Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: 7THyVAB5SHNQ4W/SPkGJLqmt337uSwM6luKMVFB5ibs=
Subject key identifier: 11:04:45:FA:8A:A2:3D:CC:F3:CE:F8:1D:B2:5F:EA:5E:82:8C:3D:63
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 01A0E8891FC34EDAAF8656F1D6131DA82A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0EE3
Signing time: Mon 28 Sep 2026 15:01:35 +0000
Manifest this update: Mon 28 Sep 2026 15:01:35 +0000
Manifest next update: Tue 29 Sep 2026 15:01:35 +0000
Files and hashes: 1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: CDIb0QvDrRTBpUwYFKU4e7XrfnGdwrPNJb2XmRC3Yp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:1f:c3:4e:da:af:86:56:f1:d6:13:1d:a8:2a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Sep 28 15:01:35 2026 GMT
Not After : Sep 29 15:01:35 2026 GMT
Subject: CN=110445fa8aa23dccf3cef81db25fea5e828c3d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:6b:a4:9c:df:e8:4b:84:c1:b8:d4:ef:38:
66:c0:ac:6f:2c:e5:67:2c:f5:b8:89:15:34:09:c0:
26:83:38:b9:fe:c8:1f:d2:e0:48:40:a8:20:49:4c:
f6:4a:7a:01:91:a6:9b:4e:7a:7b:a8:14:c4:30:68:
05:f3:5e:79:2a:18:a2:85:18:df:96:97:71:4f:3a:
ac:cb:81:ee:22:c2:84:5b:58:91:29:c9:47:63:e0:
e6:2c:62:19:ab:ce:2b:8c:6a:03:75:3b:30:17:1c:
8a:22:d7:4c:34:76:d3:46:75:21:88:b7:2e:ff:34:
13:01:64:01:51:87:06:68:6a:63:02:fd:f7:c7:cf:
e0:5c:1c:88:32:ae:8a:09:da:c0:a4:83:7d:8a:b5:
21:30:db:eb:41:0d:ac:79:02:cd:70:29:43:0c:f8:
3e:22:71:c5:e8:98:3f:0b:b0:5a:85:85:f6:32:30:
61:29:91:1b:03:30:5c:92:c1:77:54:39:1e:9f:77:
18:5e:09:73:a4:c0:db:eb:76:a2:62:b6:05:ce:08:
b5:5d:eb:4c:b6:82:cf:d3:d1:a2:1e:3f:5c:d3:07:
a0:63:85:c8:9c:f2:c8:3e:66:f1:2a:19:6e:43:07:
ca:fb:8f:fd:8c:7f:57:f2:66:06:83:4d:c6:58:88:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:04:45:FA:8A:A2:3D:CC:F3:CE:F8:1D:B2:5F:EA:5E:82:8C:3D:63
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:d9:9c:b9:33:36:b1:a1:41:e3:ed:bb:6d:3f:df:ac:3d:
01:51:fe:e3:c6:68:9b:3e:89:ec:5d:0b:d3:74:30:70:ad:02:
eb:e5:df:c3:ee:5c:79:8b:06:74:4f:6c:8f:46:a5:0e:62:06:
c0:00:b4:f5:c0:6f:8a:fe:4f:0f:63:21:94:5e:50:bd:29:2c:
bd:41:c8:99:3a:6d:34:4d:2c:48:36:ff:de:d7:00:40:81:3d:
2e:99:a4:25:67:e9:f5:ed:5f:bf:9f:22:26:52:5c:7a:43:7e:
90:ba:7d:74:70:a2:8c:bc:3a:f4:7c:23:95:f9:13:de:bd:a2:
b3:26:f7:c4:df:e8:47:06:22:71:05:36:47:a7:0b:0c:4a:4e:
8a:c3:91:d7:74:d6:af:81:62:78:11:d6:dc:5b:06:df:f4:76:
75:60:80:8f:11:1e:4d:a0:e5:c6:08:92:51:52:b6:d0:67:23:
cd:a7:fd:b4:07:89:0d:22:b1:a4:8c:fa:42:32:cd:a3:3a:a2:
18:33:9e:b2:1b:5a:15:3a:20:9b:2b:3b:a5:6f:04:fb:14:40:
d4:ec:0a:7d:85:b3:04:c4:17:60:98:ed:87:e3:b6:40:b1:e8:
ca:f1:8f:a5:c5:82:66:25:c8:01:76:34:f6:d5:e9:8f:40:16:
3d:ab:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:02:44 2026 by rpki-client