Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: 3isU4DkOkAti1f4gVbCiK6K74os+n3yCtDbu3LzLnLk=
Subject key identifier: B2:71:66:49:30:FE:24:1F:47:41:EA:DE:8E:0C:F4:9B:9B:FC:04:4B
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019CA9EA7DA1B80BEB5A5316BAC3B047C9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:00:42 +0000
Manifest this update: Sun 01 Mar 2026 15:00:42 +0000
Manifest next update: Mon 02 Mar 2026 15:00:42 +0000
Files and hashes: 1: KryCaxT64_DbJj9jN-VGjBxwrAo.roa (hash: Tm0gGiIBbT70VOlPTXJPfE+loxLa156dIkZIGPLoeOg=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: HsYNI9yyfJCrlPcCRFOL0Ll7fR1LnzBRNKr5lM2imEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:7d:a1:b8:0b:eb:5a:53:16:ba:c3:b0:47:c9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Mar 1 15:00:42 2026 GMT
Not After : Mar 2 15:00:42 2026 GMT
Subject: CN=b271664930fe241f4741eade8e0cf49b9bfc044b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:f3:b1:6f:3f:b0:50:a0:e1:23:77:d4:e3:
52:53:d6:4e:64:e3:32:47:bf:55:6c:37:40:bd:48:
00:76:8c:dc:ed:7b:61:33:b5:d4:b6:21:e0:06:e3:
fe:f4:a9:26:03:70:6c:cb:91:b8:76:19:88:14:7b:
9f:b7:1c:25:be:e6:0f:e2:d3:a7:85:7a:7a:58:b7:
0d:9d:b5:ed:6b:3f:e3:0d:da:5b:28:ca:60:3b:e1:
34:ce:32:9b:bd:d9:e8:0a:eb:06:be:fc:a2:ac:1d:
49:bf:82:d2:9c:70:67:94:49:b3:15:4b:ef:0c:1b:
a8:e9:e9:9c:e6:79:ab:0a:df:49:fe:8c:2b:bc:89:
65:75:94:a7:7f:a6:27:22:3a:94:8f:83:e7:44:7c:
6e:e3:b9:d4:d2:2d:a3:9e:fa:68:86:fd:6a:07:66:
c7:90:9c:f7:70:1f:ed:fb:32:90:6d:b9:b3:c5:59:
d1:2f:c3:f0:48:21:20:66:a5:c6:f1:61:39:81:33:
0c:d6:86:8d:a5:59:43:87:2c:0f:32:4a:60:c6:db:
2f:d5:d8:f4:74:04:fa:c3:cf:0d:9e:04:18:d2:81:
f8:4d:37:6d:ca:0e:4d:2f:b5:16:ad:c8:dc:e9:fc:
99:9a:d6:ba:48:e0:72:cd:ef:3c:00:f0:60:22:85:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:71:66:49:30:FE:24:1F:47:41:EA:DE:8E:0C:F4:9B:9B:FC:04:4B
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:59:4d:d0:2c:0c:d7:91:e3:e9:90:fe:a5:9c:4d:94:5d:04:
2c:c1:57:44:de:51:5c:1f:db:9f:e1:b9:eb:5e:67:f1:50:91:
e9:f7:e1:7b:63:3f:14:bc:8f:47:75:cd:cb:5c:a3:21:4d:28:
fa:a5:e3:23:bc:d6:4d:88:71:9d:a1:0e:0e:b2:b5:9c:4a:77:
62:77:5a:9c:f9:d1:ae:1c:1d:99:53:1d:2a:0e:ac:48:b5:3f:
c5:f3:f6:87:d6:53:50:8a:69:ad:5a:f3:06:5b:42:04:8c:ca:
bb:82:c9:16:b0:c4:9c:37:9e:98:7e:ee:8e:67:50:00:8b:9d:
f8:f1:d5:35:46:0a:e0:85:81:96:3e:8e:94:ee:d7:0a:01:9d:
60:4d:2d:fd:36:d7:eb:4d:10:6f:40:95:59:ea:9a:09:f3:23:
a3:c4:d5:65:4b:44:e2:de:35:ff:29:e2:d6:94:eb:33:ea:b3:
ce:42:81:f7:40:d4:a9:05:b7:44:b0:86:9b:89:16:a1:ce:d1:
d7:35:f8:37:ce:8d:ca:6f:03:64:83:54:7e:71:af:67:76:a9:
55:a5:e3:da:be:44:98:45:ca:ff:b4:d8:15:43:ef:d1:ca:a1:
3b:8c:0b:f1:bd:b5:43:4f:54:88:35:34:05:be:5c:e5:ae:11:
f4:c1:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:59 2026 by rpki-client