:D7
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:97:c2:c9:8a:de:ac:7e:9b:8b:97:1b:4a:13:c9:4a:ae:18:
30:05:42:7b:b7:6a:4d:62:40:ef:13:fe:ac:0d:42:44:33:3f:
47:09:ca:11:18:63:ba:0c:e9:68:64:0c:b5:5a:32:27:8e:80:
31:aa:9f:60:7f:b1:8b:09:54:43:ba:b3:37:c6:ec:aa:de:ae:
8f:8a:11:6c:ea:e4:96:87:f4:30:c3:f7:cb:bb:86:37:5e:45:
d7:f6:64:57:90:11:50:f0:5f:f0:cb:00:64:8e:f6:a0:dd:1e:
dd:5f:ab:a3:0c:30:74:4f:f1:1d:ba:54:c9:45:f9:ff:c1:5d:
48:24:bd:7c:d0:b1:41:ee:bd:d1:a8:7e:19:f2:a5:cc:91:62:
4d:31:40:cd:ca:0e:c3:3c:a4:51:f9:9c:e3:88:ef:55:27:e7:
5d:ec:44:ed:95:d1:cb:9d:4f:f0:2f:41:4b:89:d2:f6:e0:6a:
52:6e:d4:0b:50:d4:a6:b8:c4:94:52:92:d9:32:ba:a8:24:1d:
15:d9:4c:67:ca:b7:8d:e0:a2:cd:6b:a2:6a:ec:79:59:67:ec:
d8:ed:1d:91:43:70:ee:11:d6:51:f9:00:41:2a:b7:bf:a3:89:
f5:5d:ce:17:c1:bd:17:b7:eb:32:4f:ae:fb:5c:40:bc:61:24:
6c:ad:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:38 2026 by rpki-client