Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: A+Tn0X8OFtYovO5o0manRxlDe6c+PpOtapN5GMgVzoI=
Subject key identifier: A2:C8:69:92:5C:BB:40:B5:31:F6:E3:24:B6:48:26:C1:72:8F:E9:9C
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019CACEBDA2D7628C539CA8E30B7DA718B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:01:03 +0000
Manifest this update: Mon 02 Mar 2026 05:01:03 +0000
Manifest next update: Tue 03 Mar 2026 05:01:03 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: oQLrfyQtX8V4pNbjpWRHJvMvUKF/PzWTOFoOSHRDwWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:da:2d:76:28:c5:39:ca:8e:30:b7:da:71:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Mar 2 05:01:03 2026 GMT
Not After : Mar 3 05:01:03 2026 GMT
Subject: CN=a2c869925cbb40b531f6e324b64826c1728fe99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:03:aa:51:38:f8:7c:4a:1e:a1:37:23:c3:
26:39:f4:c7:ab:f2:28:eb:8e:5c:48:b1:73:fd:6a:
86:1f:e9:40:8c:07:a8:de:cf:35:50:c0:a2:03:12:
b5:b8:cc:45:69:b7:ed:63:2f:21:23:ae:37:f9:1f:
d6:dd:ae:d1:13:c4:92:7b:a3:ae:e8:2e:dc:46:eb:
e4:f0:27:69:1b:5c:26:6f:a4:e0:95:a5:fb:ad:50:
ac:7c:1f:c7:9f:c7:f2:35:2e:01:95:51:a6:fb:a4:
31:b4:74:bc:60:c6:ce:86:ed:85:74:f3:02:4f:e7:
a5:34:69:1f:97:16:d0:2e:f2:50:9b:9b:23:60:fc:
61:1b:ef:40:4c:44:ca:a4:ad:dd:30:cd:e3:e1:f7:
30:44:09:5b:9f:ca:24:f5:82:71:1c:03:fd:33:1c:
8c:ed:bd:38:cc:df:f3:df:d6:80:2f:af:d1:51:ce:
52:8e:e5:eb:d6:7a:4d:e3:d0:2b:65:50:4c:c6:f6:
5e:69:3b:84:0e:0d:55:33:25:9f:e7:fd:46:ab:f9:
53:02:df:60:cb:e5:13:67:44:d7:18:a4:d0:ce:cf:
8a:c8:7b:87:c9:6c:71:db:dd:24:50:5a:ed:57:e7:
f0:c5:f1:93:97:e8:71:aa:3d:ac:97:2d:01:2d:57:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C8:69:92:5C:BB:40:B5:31:F6:E3:24:B6:48:26:C1:72:8F:E9:9C
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:92:50:56:de:27:4c:ce:1e:15:99:7b:0a:52:4f:84:0d:
55:5e:5f:9d:87:b8:cd:8c:87:de:a8:cb:22:ed:18:4c:45:2a:
db:6f:48:16:08:34:ff:cb:44:b8:ae:16:01:c5:98:31:ce:88:
5e:91:ec:91:fe:de:9b:ad:bb:29:45:56:33:15:5a:d8:3b:98:
97:b4:53:fb:01:b0:42:18:1c:0a:e7:0f:46:d1:dd:9a:4e:6b:
1b:1d:5b:15:89:8f:c1:09:14:bb:55:b8:0f:c7:20:9b:0f:81:
b0:f6:b4:f1:e4:88:8c:da:38:af:6d:b4:81:62:1f:66:9b:4d:
74:d4:17:52:25:e0:86:67:f0:f5:3a:e5:6f:c2:ea:7a:a9:65:
70:d4:47:d7:2b:71:79:66:03:c4:de:18:25:f5:de:a3:a0:24:
37:cb:75:93:85:50:a0:0a:1f:90:5a:a9:8d:c0:0d:22:a3:01:
27:2c:ef:ea:10:a2:16:96:00:61:49:5c:38:13:d5:21:98:48:
77:6f:4f:1f:19:b8:1a:42:9e:c4:23:c0:ad:73:8a:cd:6d:cc:
16:c7:7e:b8:32:27:5b:af:b3:7c:b0:7d:a5:69:e2:58:4c:2e:
ee:8f:00:dc:a9:ef:3a:83:e8:67:1f:01:20:4e:b2:2e:9e:b8:
46:57:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:59 2026 by rpki-client