Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: LGUryaACuUbITeyZBJniPORwLrl2n9/z1sdURrOXuUw=
Subject key identifier: CD:79:C1:FC:C0:A7:C4:4D:C8:E8:C0:44:45:EE:9D:FC:62:A9:8C:C5
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019CAE35535850E0CCD20244B7B6444D284A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 153D
Signing time: Mon 02 Mar 2026 11:00:56 +0000
Manifest this update: Mon 02 Mar 2026 11:00:56 +0000
Manifest next update: Tue 03 Mar 2026 11:00:56 +0000
Files and hashes: 1: OBjM2iKRMxSjqa98ychsixD6X5g.roa (hash: q2aIFop5k0Cp3GYeaHHvGFWE530UcdAx8s7zzr0tPgM=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: 4Ie5s2w44npeANnCb7CZ9HXYMtRfz6RcApbCh+uXZLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:53:58:50:e0:cc:d2:02:44:b7:b6:44:4d:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Mar 2 11:00:56 2026 GMT
Not After : Mar 3 11:00:56 2026 GMT
Subject: CN=cd79c1fcc0a7c44dc8e8c04445ee9dfc62a98cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:4f:98:00:2e:8e:ae:9c:dd:7a:f0:37:f5:
8c:6c:92:08:ba:e0:2a:71:bf:65:18:a4:23:03:48:
e8:a8:8a:55:2f:d8:47:47:2d:14:92:ab:31:36:f3:
d0:22:16:bf:d7:50:07:fc:32:a0:de:36:36:2e:c0:
60:5d:26:fd:71:e0:24:27:87:8e:74:aa:82:d4:b8:
2a:e8:64:ed:b6:ad:2f:49:d3:7d:4a:53:51:7c:28:
db:a3:5c:a4:63:e0:fd:90:ca:20:58:b5:71:2f:bd:
70:1a:cb:67:ce:9a:05:b8:4b:13:3d:14:49:e2:9e:
a1:44:fe:b8:52:9a:8d:a4:f7:fe:bd:57:e8:15:3b:
f3:9f:b5:2c:76:80:ca:38:d7:9b:7f:ea:8a:46:07:
1d:44:24:31:a5:69:74:90:ba:1e:a8:c7:a1:35:e6:
ee:a9:b4:22:a0:9b:75:ac:82:f0:20:f1:82:1f:a5:
0f:be:18:84:f3:0f:f1:11:7a:22:19:d7:f9:de:36:
29:4d:3e:af:c7:73:40:8b:aa:ac:bd:80:5b:bd:6f:
ce:49:f2:dc:af:aa:fc:ff:34:44:28:e9:1f:55:78:
19:e8:75:22:e0:3a:ab:46:aa:a2:cc:df:5c:55:12:
0e:f1:a9:b2:81:f3:35:00:35:2b:fc:cd:48:cb:1d:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:C1:FC:C0:A7:C4:4D:C8:E8:C0:44:45:EE:9D:FC:62:A9:8C:C5
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:06:5d:9b:c4:ec:f1:39:9d:93:34:18:3f:9f:e4:f7:a7:5e:
93:4e:72:c9:5b:d2:ef:03:de:83:ca:82:f7:a6:9f:34:dd:9a:
74:b2:35:a8:86:9a:54:7b:31:09:4b:a0:4c:47:f6:93:0d:6a:
49:83:70:f2:3f:e5:aa:5c:ec:46:33:bd:01:1a:04:e8:9a:91:
ea:38:ac:1e:3f:4e:49:f8:12:5c:db:68:8d:0d:97:b4:ae:a0:
cd:ba:cd:83:e3:8a:d4:ae:bb:4e:a7:e6:63:ab:b1:d8:29:ee:
91:cb:c8:97:92:d6:eb:b5:d2:3c:77:78:00:3b:5a:e4:6a:50:
00:a0:1d:3a:de:0f:29:7f:f4:ae:54:b4:ce:85:b3:fd:a4:31:
9e:ab:3e:e5:06:0a:20:b5:53:e3:08:0f:21:15:36:8f:90:26:
37:b8:07:7f:e2:ff:60:ca:d1:ab:49:7d:b6:fa:27:7f:35:a0:
59:5d:5e:2e:c6:05:8f:6a:8a:76:16:06:6d:d5:6c:40:8f:43:
d9:ab:34:4e:43:d2:11:a6:06:5a:a1:db:db:ce:91:8c:60:58:
68:4b:6a:6e:2c:f3:c5:ac:39:33:6c:12:c0:9e:9a:9d:10:06:
c2:93:e7:1e:88:4b:89:6e:4d:95:09:59:ba:f3:e9:95:20:36:
e1:ce:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:18 2026 by rpki-client