Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File: _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier: 1NpbzKOoF3DlJShwB7rXTjguGCjDTmGgCbKz5YQiv9Q=
Subject key identifier: 4C:C1:0D:31:DF:7B:CD:96:DF:6B:B0:C0:32:B2:67:E5:50:03:9C:06
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 019CAD59429A0F863B64BD6BEC317E7459C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number: 168E
Signing time: Mon 02 Mar 2026 07:00:33 +0000
Manifest this update: Mon 02 Mar 2026 07:00:33 +0000
Manifest next update: Tue 03 Mar 2026 07:00:33 +0000
Files and hashes: 1: 8huTzHW57A5cCLn4DJengqWUHbU.roa (hash: QbaePOyAbanHl8XCDKIaOAWESWKmtviz49Mi0ZJ8gU8=)
2: _6DXV1WE0v-oybUplKLLF-qO42Q.roa (hash: Iu/YSu6oOqTfa7ZyhKaNhQqb474GLyUXE1gWIy1f6g4=)
3: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: Tynfj8PSllmoLewf8ZyZozwrrRgUe1AXR7UOQAhC3p8=)
4: cnRs0nFBKnPSwQ1F-1xOIce5la0.roa (hash: OKJospeoF5ncHQtQYt7c9nFDBBSFOmh/9wk/WbCnrEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:42:9a:0f:86:3b:64:bd:6b:ec:31:7e:74:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Mar 2 07:00:33 2026 GMT
Not After : Mar 3 07:00:33 2026 GMT
Subject: CN=4cc10d31df7bcd96df6bb0c032b267e550039c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:76:79:77:c0:27:9d:b4:f8:fa:14:98:e9:
7d:4f:34:aa:ad:59:50:2d:0b:7b:c6:77:e6:41:0b:
a6:c7:55:fa:86:6b:e5:d9:dd:49:f7:c0:47:72:e5:
09:63:b8:47:1f:d4:e4:ce:e6:7d:d5:10:27:95:35:
5f:56:a5:a9:88:78:cb:92:57:0c:5e:90:a4:76:28:
41:37:73:ed:8a:0b:fe:be:5d:7d:71:0e:30:e6:ce:
35:c8:50:02:b0:e8:3c:cf:f1:89:9a:9a:b2:86:15:
a9:a1:e9:93:5b:00:31:f2:79:d7:16:b8:73:29:2d:
f1:94:38:10:29:4e:39:2b:b5:9b:ad:0b:60:90:24:
67:bc:4e:17:64:ab:96:07:da:21:b9:e6:a0:ad:5a:
07:6e:14:39:d8:67:75:e5:5e:2f:d2:09:7a:c4:ee:
2e:9e:13:ac:c4:2e:d8:46:1c:fd:6a:57:f7:47:d9:
4d:c8:08:31:b1:b7:6d:0c:00:e4:f0:6b:88:19:4d:
12:de:b7:e1:76:46:2f:fb:11:f2:da:8a:61:0d:6b:
da:b2:64:5a:35:d8:8b:be:c6:fd:70:5f:53:38:10:
24:2e:1c:3b:fd:1c:28:d0:26:8e:35:4f:77:61:55:
2d:cf:bc:3e:49:9c:91:80:43:ca:7b:0b:de:c3:9f:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:0D:31:DF:7B:CD:96:DF:6B:B0:C0:32:B2:67:E5:50:03:9C:06
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:33:76:34:4f:ee:6c:56:9a:c3:cc:99:1e:d2:2c:8b:78:
2a:54:01:d3:65:1a:7a:4b:4f:90:eb:1c:36:8a:7f:e1:42:ea:
24:79:1a:a3:68:35:66:83:9d:a6:1c:3c:4d:7a:e0:01:7a:32:
2b:62:aa:a8:d9:01:1e:c9:6e:0d:19:fa:cc:4a:c3:62:2b:d7:
f7:33:11:05:e1:49:42:b4:a0:c4:8c:34:6d:95:f2:c7:0a:7f:
49:9c:22:e7:72:a9:8f:68:fd:0e:f4:6b:b2:a5:1a:34:0a:7d:
71:50:43:fe:c6:db:98:7b:c1:9b:ff:f1:dc:6a:e5:63:7b:d1:
5d:2d:a8:c6:68:34:3e:c4:e1:33:17:83:98:66:c2:eb:88:dc:
cb:8e:46:a1:c5:ea:a0:ca:c9:27:74:ef:d1:14:d3:2a:e0:cf:
b3:e8:94:05:da:96:83:45:73:53:27:15:83:14:90:8f:cc:82:
98:20:28:ca:3c:e3:3d:7b:34:11:46:9b:37:8e:5f:1a:ac:d6:
fd:49:d7:33:04:46:b9:bd:83:f0:c6:17:bd:29:75:be:cc:46:
6a:c7:22:48:56:ef:f5:b3:47:90:3d:6d:ec:af:09:b6:cd:a3:
27:ee:4b:dd:76:11:5c:d8:41:ea:9b:4b:54:73:b8:0b:5c:c2:
b2:53:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:31 2026 by rpki-client