Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: Pk7Zd9h5I64bM1ttPIfmQH/REIqpmmhIuXFNCrTuQ8A=
Subject key identifier: 46:4A:1B:53:F5:E5:14:4F:85:76:C7:60:45:D2:91:47:C7:CC:03:CF
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 019CAC0FC922A3F1FBDFC2458BD695697745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 038D
Signing time: Mon 02 Mar 2026 01:00:41 +0000
Manifest this update: Mon 02 Mar 2026 01:00:41 +0000
Manifest next update: Tue 03 Mar 2026 01:00:41 +0000
Files and hashes: 1: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: 8p7/SioyEZA6xMdYWbv//A22DPmC/3SALMJITqhoyms=)
2: WBkR9Qa57mqvHG8BefanPj9alzU.roa (hash: uy29BjAYc/0v1azPlDiRGwrl2FpskxUKYywvVFsaLbc=)
3: nLo0-4jE7ZgwPj4hcv3ORJmB8F0.roa (hash: uJPbhLFOq6opwPhv4mwtt+uR1id/DX3SO2T7pIktgGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c9:22:a3:f1:fb:df:c2:45:8b:d6:95:69:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Mar 2 01:00:41 2026 GMT
Not After : Mar 3 01:00:41 2026 GMT
Subject: CN=464a1b53f5e5144f8576c76045d29147c7cc03cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:e2:3e:d8:80:71:90:f6:8e:b6:93:af:8f:
e9:ee:24:d8:07:df:4f:2a:bf:a9:f9:4e:fb:bd:16:
0a:eb:6d:d6:94:1d:6f:47:09:f0:7d:a7:f1:b2:23:
0a:81:f5:c6:d3:00:a4:e2:ec:49:31:c3:87:d3:62:
ac:0b:25:a0:18:3d:33:aa:73:46:9b:79:7e:97:29:
32:08:90:a0:b3:ec:ce:46:3b:48:72:cf:52:70:6c:
97:4f:87:36:2a:95:4c:74:1e:19:13:95:77:52:61:
17:d4:a4:02:b3:ab:5d:9b:f0:c4:0c:7b:9e:39:4c:
8b:0c:f7:52:03:2b:44:44:ca:69:80:89:1f:21:48:
5b:11:bf:3a:af:6c:e0:f3:9f:8c:80:f8:1e:6d:e2:
09:b2:01:e4:13:da:33:56:49:6e:6b:15:96:5a:23:
dd:58:34:a1:c3:06:05:29:4d:85:af:42:00:58:fa:
41:a2:84:be:61:62:7f:40:f2:c1:04:b3:d4:6f:cb:
0f:23:38:a0:99:00:d0:2a:46:f6:30:37:7f:2f:42:
05:b8:d1:c5:4e:11:ac:a8:17:e8:78:9f:b1:3c:32:
12:a1:7d:61:0c:60:5c:32:6f:54:48:05:1f:4e:05:
9c:50:73:c5:b0:58:5b:77:f4:99:3e:fd:62:61:d8:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:1B:53:F5:E5:14:4F:85:76:C7:60:45:D2:91:47:C7:CC:03:CF
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:93:7e:61:45:93:40:dc:ed:ba:81:6f:2e:8f:19:2e:08:54:
3f:f4:aa:f7:a0:90:f4:4e:b3:fe:93:2c:6c:a6:58:58:f9:64:
f0:3f:35:f5:b4:44:bc:63:04:6c:23:8b:ac:94:a7:6f:3f:fb:
0c:29:81:b7:35:9b:99:bd:c5:cf:b0:5b:52:f7:31:cd:96:ad:
76:21:d1:dc:11:de:7d:98:c8:84:ef:d2:d5:f7:e3:4a:cb:36:
20:a8:ee:f9:c4:40:e5:e9:ad:1b:d5:2a:57:11:19:7d:74:5a:
e4:92:6c:3e:b6:3f:42:83:24:66:48:d7:14:fa:e1:e3:3b:c8:
14:72:8b:47:85:a7:5a:d6:36:62:4c:89:9b:67:74:00:80:98:
39:78:21:e7:81:0e:c1:c5:3f:87:4c:dd:b7:56:dc:a1:d8:e6:
c7:49:eb:26:d2:31:3f:28:61:4d:31:80:1a:2e:0b:99:88:a5:
b5:d2:9b:07:ab:fe:d1:75:5d:5c:fd:17:ca:48:4f:68:00:0a:
30:17:40:df:51:d0:11:00:8c:cc:42:10:1d:c3:af:f6:b8:b7:
b5:98:5c:d8:29:7b:7c:10:0e:1d:06:af:a5:1e:b1:e8:e5:d3:
58:da:8e:af:4c:43:f2:27:6a:6d:32:75:9e:81:fe:82:4d:4a:
35:42:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:34 2026 by rpki-client