Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: H8twbe5WjKik30EZrU0N4cQ7LQhtf2MEge/yRuq+y4M=
Subject key identifier: C1:0A:EC:D9:2C:62:CE:E4:58:C3:DF:D7:50:2F:7C:77:1D:16:AC:DB
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 019CAE35EAAF7948FA6CAE03DFD64552F413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0C07
Signing time: Mon 02 Mar 2026 11:01:34 +0000
Manifest this update: Mon 02 Mar 2026 11:01:34 +0000
Manifest next update: Tue 03 Mar 2026 11:01:34 +0000
Files and hashes: 1: VQhXdpnb-jTQY6PqAAihZNZwDw4.roa (hash: Q2jemjgfE2gR0vDgu/bUC/EL1Il/dNd22FjPO0/dvVY=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: VkTB9lMU7UERnGSfxJXuOClG1Il3qxbVUX+s1CDJwvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ea:af:79:48:fa:6c:ae:03:df:d6:45:52:f4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Mar 2 11:01:34 2026 GMT
Not After : Mar 3 11:01:34 2026 GMT
Subject: CN=c10aecd92c62cee458c3dfd7502f7c771d16acdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:7a:36:42:a0:c7:7f:91:78:45:da:cb:0b:
3c:33:3c:d1:1b:d5:04:34:a1:33:ad:5c:0a:67:4b:
d9:7f:38:08:b1:d2:12:66:68:08:7a:25:3a:e4:ca:
0b:95:41:af:8e:27:f8:0b:70:74:0a:67:e8:e2:54:
8f:45:91:f1:85:01:8e:0e:bb:a5:b5:eb:c1:b0:70:
f6:39:6d:b8:13:2f:54:65:dc:01:1e:b3:cc:3c:5d:
b0:15:51:87:c4:3b:61:e7:88:05:e2:48:51:90:b4:
b0:69:f8:13:a2:30:7b:39:3c:52:35:ab:4a:a2:19:
bf:b4:ae:59:fb:90:ff:9e:43:5e:eb:3c:53:f9:45:
ad:e2:0a:84:c2:61:cb:ba:0f:81:bd:96:0b:9b:b0:
02:92:51:0f:61:d5:e5:88:a5:62:65:2e:2d:d5:2e:
09:84:7c:e5:3c:5b:90:37:5c:8f:91:16:ab:a9:b5:
57:d3:b4:a0:73:f1:cd:73:46:a2:96:89:bd:70:21:
8f:f0:e8:3d:bb:af:c2:98:6a:e2:40:67:0e:8b:62:
95:04:ce:95:64:9d:ea:dd:95:13:18:0e:ed:e0:49:
d6:41:5a:06:e2:2b:25:2b:8b:48:0d:b9:22:95:75:
40:a8:a6:59:c6:e7:96:97:1c:d3:68:fd:ff:57:9a:
57:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:EC:D9:2C:62:CE:E4:58:C3:DF:D7:50:2F:7C:77:1D:16:AC:DB
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:ff:c5:c1:73:fc:e7:21:5e:7e:d1:0e:4c:03:a2:c1:c6:
01:23:99:33:a7:bf:3b:1b:a1:97:ea:d1:72:30:c8:f2:aa:0c:
41:a3:ab:f7:6b:25:f9:49:f0:c8:0c:56:3b:2e:50:d6:7a:20:
b0:27:27:b0:49:50:6b:4b:4e:df:ee:f3:57:17:1f:de:57:ac:
61:64:49:ea:cd:bd:bc:fa:2e:6c:04:df:3e:ac:ea:8a:3d:5c:
33:47:23:76:fb:6e:97:65:33:d1:ac:a9:a1:cb:18:90:d7:af:
d8:90:49:60:0a:2c:c6:67:60:31:67:58:44:68:be:f8:6d:2e:
a3:61:37:a8:8c:aa:25:f1:e8:8b:a8:e4:8b:8f:1b:4c:6f:47:
54:be:84:6a:76:b6:87:17:91:64:9f:5a:0b:1b:f0:0c:67:e6:
b7:bc:b8:c3:f7:b7:c8:41:5b:3a:2d:47:b1:74:3b:4e:9d:a9:
49:2b:83:b2:20:3d:ea:cf:5d:90:62:c2:df:25:c2:bb:b2:e3:
ad:52:e0:29:97:ea:f9:6d:ac:f2:d5:75:45:f4:f6:18:ea:15:
c1:b4:e3:2a:e4:5e:52:58:ab:a2:24:8b:40:c4:d7:1c:b8:07:
db:98:c9:8c:b1:45:30:80:3e:f9:99:7b:d6:8d:c8:d6:34:69:
60:3b:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:45 2026 by rpki-client