Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: 5GrIJyaXAQ5zah/B1jB8vwHlznEM+g0ft3mbsmQ09z0=
Subject key identifier: 70:28:5E:7F:32:02:4C:C5:58:C4:43:34:D2:74:F3:92:E1:A0:18:1A
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019CAC4715B677B054829BAE7948DBFAB61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:01:05 +0000
Manifest this update: Mon 02 Mar 2026 02:01:05 +0000
Manifest next update: Tue 03 Mar 2026 02:01:05 +0000
Files and hashes: 1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: aoRVtiKDmhklkLbiZDoROQaj9TXe16VuCTySXAYZoR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:15:b6:77:b0:54:82:9b:ae:79:48:db:fa:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Mar 2 02:01:05 2026 GMT
Not After : Mar 3 02:01:05 2026 GMT
Subject: CN=70285e7f32024cc558c44334d274f392e1a0181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:7f:6c:bf:ad:6b:4f:80:0d:8e:47:e4:38:
1a:08:a0:80:1a:fa:bf:dc:73:ed:df:87:86:98:1d:
d4:b8:3d:e4:e1:6a:24:53:38:61:1a:b2:c0:68:f2:
19:43:7d:bd:ec:18:b3:dc:59:4f:30:2f:3b:43:49:
9b:d9:4c:d8:3d:d3:1e:01:03:5b:ee:f9:c3:35:85:
9e:b9:7d:c7:43:9c:a5:ce:71:e6:59:9d:ad:21:af:
8b:c1:ec:cb:bf:98:28:fa:dc:4c:8f:ab:4d:fd:3d:
fa:d7:16:5f:be:66:0b:db:24:2b:61:18:34:bf:b9:
0f:94:ab:67:86:95:19:8a:dd:e4:62:27:51:81:71:
66:04:76:5f:16:32:8f:ad:56:61:ad:60:5d:5b:61:
df:27:ea:50:15:62:6c:40:34:df:31:41:2e:79:e1:
49:01:42:9a:53:41:24:4c:21:0e:8f:85:f9:e7:b5:
77:9f:d0:90:a2:fb:46:0e:cb:0d:43:23:c8:57:49:
73:64:c1:a4:06:27:d3:78:69:7c:ac:f6:b3:b6:18:
cf:b8:9c:c5:00:61:ee:f1:93:a9:4d:33:ea:98:1b:
11:12:3f:2d:22:6e:3e:0a:23:da:f0:a5:f2:4e:ad:
59:b9:00:98:dd:bd:ef:1d:4d:61:62:b2:6b:4b:fc:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:5E:7F:32:02:4C:C5:58:C4:43:34:D2:74:F3:92:E1:A0:18:1A
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:30:f4:5d:fe:41:bf:30:ea:a3:7f:eb:63:0b:a9:b8:13:88:
fe:4d:04:cb:19:8c:24:70:3c:27:9e:09:35:31:dd:a4:95:4f:
a5:1b:48:2c:a1:0b:5f:92:af:89:30:69:23:be:99:97:f9:ba:
b5:fe:34:b0:20:2a:7c:c0:fa:a2:a7:62:24:5b:18:3f:0b:c4:
40:a2:90:00:69:93:78:c6:93:78:20:09:bd:ac:0b:a7:89:9b:
62:44:54:e0:df:f2:ac:8b:80:ea:4d:35:1e:29:e8:0d:db:91:
6f:16:ad:ab:6b:0b:ca:5d:c5:6a:a1:c0:6a:13:e5:39:00:2f:
da:70:a3:08:b0:24:19:06:6a:43:df:fe:d3:a2:d1:ee:67:9e:
ff:d6:6b:4d:ce:6f:09:c0:16:87:5a:d5:cf:b5:94:81:f5:5e:
a4:c4:cc:a7:e2:05:98:60:57:f8:b5:3b:41:ce:de:fb:90:64:
4a:b3:7b:5d:fc:a7:8d:95:da:d5:56:16:e0:bd:41:b4:ce:ec:
ad:a0:24:f4:97:c1:48:6c:99:b2:04:67:01:8b:50:b5:17:17:
72:a3:fe:d4:2f:c2:96:0b:15:18:19:82:b8:e4:44:da:b7:59:
cf:70:c7:34:4a:b6:df:d8:53:2e:12:14:05:a7:6b:e5:21:b6:
af:f6:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:20 2026 by rpki-client