Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: qaLzWP7gisn1TJXXSqBe+84Uid6zVFJTyzYWbJY90ks=
Subject key identifier: 18:62:B0:5A:35:0C:D5:95:7F:11:6A:8A:3E:9B:1B:4F:97:5A:D6:9E
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019CAB346E8720FDE4A048E42EB3DC825485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0B69
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: Is/Yw7uJOuirwT8aywjVbqKl9dA3KRQtdJnf8bKkuls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6e:87:20:fd:e4:a0:48:e4:2e:b3:dc:82:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=1862b05a350cd5957f116a8a3e9b1b4f975ad69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:60:e4:28:5e:44:25:10:35:d9:01:bd:e0:
8a:d4:c3:d6:b3:94:37:1f:70:b0:59:8c:f8:9a:29:
8b:75:0c:e2:c6:fb:93:b0:65:0f:b0:40:7c:7a:49:
8f:b0:c5:c5:86:7f:ba:3c:c6:b0:1f:f0:e0:12:12:
4f:2b:0f:6c:4e:c8:d0:30:da:7f:19:6e:20:f6:d1:
f1:87:9a:4d:32:86:be:fd:e4:72:e9:6c:a8:0c:ea:
76:10:09:7a:f4:d1:cf:39:81:46:4c:85:d3:3f:7e:
64:f4:0c:79:81:0b:2b:1b:e1:db:41:94:a0:53:6f:
01:10:13:22:30:00:6a:d3:98:20:77:20:83:1a:0f:
be:1e:23:ad:d6:7d:86:d2:fd:32:ee:47:94:82:5b:
7a:e7:dc:63:97:2c:d0:87:87:63:4e:c1:2b:96:25:
47:e9:dc:60:35:54:94:f9:07:99:66:4e:da:4b:26:
89:14:da:2b:66:9a:61:00:f1:1a:30:4d:8b:dc:a8:
fa:b9:66:fa:db:a5:e5:85:ed:f7:9f:0d:22:74:9f:
51:9a:56:9e:da:8f:65:bd:17:e3:94:5a:b4:2f:1d:
a9:cb:c2:2d:e9:47:8d:55:82:ff:bc:f6:21:aa:2f:
41:ca:f4:c7:1a:30:79:9a:d3:bb:94:1c:4d:02:28:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:B0:5A:35:0C:D5:95:7F:11:6A:8A:3E:9B:1B:4F:97:5A:D6:9E
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e9:62:46:39:dd:b6:88:09:65:05:7f:06:c6:d8:a4:ee:fe:
a3:c5:4c:b0:84:8a:8e:4b:9c:ae:fd:b9:33:46:62:61:3f:e3:
36:7a:8f:e4:a5:19:50:31:3a:cf:4e:6f:f8:83:bb:9e:fb:f8:
a2:d9:60:aa:ac:af:0f:7e:ea:f1:fc:8d:bb:17:e7:34:b9:35:
e2:ba:a2:38:3f:92:67:d7:30:9f:22:df:11:e8:7b:49:67:e4:
3a:7d:64:4d:43:b3:2c:3a:b3:a0:44:22:81:fe:83:fc:62:ee:
93:a7:a4:73:9f:43:4c:ac:ca:bc:45:0a:4a:13:5d:0e:ef:b9:
f7:27:e1:b1:b2:5b:fd:4f:ac:2c:97:e4:a3:6a:a5:0c:c2:a1:
fd:2a:51:22:a6:ea:30:30:05:c6:0d:44:8a:f6:51:e3:dc:27:
c5:d8:89:f1:b6:8e:1d:08:d0:9d:bc:d9:e9:02:9b:de:72:54:
3e:6a:e6:a0:8c:52:b7:52:a2:6b:37:bd:cb:35:93:fa:6d:c7:
bb:bb:09:53:20:86:45:df:de:cf:c9:cf:c2:b1:63:d0:06:ec:
7d:0c:87:13:b1:e6:20:e6:d6:c9:8a:11:38:ab:dd:00:72:ed:
1c:a5:f6:63:28:f8:2b:02:d8:38:2c:40:8b:cf:99:e2:24:6e:
50:52:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:28 2026 by rpki-client