Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier: SlRbKHnbApML4WB0rYCmcv1HG+lr2LlOr7Ai/huhJ0Y=
Subject key identifier: D2:FD:C4:4E:09:EC:AE:A6:B5:4E:27:1D:7C:2D:10:C4:84:1D:CF:54
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 019CAB33E7BBE55B269DC27BEF7725B2080A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:00:31 +0000
Manifest this update: Sun 01 Mar 2026 21:00:31 +0000
Manifest next update: Mon 02 Mar 2026 21:00:31 +0000
Files and hashes: 1: 2vg_kV-IwRmAxn8B26cLW4LkU0w.roa (hash: VDT6JmSN6c2xivEG5k5KapTeu18e10k6mZCk7l+NGZg=)
2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: 1OkbW3cZK0EKuHS3wyKdpdyTtxbRnEgCTEv1T70si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e7:bb:e5:5b:26:9d:c2:7b:ef:77:25:b2:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: Mar 1 21:00:31 2026 GMT
Not After : Mar 2 21:00:31 2026 GMT
Subject: CN=d2fdc44e09ecaea6b54e271d7c2d10c4841dcf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9c:b8:4a:d9:cb:7a:76:8e:1e:4b:97:f1:2b:
0b:e3:c3:66:d8:63:77:d1:90:64:04:48:d7:21:ca:
0f:ec:6d:9b:f1:16:9e:8a:71:18:c4:cf:ce:27:57:
44:4a:c2:85:51:12:1d:59:74:be:1e:b1:3e:50:74:
f2:b8:c2:90:df:9c:c4:fa:55:cf:65:b9:83:5c:16:
5b:07:f8:5b:c1:21:28:eb:01:d0:43:42:ad:e5:a8:
b1:1b:94:e0:ef:9a:30:de:44:21:24:d4:a0:ff:ab:
a1:5a:88:e4:6b:71:46:4b:11:75:2f:dd:98:95:97:
d7:72:06:96:3e:53:80:53:cc:94:93:98:25:c8:12:
bd:75:36:95:07:3c:c5:20:82:94:0e:c0:1e:bf:0b:
66:d2:36:42:69:75:be:3c:ec:86:4c:fe:f6:e6:1a:
7b:13:de:43:d3:82:a8:0d:ea:36:0a:5a:4c:37:20:
57:97:96:5d:3c:e4:d4:bf:db:f2:af:f9:77:3c:9b:
11:17:21:5e:4e:db:97:5a:2a:83:c2:e4:f9:53:ca:
c0:ba:15:a1:da:b7:8e:78:b2:28:de:91:23:22:07:
9c:e7:dd:71:24:06:0b:18:62:26:4c:c6:f8:2e:9e:
4b:16:af:14:e5:21:fd:4f:e5:03:5a:57:bc:21:b1:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:C4:4E:09:EC:AE:A6:B5:4E:27:1D:7C:2D:10:C4:84:1D:CF:54
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:45:21:41:a0:f6:46:74:77:c3:f9:b1:d0:91:52:bb:6b:
03:0d:49:dc:cc:a1:0c:03:91:f1:5b:91:8d:2d:b9:82:c0:96:
82:db:8e:47:84:c2:17:ac:1f:28:21:e6:56:c0:d0:24:89:75:
e1:e1:ed:7c:cd:8d:2b:9a:cc:26:d9:b6:d9:f7:26:e2:ba:d2:
c4:a8:91:bd:f2:a6:98:19:ae:34:da:a9:15:06:30:5d:15:ec:
37:77:6b:a4:90:23:0a:eb:e7:90:49:30:b7:67:93:ad:fc:6c:
9e:7c:f0:f5:27:10:c6:1f:ea:ea:cf:ac:3e:37:7b:d5:4e:30:
b8:af:e4:71:77:e8:47:bb:41:55:b0:de:cf:5d:6a:8d:70:3b:
cf:c7:80:df:d8:0b:8e:84:01:b2:a1:73:70:b7:f6:4d:cb:74:
d1:68:d1:96:ed:52:4b:60:af:5e:d9:55:28:59:c5:7e:c1:0b:
af:d5:73:e9:dd:77:31:22:e8:51:34:3f:00:2d:97:73:da:c9:
35:c6:7d:1a:87:49:eb:43:00:a9:44:4e:c3:fe:5b:bf:70:d3:
88:2c:7e:09:97:5e:06:2f:7c:c5:19:29:53:6a:bd:62:57:17:
7f:ff:00:7c:27:fe:00:1d:b2:ac:ed:6f:4f:e5:23:ff:b6:9c:
61:e0:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:57 2026 by rpki-client