Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: s5gv3dbtkGKmTiHw8qI4bNtRcyXohGQs3MwyfEFOrus=
Subject key identifier: 5B:FB:BD:DC:88:40:F1:BF:80:05:7C:1B:BD:CE:FB:BA:17:86:D7:47
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 019D9BBF0FD8EDCEA085CFE45D58B4A7C5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0C82
Signing time: Fri 17 Apr 2026 14:01:22 +0000
Manifest this update: Fri 17 Apr 2026 14:01:22 +0000
Manifest next update: Sat 18 Apr 2026 14:01:22 +0000
Files and hashes: 1: VQhXdpnb-jTQY6PqAAihZNZwDw4.roa (hash: Q2jemjgfE2gR0vDgu/bUC/EL1Il/dNd22FjPO0/dvVY=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: fc3HSa+tAFJkiR03OAgB13Ju8FR05yjCGUf73r+jJ2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:0f:d8:ed:ce:a0:85:cf:e4:5d:58:b4:a7:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Apr 17 14:01:22 2026 GMT
Not After : Apr 18 14:01:22 2026 GMT
Subject: CN=5bfbbddc8840f1bf80057c1bbdcefbba1786d747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:78:ef:65:64:10:d6:de:55:c3:b4:bd:72:
10:8a:46:aa:ad:b0:83:82:a0:45:ff:17:6e:19:9c:
b3:d6:e9:01:39:6e:fe:8c:7a:22:e1:a5:05:ce:bd:
0a:61:db:5f:20:58:58:89:f2:20:2c:58:53:b8:8b:
39:76:88:a6:df:52:63:81:c9:5c:b8:07:0b:6d:94:
f6:14:1d:0c:ec:05:3d:7e:a6:fb:ca:da:c4:8b:9d:
ff:0a:26:68:c3:26:dc:f4:f6:2d:be:c0:ca:7d:7e:
81:cf:f8:7a:d3:03:6d:dc:b8:44:f4:89:19:64:c8:
48:a6:eb:ff:6c:3b:e2:fc:22:42:aa:0a:f3:ba:ba:
da:ad:99:22:6b:2a:cf:a4:c6:42:8c:05:e5:4b:f1:
2c:2d:2e:6b:29:71:69:f3:b7:f6:d7:0b:0d:ea:ec:
37:96:3e:1e:83:45:43:cd:61:f8:cc:19:bf:29:da:
c2:ef:9c:c5:2a:df:3f:ca:da:fd:e0:2d:dc:de:3e:
da:cf:3d:24:66:4d:e3:52:35:ba:c8:2e:a2:7b:6b:
24:30:2e:b7:c1:93:0f:a5:1d:0d:8f:17:8e:0e:f2:
1a:a6:7d:14:81:7b:13:55:5b:5f:b5:5b:da:ac:9f:
12:2e:c8:fd:2d:5c:22:bc:a1:78:d5:f1:16:1c:e6:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:BD:DC:88:40:F1:BF:80:05:7C:1B:BD:CE:FB:BA:17:86:D7:47
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:22:bf:bd:91:0c:1f:81:f8:5e:e3:11:3f:33:f4:dd:4a:39:
33:9a:fd:2e:40:4c:0a:a4:36:5c:fc:e7:1c:f5:b9:53:32:e2:
a8:3e:c1:65:c1:57:cd:43:ac:3d:a1:cc:81:fa:46:10:e1:18:
66:ba:e3:7c:dc:48:05:8f:5b:86:f9:70:15:02:32:ef:3e:dc:
b1:8d:7d:e7:4d:8b:46:5a:8b:38:e0:17:20:f8:2b:e0:34:b6:
7a:e8:ff:c3:45:7e:2f:e6:59:e5:0d:18:a8:f2:92:a5:25:99:
17:e5:4b:9a:23:c7:5f:50:08:76:b5:74:fc:6b:f7:45:8f:a1:
71:95:94:74:9e:e8:c8:69:a3:52:24:5d:ee:5f:8f:86:de:ea:
9b:58:6e:4a:57:a3:33:d2:2f:72:81:80:81:01:d0:c5:13:87:
28:c8:9d:78:92:08:54:b6:08:94:af:1b:27:52:58:9d:9a:f7:
63:13:cb:45:09:af:69:15:2d:cf:93:6f:c5:92:c3:89:37:b2:
da:48:03:f1:5b:3f:04:93:20:4c:99:be:f0:47:db:6e:13:10:
10:f9:12:1f:4c:92:c2:b8:e0:ac:e9:d3:d6:e5:2a:93:b3:73:
06:ae:b1:c2:5b:35:71:3e:56:ca:a4:a9:86:40:a8:b2:59:f1:
f7:40:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:25 2026 by rpki-client