Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: M/0QjXAI3wMV3AWTUf9kMf/zfJVfNbtXaaBo0VlxXoc=
Subject key identifier: E5:8D:FF:5D:40:BA:62:9B:27:35:34:BE:B6:2F:65:7D:BB:F2:37:F5
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 01A0DEAA12E43597532236AAF8AD04CD228E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 17:01:22 +0000
Manifest this update: Sat 26 Sep 2026 17:01:22 +0000
Manifest next update: Sun 27 Sep 2026 17:01:22 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: R5JJpy5cTak+eE3KG82G267dTZi8RshTXwxFNgbTEO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:12:e4:35:97:53:22:36:aa:f8:ad:04:cd:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Sep 26 17:01:22 2026 GMT
Not After : Sep 27 17:01:22 2026 GMT
Subject: CN=e58dff5d40ba629b273534beb62f657dbbf237f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:95:cb:9e:c8:3f:74:a9:3b:25:b4:2c:a4:
7a:3e:de:49:a8:6e:e3:e1:2e:92:80:c4:6d:45:3d:
41:01:7a:1b:ee:16:85:40:62:92:fd:00:36:e9:66:
92:1b:15:57:43:8e:fe:58:2d:c8:d0:d7:a3:ba:65:
22:4e:30:7a:b8:b2:f1:da:b9:0d:9c:40:18:04:29:
10:08:0f:a2:74:b9:a1:d6:03:41:e4:64:73:92:a8:
0b:e7:94:ab:07:2c:e4:72:96:30:fc:8d:dd:f6:57:
8c:65:0a:b1:43:21:8a:fb:bf:b2:de:85:7d:9c:c4:
58:27:47:c1:04:09:69:9e:02:82:a0:33:81:5a:50:
6a:97:68:06:fb:2d:b9:ca:be:ac:9d:4b:41:8b:cd:
84:78:0b:1e:1d:59:71:3b:b0:35:81:46:18:3b:53:
2a:fe:f6:7c:04:c3:18:7b:e4:3e:ec:6c:c6:21:a3:
a2:07:3d:c0:d4:90:83:27:20:8c:37:fc:6a:6e:2b:
26:13:a6:50:46:39:dd:c9:de:37:ae:2b:d4:2e:4f:
a3:c7:86:0d:ef:67:65:aa:a1:74:13:e0:f5:a2:e7:
19:fa:50:f6:38:62:71:6e:14:b7:47:9e:e0:3f:af:
97:eb:e9:34:1e:70:76:a5:fb:8f:12:53:11:f8:17:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:FF:5D:40:BA:62:9B:27:35:34:BE:B6:2F:65:7D:BB:F2:37:F5
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8c:75:63:41:f1:39:02:a7:e6:88:e8:d4:71:d1:90:7e:76:
c4:a1:a4:b2:d7:6f:27:78:7d:a1:b8:e5:cb:ce:46:83:19:2b:
e6:92:c7:32:62:4e:b4:52:34:b9:d1:a5:9f:8f:88:fe:26:62:
aa:d9:38:1e:e1:b0:ed:2d:2f:5a:47:68:d4:b4:87:9d:cc:d9:
95:40:5f:9c:19:1a:32:8d:c1:e2:f9:24:90:7b:ae:1a:60:d5:
cd:6b:f1:b2:b4:d9:af:5e:dd:27:37:73:03:9d:4d:3f:8d:fd:
4f:36:d1:63:f3:d7:a8:28:f7:e7:53:4e:45:b3:a2:46:d1:61:
0d:0b:cc:ee:0d:be:06:2e:95:33:f6:46:75:2a:8f:ef:3b:f4:
5d:9e:84:48:e6:bc:13:3a:b1:2d:d8:0c:7f:f8:77:42:ab:cb:
23:2f:7c:cc:6c:1a:bb:a9:71:3a:b2:34:66:c3:c2:5a:0b:11:
fa:e2:4d:7f:3b:e0:ae:35:21:33:8c:c5:fe:dc:de:66:24:80:
a4:93:47:bf:b9:f3:14:35:2e:fe:b6:57:c5:8a:a3:d4:fb:1e:
28:39:84:4d:55:18:2a:f3:09:1c:99:df:67:73:63:c6:a5:2b:
90:97:ff:08:06:c3:6e:a4:7d:0b:ff:67:e5:89:85:8a:a3:5a:
ba:7e:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:06:41 2026 by rpki-client