Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File: Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier: Uz2+BRAPyqORZNZKjVA1TBS11403eTIi/+LSZDPjYqA=
Subject key identifier: 72:8B:DA:08:1B:C0:07:A3:66:FA:34:00:CB:09:73:EC:3A:37:96:5F
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial: 019CAC101CD9F005A7E2557431C1F31E36C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number: 0F2B
Signing time: Mon 02 Mar 2026 01:01:02 +0000
Manifest this update: Mon 02 Mar 2026 01:01:02 +0000
Manifest next update: Tue 03 Mar 2026 01:01:02 +0000
Files and hashes: 1: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (hash: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=)
2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: mP/k3sj/CUwonkeTUcToz87pnjwW9C4dIU2PS1ubeaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1c:d9:f0:05:a7:e2:55:74:31:c1:f3:1e:36:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Validity
Not Before: Mar 2 01:01:02 2026 GMT
Not After : Mar 3 01:01:02 2026 GMT
Subject: CN=728bda081bc007a366fa3400cb0973ec3a37965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:a8:24:3b:3c:bb:9b:9a:40:0d:d7:54:f2:
36:5a:46:e1:17:f4:67:cf:3f:94:8d:b5:0b:3c:88:
38:c9:d3:df:44:ba:71:90:93:6c:cd:a6:02:85:92:
3b:a4:91:f6:0c:0a:0c:53:62:6a:34:15:8b:92:2b:
80:d0:ae:23:83:c2:06:b8:0c:6a:5c:94:ad:3f:ad:
44:9b:50:04:2f:90:0e:67:93:e0:f7:f5:ce:16:31:
78:3c:95:d6:45:fb:57:5e:31:a8:9e:26:c4:87:5b:
eb:dc:a9:d0:90:22:49:71:d5:81:40:ab:f7:99:7a:
87:0a:a4:a5:e2:b1:b2:d3:52:7e:b0:46:ba:2a:0b:
e9:a2:3d:78:61:3f:4a:fa:eb:73:1c:4c:11:0f:9d:
6f:92:7d:fe:4b:b4:ca:5c:27:83:7b:4e:5a:11:b2:
68:58:e9:40:4b:21:cf:c1:d0:d2:fa:94:52:b2:08:
69:09:1a:a9:cf:8f:18:69:c4:70:bd:c5:fc:b6:cc:
1b:78:56:ee:f3:53:fd:9a:5f:42:02:bd:1b:6a:b1:
2d:79:4a:57:fe:d6:56:67:13:ce:e8:83:58:66:cc:
77:72:3c:c6:3b:ce:a6:27:52:60:be:4a:e5:cd:5c:
7f:ce:e7:66:fc:48:d2:b4:98:ad:68:0c:15:83:35:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:DA:08:1B:C0:07:A3:66:FA:34:00:CB:09:73:EC:3A:37:96:5F
X509v3 Authority Key Identifier:
keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:68:d3:bb:6e:ce:11:57:c4:48:61:76:58:3f:41:2f:13:d8:
01:ee:14:51:da:52:3e:49:9b:7f:50:45:48:9f:76:5e:ee:44:
b1:fc:37:d0:f1:f2:ac:04:5f:ad:18:0e:df:8e:65:5f:9c:59:
52:1a:ed:af:96:3a:54:35:ab:ad:86:f7:f7:54:91:17:5d:95:
80:64:5d:57:bb:19:29:c3:25:c2:ea:48:1d:6f:d7:47:c8:9f:
19:ba:f3:b6:b9:ce:7e:a6:a1:8a:00:4b:2b:26:e6:26:1e:38:
71:0a:bd:cb:0b:ec:d9:e9:74:cb:92:69:b4:ff:2d:09:7c:05:
ea:23:14:4e:f6:d2:47:a7:ee:2f:df:20:f2:ff:91:59:aa:1b:
d5:1b:39:74:fa:58:64:91:be:30:2a:49:0c:97:69:e6:1b:60:
70:ae:6a:7f:38:b8:50:95:86:44:7f:86:4f:3f:7f:05:d4:4f:
b9:bc:9c:12:cb:9c:96:7f:82:54:f0:5e:ea:dd:ba:54:0c:8a:
92:de:83:39:19:13:35:86:bb:ce:da:ee:6a:11:5a:5c:64:8c:
c7:e9:17:32:b4:ce:dd:ab:a0:a6:6e:6f:67:b8:f2:c7:1e:ed:
41:1c:f9:f5:f9:52:48:82:41:02:33:6c:2c:0e:b3:77:63:61:
9f:32:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:10 2026 by rpki-client