Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: +xhH1TebqOmKGwvK6FoA1DVbkB9ZIxx7r5SFn5lPI+I=
Subject key identifier: A7:5A:71:0F:12:5A:6D:A2:3F:CE:93:B8:E4:68:8A:2B:5B:A1:70:0B
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 019FAA880FE81CEAAD76182C6A5B2DF589CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: 03E1
Signing time: Tue 28 Jul 2026 21:01:11 +0000
Manifest this update: Tue 28 Jul 2026 21:01:11 +0000
Manifest next update: Wed 29 Jul 2026 21:01:11 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: AabMDyIkeeCBHarb0PvHjYK8qo5xUf/NypUja1Knc9Y=)
2: yMW3TW9152cW1DYeZYxdZkr-K6A.roa (hash: n3BeZybOUYQWTsEJMiZ9th8Uj9vvq5MfmSdVF/ZPKPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:0f:e8:1c:ea:ad:76:18:2c:6a:5b:2d:f5:89:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Jul 28 21:01:11 2026 GMT
Not After : Jul 29 21:01:11 2026 GMT
Subject: CN=a75a710f125a6da23fce93b8e4688a2b5ba1700b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ce:76:18:a5:c9:ff:2d:80:f9:06:e7:63:6c:
e0:03:a2:6b:f6:f0:37:d4:bf:aa:1d:80:17:fc:42:
42:31:77:3c:d2:3b:4b:ff:54:3f:80:28:6e:9f:19:
4b:f5:05:d4:56:eb:47:74:d3:73:59:fb:84:d9:d2:
3c:f1:bb:4b:af:cd:c1:69:1a:9f:27:84:4d:7c:8f:
f3:f3:f3:ed:c1:c9:c6:11:67:a2:cd:c0:b0:f9:15:
aa:be:82:ce:f9:61:5a:e4:65:37:e4:ed:c4:c3:cc:
4d:23:60:47:33:8c:cd:ff:5b:e4:c1:18:46:dd:ca:
4e:8d:c7:18:45:bb:4b:bf:5b:43:19:3f:13:ba:fa:
3e:20:64:fc:e9:50:db:64:b0:04:b3:81:7f:28:78:
65:05:57:27:65:cb:db:fa:d3:e7:84:0f:b0:e7:35:
f4:15:44:34:5d:f4:61:aa:f1:d8:0d:25:dd:eb:04:
de:7d:ac:d3:e5:20:65:ab:70:70:ee:cc:99:8b:7e:
e0:50:84:74:0b:00:91:6f:b9:4c:e3:6f:a4:5b:99:
e8:bb:cb:a0:9f:58:76:19:af:51:b6:95:62:f7:42:
2a:5d:60:fd:32:6d:ec:99:99:3e:c4:79:b8:34:f4:
a8:71:a3:cf:aa:e4:e3:a7:5b:8f:7c:c8:b5:84:cd:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:71:0F:12:5A:6D:A2:3F:CE:93:B8:E4:68:8A:2B:5B:A1:70:0B
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:a7:c3:38:7f:85:6b:3b:92:1e:4d:8f:92:06:e5:12:0b:
45:af:20:3b:63:be:29:5c:52:b8:e7:ae:f4:2c:03:a4:2e:62:
7a:46:22:e4:95:20:a6:35:6b:95:d4:d2:b8:cf:93:27:72:19:
cb:d5:d4:a6:d6:bd:5e:bf:f3:58:66:2b:a2:8b:63:3e:dc:9c:
b5:7c:5e:82:74:45:5e:fd:a4:eb:76:77:d5:ac:2a:47:6e:c1:
04:82:52:61:0d:c3:1c:c8:b8:da:27:43:f6:f6:bc:fe:bd:d6:
d4:23:e2:75:4a:02:59:af:c5:f1:45:1d:a7:25:7f:a0:75:70:
3d:89:7c:5c:0d:97:28:25:96:e5:cd:fb:c7:a9:e4:93:80:ca:
48:8f:a0:f3:68:ac:62:d8:26:fe:3e:cd:ef:63:08:e5:aa:be:
34:e8:87:6d:70:e7:0b:c9:37:57:79:8a:48:14:3d:c7:71:a4:
8b:0e:6b:3e:e0:3b:3a:a5:14:8e:fa:ef:82:63:53:d9:f1:76:
d6:38:88:cb:05:d6:5c:46:e9:7c:73:3d:44:50:cc:95:3b:97:
57:91:9b:0c:99:2f:dc:be:26:12:06:85:90:7e:0c:17:3f:c6:
7f:07:82:eb:2c:55:02:b2:35:09:32:e5:79:84:de:10:65:8d:
32:85:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:59 2026 by rpki-client