Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: PQ2MfQg9eS53S4cTZpy7p5THLSGDGGp/sXp2y2wBAKg=
Subject key identifier: C4:3F:DD:00:67:EA:95:B4:5D:34:76:42:DF:CA:D6:36:68:87:E0:B4
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019CAD5949DA8733465E37EE997AB60D609C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 0723
Signing time: Mon 02 Mar 2026 07:00:35 +0000
Manifest this update: Mon 02 Mar 2026 07:00:35 +0000
Manifest next update: Tue 03 Mar 2026 07:00:35 +0000
Files and hashes: 1: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: ysy2tJc/0WLvg/IdYJsLxgj58cGysRybmxeP+a/r/xA=)
2: vlUmsnf6hFJJ_ExSqkIBAJq54y0.roa (hash: Lg+/aX3TWQ0Z5VlbPaXH4EbEoo4bdOS3f3c2Bb0++BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:49:da:87:33:46:5e:37:ee:99:7a:b6:0d:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Mar 2 07:00:35 2026 GMT
Not After : Mar 3 07:00:35 2026 GMT
Subject: CN=c43fdd0067ea95b45d347642dfcad6366887e0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:6d:35:36:ed:98:2d:22:81:c6:c7:70:13:
13:c1:a7:ff:24:38:a3:1b:e1:47:c0:1a:dc:6e:df:
5b:ba:b5:cb:a8:3d:55:4e:ca:cc:73:4a:24:b8:05:
f0:fd:2b:58:34:91:cd:c1:38:ab:66:71:2f:89:29:
fa:df:d4:21:c9:01:95:40:45:b2:82:cc:51:da:6e:
61:b8:08:60:d3:9b:cd:d6:34:6f:01:98:32:1c:6c:
b9:43:4e:1c:1d:fc:a1:05:9e:f3:99:89:36:9a:48:
01:de:4c:bd:76:4d:75:91:fa:9f:0d:28:13:d9:b6:
14:93:54:ac:d4:71:45:42:d5:16:fc:d4:cb:08:21:
2f:d2:cd:b7:2b:f4:1a:0c:55:43:e6:3c:29:f9:43:
a2:ad:20:49:88:e2:ad:cc:99:b5:38:9c:d6:58:86:
a2:a4:2e:f2:0c:8c:12:31:f2:ff:c4:6a:e4:61:d9:
b9:e0:70:05:dc:d0:8a:6b:dd:60:a9:a8:28:ae:ea:
e2:17:71:1b:68:a7:29:56:b6:bf:1f:00:05:50:b3:
a8:c5:e8:53:0d:d5:73:f9:2b:e8:ad:e2:67:b6:99:
02:a5:8c:3f:e0:01:db:7c:b6:51:f0:a3:6e:22:a0:
ed:68:03:48:0d:7e:3a:87:14:50:48:2b:67:95:9d:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3F:DD:00:67:EA:95:B4:5D:34:76:42:DF:CA:D6:36:68:87:E0:B4
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:32:be:8c:74:4d:ea:af:ae:ec:d0:64:3b:2e:6c:b7:8e:
b6:31:f1:47:a4:83:e6:a1:99:67:b2:d4:ae:49:95:50:73:23:
80:98:17:4e:02:11:35:ee:b5:bf:bf:dd:d8:00:8d:05:b9:e3:
19:39:de:9e:06:2b:e9:8e:48:ec:0d:3c:46:64:b8:49:ce:f1:
d9:0d:17:d0:9c:a0:4e:03:30:de:6b:37:2a:53:a7:b4:17:ea:
c6:82:3e:ee:ad:2b:c2:6b:6e:2a:f5:56:5c:f2:63:3c:b8:9b:
06:8e:73:42:aa:69:4b:a3:3b:1c:a8:01:30:48:c6:f9:d2:eb:
44:f5:31:e6:11:ef:fe:fc:e0:7d:dd:fb:22:b4:98:14:ae:14:
53:f5:07:f4:a6:92:6a:48:d0:c0:d9:c8:80:06:b0:37:81:a2:
98:55:8f:dd:1d:d9:38:26:54:29:06:7e:90:a5:1e:52:8c:5e:
ac:b0:9f:1a:2d:85:33:9e:cf:50:24:71:7e:47:b9:19:3d:64:
a3:1a:c2:23:2d:9d:b0:a5:0e:f6:6f:88:4d:fb:80:79:56:1c:
d4:cb:c9:fc:50:5b:0a:58:a8:0b:e6:b5:f5:33:b1:8f:86:38:
19:36:fa:8f:11:7a:1e:be:0b:32:51:d3:a0:79:eb:a3:18:ee:
ef:4a:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:26 2026 by rpki-client