Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier: j1lLVFtnaImu/VAlzOAAEjjfjARN/I6mmC9psFXht5M=
Subject key identifier: 10:E4:FA:26:E4:08:14:6C:FC:47:07:C9:1E:25:78:CC:6A:63:06:C6
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial: 019CAB6B5316DDEDED09F407A8741381F313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:03 +0000
Manifest this update: Sun 01 Mar 2026 22:01:03 +0000
Manifest next update: Mon 02 Mar 2026 22:01:03 +0000
Files and hashes: 1: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: vxbwcKiW1+RU6A4IzBR2iGi/vEbszg7Yn+SYM4fuY3Q=)
2: iU8buUitA6QcqdqbYKXA_ah66tM.roa (hash: SmpXABX0CgD3QwC0/HSkGjGaO3ioZWYOFJbOjTKYwlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:53:16:dd:ed:ed:09:f4:07:a8:74:13:81:f3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Validity
Not Before: Mar 1 22:01:03 2026 GMT
Not After : Mar 2 22:01:03 2026 GMT
Subject: CN=10e4fa26e408146cfc4707c91e2578cc6a6306c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:2d:a5:db:02:16:95:f5:ed:5f:6a:6c:af:
93:91:49:48:a4:a1:84:f0:d1:8c:a2:d6:2c:86:4e:
ff:30:c7:33:7f:74:67:a2:c9:8f:b9:c5:6c:3f:f7:
fc:b7:d2:2c:84:63:65:e6:58:15:b2:cc:ac:95:9a:
29:ea:fa:24:07:66:4b:48:1f:35:20:81:08:75:93:
12:67:c1:0f:09:10:ff:46:a0:73:63:ec:78:ab:54:
b0:b9:44:16:1f:db:ff:f1:80:16:1d:f4:16:f5:d4:
d6:68:e7:d6:09:c0:cb:34:9c:1a:e8:82:e4:96:ec:
b9:48:b4:52:63:30:42:6e:a8:f5:13:77:0c:8c:6d:
21:dc:b3:f9:62:a4:06:b0:dd:7e:01:d3:59:16:1b:
c8:20:28:60:8a:63:3b:0e:41:9e:93:02:17:91:c1:
1e:41:3f:81:75:a1:97:17:2b:14:92:93:61:fd:b8:
fc:cd:8b:cc:cc:a8:1e:77:f1:a2:26:0e:a8:61:50:
a3:1f:1f:73:cd:fc:41:d7:5e:12:a7:f3:74:36:2c:
53:9d:01:e9:11:50:82:8a:a0:3a:dc:81:9c:a7:33:
8f:a8:30:90:7e:45:28:49:aa:2f:46:54:91:3a:8d:
3c:a5:ea:0b:39:6f:f4:d8:e5:08:41:dd:0e:4a:12:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:FA:26:E4:08:14:6C:FC:47:07:C9:1E:25:78:CC:6A:63:06:C6
X509v3 Authority Key Identifier:
keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ad:f5:ff:19:6d:eb:8d:47:19:21:57:9d:2c:c8:47:51:1e:
4b:d9:65:9d:7f:23:72:d4:a3:0d:17:d3:2d:2b:fd:82:c2:85:
ea:a2:b8:85:83:42:d7:4b:d6:c5:bb:65:25:a9:1e:96:80:06:
5c:b2:8e:7c:5d:d8:28:ce:b1:01:c4:6a:0a:33:d8:ff:e7:95:
c8:7d:9a:92:5a:c6:72:2c:af:a6:cc:ad:66:ba:d4:7d:9d:25:
01:22:5e:69:34:f5:80:36:03:9e:3b:f3:af:db:e8:2a:8e:85:
56:f8:af:c6:db:cc:26:16:50:ff:99:61:ae:d4:59:db:98:29:
ec:0b:32:84:b1:ed:a1:07:b5:67:58:27:44:8b:f9:62:c1:40:
f9:26:6c:d4:65:e8:6c:c5:a4:ae:14:4f:9e:50:e8:ee:e7:63:
bb:60:81:fe:42:1a:8b:12:2a:60:92:1d:ea:41:6b:98:0a:46:
7a:b3:ae:d4:bd:c7:ee:44:67:72:60:1c:7c:c5:af:31:b8:2d:
b5:1b:53:ed:24:a7:35:df:b9:81:22:de:70:fb:44:de:10:c5:
d1:7b:2c:6f:1f:fa:72:ee:a8:fa:40:7a:7f:98:24:9e:34:43:
6f:c7:c9:da:76:4b:69:5d:1d:d8:e5:d0:c1:46:bd:1d:d1:1c:
b1:0f:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:02 2026 by rpki-client