Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File: sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier: 2ndfU2ijd6KrjAq0XWo84qTu+naejyTWZXt3y5pdGyo=
Subject key identifier: DC:F8:8E:12:4B:8C:74:D5:80:D7:CB:E6:32:CC:CD:BF:D0:2F:5F:D6
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 019CA9B3C88F3A8AD0E532563A3B328DC736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number: 0ECF
Signing time: Sun 01 Mar 2026 14:00:57 +0000
Manifest this update: Sun 01 Mar 2026 14:00:57 +0000
Manifest next update: Mon 02 Mar 2026 14:00:57 +0000
Files and hashes: 1: YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa (hash: bLjbl+wMhiL7sRh09UL9i2a7It+tGXyibFC5+VSFo1A=)
2: hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa (hash: 7SFeRpPNNir0THQNHogkPoRqinwuTC1jSrURc0Ccc1k=)
3: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: F6iv93piuO26uC5ZlmZCdt9mr1Q4YNZZnfa6E4wNXCY=)
4: zNU6IDjxCzR9kstGaRPoOLdFKys.roa (hash: /0Ll+33Qv6p8kiSxadN/S3UUnMBmdYJpGWJ0vqXCXNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c8:8f:3a:8a:d0:e5:32:56:3a:3b:32:8d:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: Mar 1 14:00:57 2026 GMT
Not After : Mar 2 14:00:57 2026 GMT
Subject: CN=dcf88e124b8c74d580d7cbe632cccdbfd02f5fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:03:fd:94:62:65:80:c1:49:32:55:27:17:
98:f2:db:27:6c:59:56:77:47:cc:a2:66:d3:7c:fd:
4c:a7:e3:16:6d:f7:80:96:0d:c2:e5:9d:a7:2a:34:
7c:c6:76:b6:2a:b9:20:a5:e5:a4:3c:6b:57:bf:c2:
f9:a8:89:66:12:a3:ce:ac:d7:77:1e:93:b4:47:cf:
c6:a9:5c:30:08:18:9e:ee:c0:2b:66:3f:12:b1:2d:
e7:63:c8:9d:98:2a:60:a3:2f:f6:86:c4:00:a9:8f:
77:cd:08:e9:00:d0:e1:25:15:98:e0:10:26:43:65:
48:37:9c:1b:02:4f:8e:2b:70:d1:53:f4:63:ac:21:
4a:b2:10:cc:65:75:b9:69:a9:d6:8d:b0:72:6f:6a:
5f:ba:98:1c:a3:8f:2c:12:8b:28:6a:d3:49:41:a6:
9c:aa:23:57:e5:e6:8a:ea:2c:8a:93:80:01:e6:f3:
b4:72:63:05:f1:bf:c3:01:63:91:59:56:97:af:ea:
92:8e:2b:24:90:2b:e4:63:61:7a:87:d3:db:e2:c4:
e4:7d:64:f9:d7:bb:27:d4:4a:17:e5:41:50:c9:2e:
11:b5:cc:54:ee:b2:85:0f:97:2b:6c:e0:d9:0a:77:
54:dd:9b:af:6e:bc:5b:9d:d7:7e:1d:e3:0c:64:3c:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:8E:12:4B:8C:74:D5:80:D7:CB:E6:32:CC:CD:BF:D0:2F:5F:D6
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0c:04:3d:94:ef:6d:38:8c:ce:bb:68:2c:87:2f:e5:0b:3a:
41:59:d7:1a:14:76:22:d0:e7:b8:47:2d:20:ea:a2:fa:21:d7:
67:dd:34:aa:50:d6:b9:71:e1:0f:2f:74:e7:f1:e8:35:59:f3:
03:66:57:8e:b7:8a:1d:24:51:2b:65:69:41:25:fe:71:59:0a:
82:f2:0c:b7:2e:6e:9b:b5:b4:28:71:b6:54:eb:cc:bd:ac:46:
ba:81:8e:d9:1b:52:9a:4b:67:28:11:2e:76:04:b9:63:c7:db:
ec:30:f5:5a:30:e3:71:8b:3f:9f:d7:d0:c6:5f:ff:11:18:42:
37:00:33:46:de:fb:d7:80:d8:5d:4a:a8:09:81:ec:7a:bd:b2:
31:ad:b0:64:6f:a0:13:8f:49:fe:cd:50:4f:b9:03:89:e8:65:
8d:f4:3a:c8:d4:ba:f1:90:b2:69:92:e1:3a:0a:fb:2a:12:ab:
88:dd:1f:cb:f2:ee:c7:5e:13:e7:97:6d:8d:1e:33:fb:2e:6f:
17:58:44:7d:d2:74:0b:cb:cb:4c:d8:79:c9:dd:32:38:7b:f3:
09:7f:e9:6e:e6:61:69:ad:37:74:e9:01:3f:48:d5:66:a0:0c:
c9:67:de:4b:cc:8d:ef:26:ce:d5:89:4b:48:86:8f:67:15:f4:
b6:d7:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:05 2026 by rpki-client