Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File: w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier: atcDlY6f5Y3YNUTU+zfhfuQaLNifBrCBFc1EEd4MzaE=
Subject key identifier: C4:17:6E:04:70:82:79:62:AD:85:1A:67:F5:7F:0A:A6:FB:69:E7:C2
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial: 019CAE35C615DFDBEF9ED68A91AB47878F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number: 1149
Signing time: Mon 02 Mar 2026 11:01:25 +0000
Manifest this update: Mon 02 Mar 2026 11:01:25 +0000
Manifest next update: Tue 03 Mar 2026 11:01:25 +0000
Files and hashes: 1: WAm_tIyDAPRV3BNqWG57uTp7CzY.roa (hash: qS+vZJ+Ti9+HN+VBxaCgQjtizbbFP3FemK3D8+0KoO4=)
2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: 6hvYSOZ+p3dOKwIPdEQpVwnxuCgPOBqfJCfBJ9kpm60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c6:15:df:db:ef:9e:d6:8a:91:ab:47:87:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Validity
Not Before: Mar 2 11:01:25 2026 GMT
Not After : Mar 3 11:01:25 2026 GMT
Subject: CN=c4176e0470827962ad851a67f57f0aa6fb69e7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:30:39:b1:94:8b:8b:7b:83:91:f4:4f:76:
84:31:a9:80:2a:5f:29:8d:75:8e:74:ed:c4:eb:0d:
46:37:34:7c:db:99:6f:d9:5f:6c:31:97:f3:5c:ba:
1d:79:62:3f:6c:21:02:4f:d0:66:a8:12:04:f6:5d:
4f:1a:09:f0:3f:17:c7:1c:dc:43:78:5c:46:5b:c7:
b7:80:c1:28:3b:e8:26:ed:b0:d1:07:ca:29:b0:b8:
6c:ea:db:e3:a7:84:5f:d2:f0:51:d0:e1:43:20:61:
f1:c8:57:a6:4f:d5:d5:4f:b7:d9:ae:a7:40:31:db:
ad:65:3d:90:7b:ba:f6:08:db:57:95:7e:8e:00:ab:
c1:cb:01:cb:08:b3:90:56:cd:34:ef:6a:2a:70:1b:
33:e2:7f:9f:8f:eb:b8:57:83:e6:61:28:b0:08:3b:
14:54:53:64:d9:b6:e9:bd:50:9d:55:bf:6a:78:28:
3d:bf:29:87:23:0a:19:a4:79:6f:fe:aa:25:0d:36:
8b:e1:bb:9d:8f:6b:c3:95:5e:ce:56:3d:e5:98:72:
28:1f:f8:c9:6c:f2:29:32:3d:97:ef:1d:56:34:8b:
80:aa:06:e0:6b:4e:d3:3e:d4:8f:27:ba:22:92:ba:
c3:a9:a4:47:99:80:52:cd:42:ad:d5:bf:7a:df:b6:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:6E:04:70:82:79:62:AD:85:1A:67:F5:7F:0A:A6:FB:69:E7:C2
X509v3 Authority Key Identifier:
keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d6:8c:d2:ba:6a:d3:87:cc:00:82:55:a7:3c:85:db:93:33:
7a:b7:b3:f0:6f:57:0a:d3:36:8a:82:ca:66:80:ea:12:5f:dd:
23:c5:dd:7e:2b:50:87:29:71:89:ab:06:91:e7:36:95:bb:12:
20:71:c5:f8:04:84:b6:ea:47:12:88:71:6a:72:9d:fc:05:c4:
d0:e4:70:a0:4f:65:ca:23:fa:5d:f7:bb:1f:29:33:fb:b7:94:
19:01:20:08:c7:26:0d:ec:0c:5c:03:56:f9:90:4a:a8:c6:b9:
1a:cd:09:eb:b8:da:20:bb:f2:f7:87:0f:be:87:e9:5d:2c:a1:
f5:ac:f7:2a:38:c0:ea:c4:21:c6:06:9f:56:08:ed:e2:0e:01:
6e:c7:17:31:30:12:12:3e:eb:11:f2:c6:a4:c7:e2:e6:f3:ad:
2e:c6:dd:e7:fd:a8:d8:30:38:93:f6:73:e7:81:77:3f:40:90:
55:59:7c:93:24:87:54:d4:da:75:ce:97:36:d2:81:78:ad:2e:
ba:8d:cd:75:03:67:a6:45:bf:99:93:63:1f:02:d6:17:a7:23:
72:8f:fc:26:e7:b2:a7:90:f2:0b:4c:f8:8a:b7:0b:f4:b9:99:
f3:20:e6:2f:d2:50:6c:ee:e1:4a:b7:0c:d5:56:37:20:18:20:
06:e6:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:50 2026 by rpki-client