Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: b3Sab9pYX+e30tWskUAkbr47J9TmW/6mZaABiSzPRYc=
Subject key identifier: 3A:59:45:56:27:C4:41:50:0F:AB:DC:62:21:35:FB:19:9B:F6:15:78
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 019D98BDDBFA15C7A3A57C36B3418BAD6818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0D2C
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: 7zl86EpGAOlxD7lJHXGamBvrrI36Qfms4gadWwMs6bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:db:fa:15:c7:a3:a5:7c:36:b3:41:8b:ad:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=3a59455627c441500fabdc622135fb199bf61578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:db:97:92:9d:6f:50:4d:5f:7a:a5:87:94:
39:10:5d:6f:49:9c:31:39:5b:ba:df:cd:ee:b9:21:
59:93:67:69:27:d3:fd:b4:1b:57:a0:46:b3:80:1e:
6a:76:0a:ae:53:c9:c9:27:d6:a1:da:e6:3e:c1:55:
83:64:2e:b2:89:27:38:44:d5:98:e2:9f:0e:55:9e:
5b:ea:03:82:2b:3b:be:ec:3e:94:ff:8e:b7:00:7d:
1f:c8:88:55:4b:dd:83:9e:99:c3:bf:28:90:cb:88:
70:ee:dc:88:10:50:bc:77:16:9b:5b:8f:71:75:ea:
2c:43:01:de:03:37:09:fa:e9:07:ec:03:d7:79:c7:
1a:cb:23:41:31:f4:f7:06:28:93:5f:dc:d7:19:89:
02:fb:73:f7:44:98:f8:17:3e:d5:54:bc:1a:6a:9c:
70:99:cf:cc:7e:af:d2:93:59:22:e0:e3:73:fb:d3:
8a:04:b8:7b:f9:53:1e:58:1d:22:be:38:76:fe:36:
2a:1e:eb:15:7e:87:0b:84:48:e6:b3:f5:8d:3f:eb:
46:76:77:6b:be:aa:58:90:19:2e:1a:72:9f:76:80:
94:b7:44:8f:42:8c:af:f9:7f:8c:fd:21:7d:75:dd:
fd:f2:82:6c:6c:54:34:22:fa:20:52:53:e3:97:4e:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:45:56:27:C4:41:50:0F:AB:DC:62:21:35:FB:19:9B:F6:15:78
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:15:cf:32:4d:d8:38:3f:de:c1:ee:ae:9e:dd:32:7a:2d:d1:
18:76:be:6d:57:0f:4a:0d:aa:99:36:03:51:f7:ed:57:c1:e7:
c1:a3:fc:70:99:91:da:fa:23:5f:6e:a5:49:8b:c7:13:14:cb:
91:fe:c3:7c:99:df:ed:ec:f6:66:20:da:d8:2b:23:f2:b2:b4:
1b:0b:a8:54:e7:d9:a1:f8:41:4d:9b:8b:1c:15:98:17:ec:c5:
be:69:e3:b0:01:f5:c1:23:f0:ab:ed:34:05:70:83:0d:71:a7:
dc:02:1e:88:e3:72:8c:f3:58:19:34:da:b3:ed:96:75:8a:de:
b8:7d:9c:4c:9a:af:bc:9e:5a:e7:d4:da:a6:90:b0:f9:46:e0:
7c:86:db:f5:01:a8:d3:bb:9d:66:fe:5d:d6:be:75:fd:e8:e3:
de:c8:26:13:f4:d1:d0:b2:5f:75:1d:70:b2:71:2e:bc:b4:26:
a7:e5:f8:44:19:56:fd:84:73:64:b7:e3:76:22:82:d7:a3:db:
c6:c5:70:b6:fb:c2:0f:37:67:98:23:1c:5e:ce:d2:76:9e:31:
e6:2b:02:13:3a:ab:72:f8:2f:f3:1d:8b:88:60:46:2d:c7:5d:
a2:c9:ae:db:fa:11:3e:87:a9:9a:30:91:7f:c8:d3:51:93:fe:
4c:a1:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:27 2026 by rpki-client