Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
File: w6nl9TVmI-HCjy22k-BfxtYEzIE.mft (raw, json)
Hash identifier: +aum66WYORJvZ/0qQEs1Xv7J1u4LGlr8yVqBQiUhlZY=
Subject key identifier: 2F:6A:E2:1F:5D:D6:79:9B:5D:C8:FB:1C:BE:72:14:6A:D7:15:45:32
Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
Certificate issuer: /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Certificate serial: 019D394123FB632E6AE2CA13B8C53DAB2AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
Manifest number: 031D
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: fn3HOo_U6W-uyb_sVDaw80g9NWw.roa (hash: KohlmxQcnzVQ7W+fN1Bvmm7TWy0M44hbYWotd1ZSBtg=)
2: w6nl9TVmI-HCjy22k-BfxtYEzIE.crl (hash: uJYXUhpTSOw/k5rW3UI7K0GiFAk/emnID0Qua7M3R88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:23:fb:63:2e:6a:e2:ca:13:b8:c5:3d:ab:2a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=2f6ae21f5dd6799b5dc8fb1cbe72146ad7154532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:16:af:e1:ad:98:b1:5e:f2:2c:31:4e:2e:
60:44:12:ca:55:ee:41:42:dc:3e:e4:50:74:71:54:
f9:47:30:e9:68:72:1e:e3:03:ca:f8:a6:38:de:dd:
a4:7a:61:7e:4a:21:a5:35:b1:6b:26:68:c6:e9:b0:
d4:e8:66:09:38:0e:ad:34:06:bd:04:07:21:1b:30:
24:62:7b:4e:d6:fd:0d:a1:75:66:ba:4a:ec:2f:39:
55:87:7b:db:b8:f1:b8:27:6b:ec:50:f8:ed:0b:56:
70:4b:6d:e0:8d:c6:2c:2b:b8:47:58:6f:3c:8e:f6:
6a:28:59:5f:2f:52:80:3d:77:97:da:d4:9c:26:5c:
95:9d:33:81:f9:d2:8d:2d:d0:d7:af:63:16:16:d5:
dd:88:2b:b4:3e:37:ab:dd:73:b5:e2:ed:71:eb:65:
3f:f4:c7:4e:7a:03:39:27:12:96:46:d7:76:e7:33:
07:f1:1a:08:2e:b0:a2:bc:d6:19:97:14:ad:ba:43:
57:d6:f8:f2:6e:93:ef:9c:db:4e:3e:e1:d2:ba:bd:
55:cc:e8:4b:8b:47:88:e8:4c:a4:dd:de:37:4c:fe:
68:cb:0b:79:c6:6f:69:ee:e7:28:3b:e0:b2:f2:4a:
45:12:02:f2:91:fd:2a:cf:26:ea:77:7d:35:2e:fb:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6A:E2:1F:5D:D6:79:9B:5D:C8:FB:1C:BE:72:14:6A:D7:15:45:32
X509v3 Authority Key Identifier:
keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:22:8f:c5:c2:75:48:3a:4b:7f:4c:5c:4c:9d:5d:98:b2:
26:24:18:9e:1a:42:07:e5:d4:52:a3:e6:88:52:51:22:f7:72:
67:f1:a6:99:68:d0:44:ec:f5:86:02:41:97:57:c4:79:47:7c:
63:c0:e0:85:c5:0f:6b:c0:5e:1d:ea:ca:bf:e3:e5:6b:5f:7a:
5e:d3:cb:d5:6f:15:ad:3b:08:42:4c:ab:19:79:2d:80:41:9f:
7b:bf:5f:3d:65:b8:b9:7c:b8:2d:ac:97:b3:1d:f3:62:58:67:
fb:33:e4:a5:63:8b:b3:4b:4e:d2:39:2e:72:f8:9f:1f:44:64:
53:8b:57:da:3d:80:6d:eb:d6:4e:96:d4:90:fc:9f:05:af:bd:
9c:57:9f:26:02:82:39:39:60:9a:a5:c7:42:a0:93:c4:6c:ad:
0b:be:63:5b:21:1d:fa:9d:2e:21:0e:30:cb:80:06:48:aa:e4:
de:c0:9d:a5:6e:b5:57:66:c2:13:3b:d6:d4:a1:29:98:e4:47:
ca:66:17:34:d6:18:91:a0:81:38:05:a6:22:37:01:4a:36:ea:
9d:73:ae:9d:b7:c4:09:f0:48:fd:e0:ea:45:39:86:99:7d:46:
9b:70:de:2c:9b:98:ff:f8:2b:3e:eb:14:76:91:c2:8c:ff:47:
ca:2d:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:49 2026 by rpki-client