Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: aCghq6C4P7w6E1Iah1/l2nn7Jv7AGPhSH3wPZ1LVoRQ=
Subject key identifier: 7B:CC:99:DD:72:10:65:3B:AD:98:B3:32:98:CF:8E:A4:C8:9B:5D:0D
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 019CABDA0A0E49209BE034FF98F563448565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 082B
Signing time: Mon 02 Mar 2026 00:01:59 +0000
Manifest this update: Mon 02 Mar 2026 00:01:59 +0000
Manifest next update: Tue 03 Mar 2026 00:01:59 +0000
Files and hashes: 1: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: MEHcjhQLwxOJMvPZB/UqOLYAZpEPNJiYIlkowMGnWRs=)
2: oog2fr3azEwEvR96dUyVexH-pPI.roa (hash: 5Y/z/o0CKihXpA4MvidWc/Ioyt/faMA9m4DgHjwqJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:0a:0e:49:20:9b:e0:34:ff:98:f5:63:44:85:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Mar 2 00:01:59 2026 GMT
Not After : Mar 3 00:01:59 2026 GMT
Subject: CN=7bcc99dd7210653bad98b33298cf8ea4c89b5d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:69:4d:5b:80:a1:d6:06:6d:a4:e3:89:0e:0b:
b0:03:a3:66:56:de:04:16:6f:de:98:71:02:eb:51:
f2:66:42:00:ec:59:4c:f6:28:cc:c3:67:23:d1:d7:
1d:e1:41:e6:c6:73:7b:98:b6:75:f9:98:18:f7:66:
75:22:38:1a:8e:ca:50:35:76:47:18:5a:e5:a5:5f:
a3:b8:49:ad:6b:bc:56:94:46:dd:f1:c1:50:6d:05:
66:97:e3:85:7e:47:6f:4b:63:60:86:f9:5b:73:d8:
27:af:ab:e2:a2:cc:86:2a:a0:9b:bf:f8:de:9a:e4:
60:d4:2d:6c:ef:d4:45:fe:74:14:a2:6b:96:be:b1:
32:0b:af:c1:36:94:b7:7f:41:6b:13:5b:d8:a7:45:
98:aa:5b:a8:29:71:13:4d:4b:2e:1a:95:ad:68:77:
e8:a9:f2:af:a3:83:f3:54:53:f0:4d:32:19:a2:09:
c3:22:a1:d3:17:98:9a:02:1a:6a:32:ff:53:04:e6:
bc:f6:9d:55:14:95:36:82:0b:bb:34:8e:6f:07:5f:
2a:36:a5:2f:b7:eb:80:c2:74:05:4b:06:06:c8:af:
e5:36:52:bd:b9:14:81:d6:e7:2a:70:e4:72:2d:ba:
8d:61:ad:0c:22:b1:78:ca:09:1d:16:b1:3a:35:da:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:99:DD:72:10:65:3B:AD:98:B3:32:98:CF:8E:A4:C8:9B:5D:0D
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:bb:95:07:1a:ac:9e:28:43:ab:20:d3:47:76:83:1a:3b:
ad:3d:87:ad:3f:bb:b1:15:7b:b0:05:52:a3:1a:ff:c9:d6:66:
5a:13:9d:ac:7a:9c:6e:ad:e7:63:31:50:d6:8e:ab:5c:32:ae:
ce:d0:4e:9a:db:79:de:18:4c:bc:ab:c3:70:1a:35:20:fa:84:
a3:ee:54:58:a2:ea:6a:4c:2d:20:ec:9b:67:0f:50:f4:7e:fc:
9f:43:61:b6:3f:19:64:4f:67:0d:f4:c8:da:c1:6f:13:24:d9:
da:36:dc:20:a5:92:e8:31:3c:2c:bc:fa:b8:32:f9:c6:eb:e6:
bf:2b:3a:d0:2c:45:b1:f4:03:01:52:c1:54:7c:0d:62:f8:b8:
16:1f:0d:af:24:78:b4:66:6e:9e:a7:53:22:16:51:c3:d6:c0:
7d:5e:72:b0:b9:5d:90:2c:ab:98:2d:ef:ee:ca:76:84:ea:8f:
4e:54:ee:2f:4f:32:8c:32:91:38:90:da:ee:b2:7f:d5:31:cf:
5e:30:d0:72:1a:32:a7:73:bc:21:4b:86:a8:1c:f7:56:52:f1:
25:af:69:8e:a4:09:3b:a4:8c:00:5f:58:e0:af:61:d2:cb:95:
05:3b:e4:8f:95:55:20:79:65:43:3d:99:1c:81:1f:3d:5b:3b:
c1:9e:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:51 2026 by rpki-client