Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: oMJ7VcmHqY7Lqfk1RaZS9X/goJmgJrxICOLqxp9B7wA=
Subject key identifier: 56:5F:41:25:00:99:D6:B5:BE:CB:F2:C3:D2:7C:A6:4B:61:71:B7:C9
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 019CAD59D7C0B68280DDFCCD116D1DDE4E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 14DA
Signing time: Mon 02 Mar 2026 07:01:12 +0000
Manifest this update: Mon 02 Mar 2026 07:01:12 +0000
Manifest next update: Tue 03 Mar 2026 07:01:12 +0000
Files and hashes: 1: aNkPm_ezm0ctJK7MUUoxpovWRR4.roa (hash: 0s/77SfpzH3RIt4lNEcqz/Xnu6SS7M01lJXkiMcJwCI=)
2: adEMxHyupcifqh018PDSo4aZYRU.roa (hash: 2ejGSNPMnDgazqPRclsg72M/nQyRhAE01Ub1Oiox0Y0=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: +mrYtJvOMGY1mxU6JPMjrjT3ujOlr8LRz0bgKaQLx3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d7:c0:b6:82:80:dd:fc:cd:11:6d:1d:de:4e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Mar 2 07:01:12 2026 GMT
Not After : Mar 3 07:01:12 2026 GMT
Subject: CN=565f41250099d6b5becbf2c3d27ca64b6171b7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:c7:7b:3d:7c:7e:b1:d6:73:1b:ab:6d:3a:
c2:f7:dc:27:9a:0c:20:70:b7:6b:0f:a4:7a:fc:da:
b0:1d:f7:a5:64:bb:8e:47:84:d0:a8:bb:53:3c:eb:
07:17:3a:bf:5e:7c:44:d3:9b:ff:57:e2:2f:5e:cc:
b7:07:6c:3f:ff:40:d4:a7:a8:a0:e2:94:37:c5:59:
47:ad:34:c2:07:41:15:b1:46:e9:62:1e:0e:40:46:
b4:c0:7c:c4:b7:76:7c:40:4c:7e:c6:39:f7:ce:3e:
68:4b:4d:70:d4:bf:b2:a5:98:f5:68:19:3c:2d:55:
98:7e:9f:47:dd:f0:05:1c:69:86:b6:e5:f5:ab:21:
94:b5:0f:f0:19:7f:fb:78:e1:66:85:ce:b7:30:ea:
27:7d:09:e0:06:5c:76:05:17:8a:88:ef:2d:c3:96:
a3:7e:0f:0b:fa:7f:40:78:65:db:b6:eb:11:dc:b0:
64:42:ca:3a:a7:a1:d5:18:5f:23:30:14:da:87:72:
5d:a0:db:b9:78:bb:9a:4c:9e:ba:1e:0e:f2:61:85:
e4:9f:7d:dd:da:20:df:eb:2a:2a:ad:a8:3e:61:a7:
f4:dc:69:e1:7a:51:8f:ad:9a:75:06:a7:d5:8d:0b:
84:da:c8:e7:c6:96:7c:09:80:2e:33:d7:c4:3d:97:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:41:25:00:99:D6:B5:BE:CB:F2:C3:D2:7C:A6:4B:61:71:B7:C9
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:66:5c:23:27:e8:51:92:95:80:1e:ce:d4:99:8d:1e:06:
01:22:ab:dc:8f:e2:c8:53:b2:09:7c:55:a9:6c:34:ed:b5:4f:
a4:1b:2c:9e:96:eb:dd:97:58:cb:c9:41:a3:4d:e9:a1:06:a0:
34:05:41:83:e8:e2:06:63:71:97:60:f6:1b:1f:e3:f0:28:c0:
27:2f:8b:ab:ff:38:20:f3:3c:f4:55:97:42:ab:8a:d5:f3:b9:
0e:71:41:65:a0:64:ff:5f:3a:6e:1d:23:95:d8:56:12:37:c3:
bf:a2:87:e9:03:b3:1d:d8:f2:3d:36:8a:c4:6e:81:2a:b3:51:
de:e4:30:65:83:97:92:06:a8:2d:80:9e:3b:55:73:20:8c:55:
be:99:de:b0:84:db:3f:f5:65:a7:9d:c2:69:ed:ef:54:0b:3c:
35:71:0e:9f:11:32:a4:75:1b:81:b4:11:f1:b8:b7:b0:30:4d:
0b:32:cc:ab:b8:ca:99:d8:dd:a2:4c:55:c5:22:72:c8:8d:68:
78:9e:4a:2f:4c:ed:9c:f7:30:3b:99:bd:7f:2c:4b:ff:66:44:
04:21:4f:2f:9b:cd:bb:b6:34:9b:1e:1a:d4:a0:85:17:ed:b4:
77:8b:de:3d:56:03:7a:5f:62:37:60:30:cb:bf:d0:b1:96:0d:
3e:cd:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:18 2026 by rpki-client