Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: 1DEb82giilE8FIpDf44AItna0IGHAqVGWjVm2z3S+6w=
Subject key identifier: 91:6F:30:DB:51:AF:83:06:C8:1C:7A:D7:84:CF:C0:D4:61:56:24:4B
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 019CAB340CF36311FA2D1749559B7120433C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0CB1
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: L5AG/1OSpzVnwLVubc7eXpa5DI8k+BrxIQ9jZCN2ELU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0c:f3:63:11:fa:2d:17:49:55:9b:71:20:43:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=916f30db51af8306c81c7ad784cfc0d46156244b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:9f:88:bb:c8:a6:30:cd:78:9b:60:0e:c2:
ca:33:87:04:9e:08:1a:95:f4:72:4c:8a:70:24:33:
bb:66:d7:1e:ba:c6:d0:12:7d:b5:5f:3c:97:7a:2a:
30:8f:ba:5d:38:96:cc:64:13:b2:fe:da:75:a0:00:
20:3a:ff:91:74:1e:64:74:03:48:ca:06:4a:98:40:
4a:06:0c:2f:72:93:74:c0:3e:a7:53:84:e5:b5:e8:
4b:a4:4f:d2:22:8c:2d:ec:98:d6:ab:48:63:4c:29:
e2:3f:1f:6a:73:39:60:76:ea:ef:83:9b:6e:54:58:
ad:e4:cf:3a:bf:a1:13:70:94:e4:0b:32:b1:69:7e:
c5:5e:5e:7f:82:62:a5:d5:33:82:7f:e9:e7:96:31:
81:8f:2e:e8:a4:d4:a1:21:6a:e7:b7:bd:55:10:57:
0d:9f:b8:e1:b3:33:a2:a5:3e:77:97:bb:17:d9:dc:
e4:23:34:47:5b:85:d3:8a:fc:4e:22:b2:8d:2c:f2:
4e:79:3c:bc:56:e3:11:e0:f1:43:14:b4:db:23:fa:
ca:a5:6b:9d:89:25:cf:9f:75:63:b1:dd:f0:55:08:
c4:df:c0:1e:4b:a3:5f:6d:91:ff:5a:2a:d6:47:6d:
72:00:9c:37:28:d2:e5:0d:93:df:33:a2:33:05:26:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:30:DB:51:AF:83:06:C8:1C:7A:D7:84:CF:C0:D4:61:56:24:4B
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4d:c1:7e:a7:67:37:92:4b:a8:d1:c4:b7:9c:86:c4:e1:e3:
4a:90:fd:42:65:81:82:37:48:1c:17:9e:ed:34:be:cc:a5:5a:
29:3b:4e:f7:f3:ea:2a:01:05:0a:b0:c6:d6:71:01:f7:ba:48:
9b:3c:c0:05:aa:e8:5c:ec:88:17:09:2a:cd:f4:69:c2:08:e0:
a5:4a:05:e9:95:2f:c0:ae:7f:13:8c:d6:b0:85:eb:45:09:97:
2c:46:e3:7e:c5:02:00:0d:61:7d:4b:1a:1b:5d:77:13:2e:c8:
4e:c7:87:33:8e:3d:98:eb:91:e1:ec:dc:35:de:fc:38:50:21:
7d:c7:68:bd:c9:77:21:36:6a:5c:cf:e0:53:a3:57:83:c7:7e:
e0:5d:c5:44:0f:86:6c:a5:a1:33:41:43:17:0c:5b:30:9f:58:
b1:c6:89:c7:5b:62:20:2d:d3:aa:c8:8e:d1:0f:33:6c:d9:55:
76:84:5d:96:17:cd:63:bd:02:f9:b5:c0:93:cd:f0:51:a9:8d:
71:53:44:03:be:0a:5c:66:2c:7f:29:e8:42:fb:00:8a:93:66:
cd:d0:07:49:94:77:06:03:64:03:d0:1d:0b:c0:24:dd:d8:df:
e8:85:3c:b8:ea:f5:18:b1:bc:01:e7:33:9f:e9:91:a2:61:49:
39:67:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:59 2026 by rpki-client