Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: E2dVLaVe/zQeWylSEqbCSiv428qQC077gQ3s0vOCKTM=
Subject key identifier: 1C:43:FD:EB:33:41:C7:97:D1:A1:E5:C9:B6:EB:9A:5D:B1:CD:47:DF
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 019CABD9356DC0DDFC8215F32E5066E966FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: qvcvkSf6Xj2ruC62WHjjgvbgKzYIjq2/Il7GtkkUHks=)
2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:35:6d:c0:dd:fc:82:15:f3:2e:50:66:e9:66:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=1c43fdeb3341c797d1a1e5c9b6eb9a5db1cd47df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:55:b7:cb:da:37:50:b4:bd:7f:ca:83:f9:
a5:74:50:f9:6b:cd:64:fe:c5:3e:78:f3:e6:14:4b:
e9:cd:e6:06:27:fb:f2:8d:d6:eb:89:1f:9e:ed:b2:
67:9f:52:6e:c2:b5:5c:01:3b:fe:4d:17:e9:ca:4a:
91:be:db:d3:7c:30:e6:cd:44:ae:5e:5c:a4:62:de:
c9:e2:99:7f:a4:fe:a7:36:78:45:74:ae:73:b8:10:
2f:92:c1:54:36:fa:7e:55:80:bd:25:5e:f8:05:b5:
19:f4:c4:c4:10:b4:37:15:49:37:fd:52:78:c2:ab:
85:35:a2:2b:3e:61:aa:6e:ca:dd:36:5f:29:bc:8b:
10:c1:82:88:ef:4b:74:9d:f8:7c:9d:71:c8:a2:c3:
50:58:c0:4e:5c:f0:64:92:32:a0:31:ed:36:6e:ca:
49:47:a1:4e:dd:91:ab:fd:a7:dc:36:aa:0d:09:78:
01:87:28:dd:a5:f5:2d:91:8c:75:98:84:7a:3f:25:
92:d8:8b:56:b4:19:fd:46:9c:ea:35:a7:40:08:e3:
c6:78:3a:61:93:8c:24:1b:28:6c:ba:67:67:fd:16:
ed:7f:70:69:bb:05:e1:b3:65:b2:37:e4:64:ac:5b:
8a:4d:3c:47:91:4f:b6:f5:1d:13:0b:d6:c4:88:e9:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:FD:EB:33:41:C7:97:D1:A1:E5:C9:B6:EB:9A:5D:B1:CD:47:DF
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e9:75:fe:a6:9a:ac:1d:50:ea:47:15:9f:24:63:6e:00:d7:
c5:5f:2a:25:60:b6:e8:cf:d2:76:a0:b3:10:96:82:00:5c:da:
cf:17:ab:bc:00:31:21:65:6e:dd:50:2c:6d:58:ad:bc:fa:b1:
e9:ad:ee:2e:e5:d3:1a:fb:d4:7b:13:fc:ac:4e:68:8d:44:a2:
dd:48:de:a5:55:86:f0:65:be:bf:14:82:76:4e:df:f0:40:68:
ff:91:3c:83:8b:a0:f9:44:bb:83:06:31:78:c1:dd:31:35:6a:
ba:f9:04:d2:97:43:b2:5a:01:bc:c6:24:8d:a1:b5:b9:aa:89:
86:1d:9b:57:74:49:92:d1:cb:66:c9:00:43:a3:54:2c:67:29:
59:4d:d8:01:61:ed:8f:04:a2:f9:d1:44:ef:0f:26:b7:fe:25:
25:4c:f7:af:cb:6d:b5:82:ec:94:16:14:c5:92:ae:ea:e4:e2:
d0:b7:b4:0d:40:e8:cc:49:c7:0d:62:b8:1f:2f:d1:3c:5b:6a:
d8:aa:2f:99:bf:c6:ef:f9:65:7d:85:8a:9e:67:f5:8b:66:11:
90:9a:f9:53:49:e7:5b:9a:21:4b:0d:a5:a2:80:89:f3:a5:3c:
8b:30:a1:f3:c6:de:f5:f6:a6:ff:67:22:a7:d8:2b:67:0c:c9:
c3:c6:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:44 2026 by rpki-client