Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: ciaBTd9LKRSBJKSY9kEuMYEwddWl/pHOj1eBBm6XWQo=
Subject key identifier: DA:27:9B:F3:C2:C1:BA:5A:2D:F6:3A:ED:E5:56:96:DD:40:35:B2:76
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019CAD2255A2F6262ECCA156CC7CB1AA9656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 03CC
Signing time: Mon 02 Mar 2026 06:00:34 +0000
Manifest this update: Mon 02 Mar 2026 06:00:34 +0000
Manifest next update: Tue 03 Mar 2026 06:00:34 +0000
Files and hashes: 1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: 7yHniCp2IIGMqNV4CNtwpf2p3AaNCnFZm4N/fxh5vxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:55:a2:f6:26:2e:cc:a1:56:cc:7c:b1:aa:96:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Mar 2 06:00:34 2026 GMT
Not After : Mar 3 06:00:34 2026 GMT
Subject: CN=da279bf3c2c1ba5a2df63aede55696dd4035b276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:d0:50:94:8e:c8:e8:22:6b:1a:47:ab:ca:
4d:cc:6a:11:13:0d:3c:3b:d0:26:16:c3:4b:7f:a1:
36:33:09:5b:e1:8b:e9:d8:5b:cc:44:dc:a1:8d:ef:
fc:83:81:2d:ec:96:30:fe:ea:8d:c0:7c:25:ed:57:
f0:56:94:05:90:77:9f:81:22:55:73:88:c0:c0:08:
c1:e2:67:cb:b9:ed:ff:94:c6:6b:b5:74:a9:a8:11:
76:2c:22:d4:64:10:52:70:9d:b7:64:f9:85:db:6b:
3c:f3:2a:14:45:f8:ce:25:b1:11:b2:97:33:5f:d9:
47:08:e8:b0:e2:2b:a1:d4:98:26:30:bd:af:3f:73:
f8:c3:8c:dc:2d:ca:3d:05:0f:e9:6d:1b:6c:95:1a:
3d:09:d3:e4:03:17:ee:08:42:99:eb:2a:02:3a:22:
fc:5e:8d:28:bd:9b:9a:69:cf:fc:88:b8:7c:aa:d5:
a1:b9:b4:81:e2:f3:a4:a1:5a:b0:59:00:59:03:ce:
f0:13:19:c2:1d:3c:0a:b0:25:1c:71:98:aa:e9:30:
7f:9f:3c:4a:b1:77:6d:18:37:32:82:a5:17:3d:aa:
67:ad:4f:6a:55:e6:07:f9:e7:2d:cd:60:3b:dc:b4:
64:b8:77:a1:8e:9d:15:c7:6a:2f:6f:80:cf:29:94:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:9B:F3:C2:C1:BA:5A:2D:F6:3A:ED:E5:56:96:DD:40:35:B2:76
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3d:56:0d:11:d1:fe:9b:61:32:7d:a1:fa:73:65:36:ad:f8:
4d:44:c2:8f:f4:08:77:9e:54:df:d8:9e:b8:c6:3f:64:64:87:
25:5c:b5:b2:c9:d6:44:06:d2:4c:56:e0:ae:10:dd:dc:86:c9:
c2:c2:09:79:b5:00:85:8f:81:e4:cb:64:ce:34:1a:11:1c:ee:
5d:3f:1b:ac:09:44:3b:40:f0:4f:e6:0f:3d:3c:40:4b:dd:5e:
ac:d5:4b:6b:f0:87:23:87:a1:09:43:86:94:95:45:6e:c2:c2:
0f:f0:87:d1:5b:62:ca:93:95:04:a6:a7:03:9b:2c:68:79:6e:
15:27:68:16:cc:87:db:f1:2b:5f:e3:d9:92:92:b9:d0:31:16:
79:ae:39:f5:a2:f4:3b:87:cc:bd:7f:01:02:b7:c3:3f:9b:b8:
5e:46:77:49:81:fb:df:fe:d0:fc:f2:a2:23:46:60:34:af:df:
36:a0:ea:85:df:f9:7f:fc:8a:0c:8f:cf:ac:e3:ea:5e:37:10:
e4:64:70:fc:47:15:7f:9b:24:ab:17:24:70:10:54:1d:ff:d6:
3c:08:56:db:40:3e:d4:36:64:3e:d1:d1:8a:5a:ad:07:16:88:
f6:c4:db:f9:32:a2:24:69:64:cd:d7:1b:3b:45:6d:0f:65:2f:
73:26:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:00 2026 by rpki-client