Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: nAhRdQDqmvn0SfFd49UK9dmImVrtM+8uTQh4xsS/lkU=
Subject key identifier: 13:FC:EE:C4:E3:6D:25:DF:8B:97:05:2C:D1:14:76:CF:26:3E:B9:9D
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 019CAC7DC263E1FAB1878D20CA51409BF276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0ABE
Signing time: Mon 02 Mar 2026 03:00:48 +0000
Manifest this update: Mon 02 Mar 2026 03:00:48 +0000
Manifest next update: Tue 03 Mar 2026 03:00:48 +0000
Files and hashes: 1: 78kqC8j6LoRWjdngK7kKihALOYk.roa (hash: 7AMmVdZKov3gEwV1YiogGxz3l6UvzVaoKb5Zky6YO88=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: G0ICPZ6QexHVirQidqrzcPpu5lowMxDEBMXlPjBQ5G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c2:63:e1:fa:b1:87:8d:20:ca:51:40:9b:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Mar 2 03:00:48 2026 GMT
Not After : Mar 3 03:00:48 2026 GMT
Subject: CN=13fceec4e36d25df8b97052cd11476cf263eb99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:f8:e4:60:a8:4a:55:e7:17:af:79:bb:57:
80:47:07:c3:59:0d:4f:8d:3f:b4:97:e3:b9:f2:2d:
ad:78:4f:f6:46:42:60:86:52:b1:e3:5b:69:52:1b:
a4:a2:62:8a:99:1d:3c:c6:09:30:f3:9c:c3:dd:37:
50:68:cc:03:ad:bd:82:93:ad:cd:9f:a5:2e:29:7a:
62:26:e4:f6:e6:bc:4e:85:bc:b1:b3:52:ee:8d:90:
99:00:9a:d9:97:d1:24:14:d5:8b:13:94:57:99:53:
e0:45:93:e1:c0:b8:24:c9:c8:46:3f:ee:b8:b3:cb:
a4:42:86:79:8b:7c:55:ec:a3:fc:f1:e9:55:51:fc:
f9:5c:ca:5f:69:02:5a:5a:ce:29:c8:e6:f4:27:c8:
05:27:20:dd:89:7f:3d:d1:d6:71:13:ed:4b:16:f2:
3e:75:3a:7d:b7:bf:98:83:5d:3f:8a:a9:9c:cd:be:
99:47:7a:03:b3:70:13:07:7c:75:88:fb:fa:13:58:
37:ba:12:2f:a9:20:fa:db:9d:6a:48:35:57:88:14:
38:0b:ed:5f:0e:38:69:e9:62:0e:95:bc:ad:c0:13:
77:d0:7c:5f:ae:69:fa:cd:e3:bc:b2:0c:b6:92:7f:
fc:86:49:f6:7b:77:13:41:5f:17:33:23:8b:9b:47:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FC:EE:C4:E3:6D:25:DF:8B:97:05:2C:D1:14:76:CF:26:3E:B9:9D
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:15:f7:0c:0f:8d:db:b8:09:07:22:93:dc:28:b6:ee:60:69:
0d:be:3c:9f:43:e3:f2:00:ac:b6:74:6c:b3:fb:28:21:4e:fb:
cc:8f:fa:37:4a:ef:31:da:b3:9b:8f:aa:ec:17:43:49:db:37:
8c:bd:57:aa:cb:34:99:6c:8c:71:eb:0f:03:09:aa:b3:a2:96:
71:1d:0c:ed:82:7a:47:79:57:80:8c:28:06:bc:9f:1a:c5:18:
95:5d:fb:ab:c8:63:76:bd:81:5c:de:19:87:78:a2:5f:3d:a3:
d3:96:79:59:54:da:09:d3:5a:3b:26:ce:ef:14:54:47:7e:02:
31:89:b6:14:18:e1:8d:b6:3e:fd:a1:a5:5a:47:67:47:38:28:
9d:92:47:2d:c5:9f:4d:81:b4:48:95:d0:89:71:56:f1:62:90:
d4:2a:3b:22:51:ee:26:d9:7e:bb:65:54:c5:c7:3d:ab:92:35:
fe:1a:77:b9:35:36:58:cf:06:69:75:7b:60:2a:7c:4e:46:e8:
58:26:7d:51:ad:6e:f2:ab:dd:ee:52:2b:6d:dc:dc:0e:69:d0:
74:c0:ff:ea:e9:08:30:b1:1e:62:71:39:cf:c1:6d:6c:08:72:
ee:89:88:4c:72:b4:27:d1:20:5f:6f:94:e6:d1:b2:8a:7e:87:
95:72:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:33 2026 by rpki-client