Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: 8Etm7yuHtvT9N/EIJEAlUZo7Ii+I+XD7XRv4XSJSkbo=
Subject key identifier: EC:3A:63:52:33:15:33:58:B6:85:89:38:7B:ED:F9:F6:2A:AE:95:E0
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 019D389C53329AF133DF00060EC9FEC75215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 0AF9
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: _rghgGhHIYbLY2yOEoA9mmW7wqg.roa (hash: LafLigZh1QXUn5FQibqQ6Xl17st+BespqipLbfL+dgY=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: S66yyN61VhQMdqiVaF4XOf5aewCsWSSgOTqjO01uMJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:53:32:9a:f1:33:df:00:06:0e:c9:fe:c7:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=ec3a635233153358b68589387bedf9f62aae95e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:10:4d:47:52:8b:1e:cf:24:57:2a:aa:9a:
f9:bc:79:5b:96:26:a7:3b:5b:5a:f9:d7:e9:80:1a:
d1:11:55:cc:09:92:61:33:5d:92:1a:85:c7:a0:95:
d1:dc:23:99:46:97:94:67:c7:90:7b:74:0b:4e:6d:
53:f1:c0:f7:80:ea:87:af:e9:63:7a:33:46:87:fa:
81:f6:ba:d6:d3:db:ea:ea:1d:16:2e:27:81:49:3a:
f4:85:96:52:99:c6:85:d6:63:d2:b8:23:3f:f0:11:
3b:92:3f:2b:37:b9:47:83:45:8e:14:58:f4:0e:1f:
8f:4a:5f:de:88:4c:d8:48:bd:57:96:c2:44:71:d9:
51:81:45:92:a0:d8:eb:35:14:6a:58:99:ef:36:37:
d7:4b:25:68:f5:16:17:96:3e:85:ba:a3:1a:71:d3:
fc:83:c3:8a:4b:1c:15:3b:4d:2b:a6:21:43:bf:59:
cf:94:64:8b:c5:dd:8c:e0:26:25:24:e5:39:76:a0:
49:88:a7:b6:9b:0b:ee:47:7a:2b:5f:48:22:e4:e8:
0b:f2:5d:1c:2a:6f:93:b6:d8:e3:ea:4a:38:24:7f:
ba:47:f0:c7:78:82:96:b8:50:aa:11:05:4a:31:12:
bd:bc:e6:b3:a9:e4:f7:cc:66:ac:4d:d7:ad:57:6e:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:63:52:33:15:33:58:B6:85:89:38:7B:ED:F9:F6:2A:AE:95:E0
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:20:9c:6b:01:89:bc:c2:44:dc:6b:91:b4:9c:b2:85:9a:
36:4f:b1:55:3d:67:46:39:de:ab:ce:a0:ff:c5:2b:57:4c:4e:
95:61:a4:4a:92:24:84:80:ea:6d:99:dd:fa:54:99:64:ec:8a:
57:2c:e8:ab:20:03:15:bb:e8:bd:f4:d2:d7:4e:34:7d:db:3d:
bd:98:02:c2:de:0b:6f:0c:9b:5b:6f:9e:2d:e8:47:5e:57:36:
76:d0:e7:fd:e7:55:cd:58:53:2a:73:c6:06:f6:36:02:25:82:
14:54:e9:7d:5b:23:0b:b1:82:cc:79:ba:5f:de:85:93:5c:6c:
41:84:95:27:74:70:9b:d5:62:3b:25:9d:0f:14:27:47:4d:7e:
ea:61:5e:7d:c0:97:14:16:55:77:79:29:86:5b:7d:a5:3f:eb:
d9:4f:c3:d7:fe:03:a0:3c:b8:f0:6b:a4:d7:8e:35:9f:a2:2e:
a5:a6:28:27:26:7f:79:19:99:16:61:d8:22:5b:47:f7:75:26:
dc:2d:4f:4c:3f:fe:d0:8d:71:c6:71:da:36:cd:73:0a:33:d3:
1f:22:95:e5:75:90:c8:8b:cd:47:ce:e3:d7:8f:fa:d8:12:80:
77:08:fe:56:a6:4a:ba:f0:1e:fd:76:74:67:7d:0f:3d:8e:b0:
6e:42:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:47 2026 by rpki-client