Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier: VNUCwOPrsDIhaZ2Sz7wZy1ECP7yCXfNaOj3HM4uGFcQ=
Subject key identifier: 1C:85:E3:55:F2:15:EE:39:75:7A:EC:38:F2:25:54:3D:A6:FF:4A:28
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 019CAAFD0430180F151987C04DF8D6A9284A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: 2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa (hash: cybpkVwdsMajo+j6GQEPWPYPJtxhQXNnJjY27Ojj6kI=)
2: H-6m9OAus7SJdJgHPXm_EOjYjKw.roa (hash: gi8ow+847xYV+vC4uNruDQ8q4FPVqzKl6+lW3Re5puA=)
3: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: lMNjIqpWDbBRYnnD3Vj+jnevdzOaqI4l4u5kGvt6BWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:04:30:18:0f:15:19:87:c0:4d:f8:d6:a9:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=1c85e355f215ee39757aec38f225543da6ff4a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:bd:30:0a:7e:c4:a0:72:05:bb:ad:11:bf:
7d:39:f7:a2:15:91:35:49:94:49:25:41:c5:90:90:
88:36:9d:e0:67:9a:00:72:03:72:39:d8:08:f4:99:
7f:da:c5:4d:92:16:4b:e5:cf:4c:1c:e5:63:fc:13:
7d:bf:d4:99:25:bc:e6:5f:68:c5:e3:41:bf:53:97:
5c:81:29:76:8e:b9:1c:d5:7f:09:ff:62:92:55:f8:
ef:37:e7:f5:a5:ea:84:83:78:8c:db:5c:29:05:e0:
4d:a6:ce:18:48:ef:3d:70:3c:d7:c5:8e:f5:a0:77:
0f:eb:37:d6:94:15:93:20:e3:88:af:fc:5f:64:77:
d8:cf:0c:b2:a6:ee:8c:7a:15:84:0f:d3:08:93:0c:
7d:33:15:20:13:72:ed:fa:78:a4:0f:dc:d9:c2:2f:
ed:04:b6:96:ce:98:e8:91:b3:30:4a:b3:b1:1f:71:
7e:b8:60:71:2c:84:6d:80:2b:7c:39:97:19:5f:93:
45:e7:ae:9a:71:ad:b0:1f:28:b9:01:71:ef:dc:41:
6c:5b:81:50:39:9d:80:29:a7:0a:46:df:51:90:e8:
6a:e6:19:d2:b9:cd:fc:5c:88:0d:5a:64:b5:e9:4d:
80:f3:2a:f0:e2:ac:0f:de:24:b0:73:1a:97:2d:44:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:E3:55:F2:15:EE:39:75:7A:EC:38:F2:25:54:3D:A6:FF:4A:28
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0a:70:8e:72:87:8f:08:40:df:38:a0:97:9d:d4:59:c5:69:
f2:15:72:58:9d:49:e3:f9:20:16:dd:18:a2:13:10:7e:e4:04:
f8:ab:e9:12:21:fd:4c:d0:93:93:dd:f2:03:c7:ea:8b:d7:49:
de:be:7a:34:78:63:e3:b7:af:38:18:cc:e9:9d:5b:5d:13:6a:
de:42:eb:06:c8:47:ca:db:7c:ba:50:66:ec:11:12:83:7e:cc:
7f:c6:49:85:58:4e:a7:8b:ef:75:69:fa:d1:42:da:7b:29:30:
03:62:e0:b0:b2:1f:24:da:f8:29:d5:bf:4c:7e:d3:6e:ce:47:
a1:34:89:0a:2b:4b:8e:c6:57:3e:41:fb:d5:fa:e5:e3:74:39:
03:e9:12:b2:a5:20:c4:bf:f7:77:2a:f3:c4:91:60:a3:ba:cc:
88:2b:b7:d7:8b:59:f5:69:09:0d:12:48:4b:60:71:98:f6:8d:
85:b3:5b:b6:87:37:71:7f:af:db:e0:73:fe:48:44:b7:cb:45:
a2:61:49:2f:aa:13:c1:c8:a1:b5:ba:d7:fd:18:5d:1e:4f:aa:
9c:da:f0:cd:91:fa:bc:e5:ca:d7:f7:19:44:32:e3:16:98:26:
d7:eb:d1:02:b8:a5:88:5d:01:c8:dd:ff:8e:b5:f8:1c:e2:16:
b7:20:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:03 2026 by rpki-client