Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: rzCwyz70xv7TRLJj27KCyJ9rUCQXxwMWFCew9m4j+sY=
Subject key identifier: F6:DF:29:43:82:67:DE:19:E9:B8:E1:6A:AB:24:6A:C2:05:4E:58:B6
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 019CAD908D710D01FA2C43EB7EA52534E8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:00:57 +0000
Manifest this update: Mon 02 Mar 2026 08:00:57 +0000
Manifest next update: Tue 03 Mar 2026 08:00:57 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: dWrEUWBOHf0WBzYJMcUTEUguxQ8EclntR277af9LKy4=)
2: hjtitcU8d-FLJ62seFiGxMChEI0.roa (hash: zPnqOgCOOliYSlkJeU3JzTfIehQxkqyATNcPPm5JpBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8d:71:0d:01:fa:2c:43:eb:7e:a5:25:34:e8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: Mar 2 08:00:57 2026 GMT
Not After : Mar 3 08:00:57 2026 GMT
Subject: CN=f6df29438267de19e9b8e16aab246ac2054e58b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:cc:dd:84:62:46:38:0f:75:35:a5:76:1d:
92:c9:99:8b:a8:36:c6:9c:fb:cb:b2:cf:43:a6:7f:
f5:37:04:f9:fb:ef:2d:17:1d:b2:18:a4:71:98:9f:
c3:27:52:cb:e5:ff:43:61:0a:c2:b7:8a:72:3f:c7:
c6:c7:c9:dc:83:42:57:4a:bd:92:4a:9a:95:d2:a6:
ed:1b:3f:79:58:88:81:17:79:e5:4f:26:55:c3:09:
85:5b:78:f3:9f:37:15:53:bc:9d:78:1a:b6:bf:3e:
cb:02:a0:f2:eb:5f:fe:b2:26:d9:da:76:13:a9:0f:
ea:9c:6d:2a:fc:19:6c:b0:74:20:f2:cb:74:41:d1:
6c:c1:10:26:f1:80:d3:33:bc:79:64:04:a4:b1:64:
76:63:bb:09:b6:23:f8:18:48:f2:b2:18:30:02:6c:
53:28:3a:94:9d:8a:58:1d:45:a5:7a:30:e5:fc:ec:
5b:a8:19:8d:f6:cb:c2:58:e2:78:5f:29:7d:66:47:
f1:84:1d:6b:2d:08:5b:e9:65:58:6a:4f:8d:ae:1f:
41:35:71:57:40:ce:d4:5f:4b:2d:b7:f1:c3:12:e9:
82:16:b7:90:5a:01:c0:81:ab:42:ff:4c:a0:3f:92:
0a:f5:6b:04:c1:fc:86:06:28:6d:05:25:52:e3:f1:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:29:43:82:67:DE:19:E9:B8:E1:6A:AB:24:6A:C2:05:4E:58:B6
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2c:ac:4f:6d:5b:e9:cb:b6:3d:2e:aa:28:cb:b4:4c:61:52:
10:6e:6b:e5:5c:ea:b7:5e:71:72:e9:6b:cd:5d:e5:d2:12:d9:
0e:22:94:83:ec:af:ff:44:90:68:94:61:a9:e4:87:77:0c:ef:
70:83:b3:ba:03:56:fd:86:81:6f:68:0f:b9:8e:67:be:f5:e5:
2f:4c:7a:e4:65:13:1b:84:36:06:d5:4c:a6:b7:08:5d:db:3b:
ef:c9:5d:4e:65:fa:b9:e9:67:1b:ba:fb:63:1c:f6:3a:26:3a:
c2:4a:4a:df:15:26:47:8a:0a:b8:38:d2:e9:87:ca:eb:d3:4e:
fe:bf:d4:28:15:5c:43:89:cc:35:38:fb:04:80:15:65:11:fc:
d3:45:8b:9f:ab:32:7c:61:5e:62:44:d0:3e:5f:d9:bb:6b:fc:
39:6b:97:46:fe:a4:46:80:f1:1f:c9:67:3f:c0:2e:70:0f:b3:
3e:dd:00:c7:55:f8:c6:43:4f:09:eb:3d:79:74:ff:1c:73:2b:
3e:69:64:85:82:51:14:82:88:dd:99:3c:b5:ec:21:54:f8:4d:
67:41:17:06:ee:6d:da:5a:14:9f:25:a0:a3:e7:79:06:d7:90:
9d:dc:ce:ed:07:c6:d9:8e:e2:29:4c:ed:f7:de:40:5b:e0:bd:
73:b8:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:55 2026 by rpki-client