Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: c2BN+RTaYyi0QwsFjjRzI8QPRtp+XMpJ/k1gYAGYbcc=
Subject key identifier: 75:2E:D4:FA:45:F5:96:C6:71:23:3C:39:EC:5D:44:25:77:24:91:ED
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 019CAD2267BA839E81E9605DA47C8795B5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:39 +0000
Manifest this update: Mon 02 Mar 2026 06:00:39 +0000
Manifest next update: Tue 03 Mar 2026 06:00:39 +0000
Files and hashes: 1: 9q8SdW4K_Qfg_qhjmay8aSi22H8.roa (hash: Ep0bFnw6XVVIIq0VGt/sxRJ3Mflsj+GO7Wgmc5rKidw=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: YWFgWyjFbGfL9wQl/uvPTSNJZEERmNHQ9FjcZjZ4kB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:67:ba:83:9e:81:e9:60:5d:a4:7c:87:95:b5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Mar 2 06:00:39 2026 GMT
Not After : Mar 3 06:00:39 2026 GMT
Subject: CN=752ed4fa45f596c671233c39ec5d4425772491ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f7:04:b1:06:d0:df:18:e4:2d:03:16:3a:42:
db:05:8c:2c:e9:5d:a1:cd:50:cc:a9:92:5c:95:7e:
6c:4d:ff:d8:18:50:13:9b:1c:64:43:f0:28:11:e9:
00:5a:86:3d:18:01:d9:b8:9e:63:7f:06:c9:e1:15:
56:46:13:78:fe:7c:a5:30:62:f4:b1:be:38:0c:62:
cf:32:3b:8e:d6:d4:b8:e5:a6:27:32:ae:28:d1:51:
f7:be:1f:e5:dd:b9:7d:cc:9b:01:62:e2:9d:5f:24:
8b:d8:f1:05:f6:e2:f0:8b:ae:68:b6:1c:d7:7c:8f:
18:55:93:e2:22:dc:80:f2:30:62:39:5f:6e:95:cf:
a1:19:66:e8:09:71:f6:cf:6f:7c:27:78:a0:c5:dd:
ad:8f:d1:18:fb:0c:34:88:d7:2e:13:e8:83:7d:fb:
28:22:c2:24:1c:89:10:f6:8b:ae:6a:ac:8d:0d:9c:
45:31:99:e2:fd:89:dc:bb:ba:ee:c2:82:39:3d:7a:
9a:f7:da:1a:4e:31:b6:ba:a5:ae:3c:8c:a7:5f:61:
3e:4f:fc:3f:19:29:fe:d6:e5:d0:16:91:1a:ca:bf:
f7:13:89:ec:57:81:27:0b:83:c2:9d:97:62:be:c3:
59:a3:51:df:30:94:47:3d:3b:38:76:de:99:e1:93:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:D4:FA:45:F5:96:C6:71:23:3C:39:EC:5D:44:25:77:24:91:ED
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5c:49:00:18:9a:b5:0e:60:e9:c0:17:1c:33:8f:16:ce:9a:
78:c8:b5:db:d4:5c:ea:b0:74:cb:d0:16:39:f5:cf:03:0d:f8:
54:2e:27:51:f5:27:47:d1:a6:99:dc:27:fd:c5:8c:15:da:34:
23:64:d0:f7:dc:c2:76:c5:22:1a:bb:59:9e:39:0b:ef:12:39:
d0:42:d7:2a:d9:76:c5:b9:1a:99:78:f1:ac:a1:ba:2b:57:e7:
c6:a6:55:45:6d:97:e7:c7:a5:4e:be:5c:20:4e:35:a1:9e:2f:
89:30:64:03:55:ba:34:41:9e:69:22:fa:d6:3c:63:08:1b:28:
57:a3:08:ca:9b:b8:fb:65:47:04:ec:26:7a:29:b2:6a:f7:6e:
4a:d1:e9:07:42:73:15:8e:8b:70:4f:04:66:dc:bb:db:fb:b2:
0c:16:30:57:5d:48:9d:18:7d:4d:70:10:d4:30:8e:79:a9:bb:
ae:86:b2:d2:ef:57:a0:de:32:1b:93:c0:0c:33:2c:d3:01:b0:
38:3e:74:18:81:cf:1b:75:3c:85:9c:b2:fe:08:74:53:19:0a:
59:be:76:50:b9:aa:54:4b:02:74:ae:78:fb:14:66:64:3a:54:
7c:95:d7:92:7d:8f:53:11:3e:a1:34:92:2a:55:d0:20:7e:be:
fb:b7:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:37 2026 by rpki-client