Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: 6ZBswU6F9iAs+lOki8vVl74a5nx3u8GzmGb0RuORX1w=
Subject key identifier: 57:17:5A:1D:4B:CD:25:5C:82:B1:7C:19:5C:0A:47:14:85:54:D9:72
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 019D38D3187273ADFAFBF70E26236F20E83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: 029C
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: zg6t9wG+AToxKs4zkude0KgRYklUz5moInw+Eleu4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:18:72:73:ad:fa:fb:f7:0e:26:23:6f:20:e8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=57175a1d4bcd255c82b17c195c0a47148554d972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:1a:60:f3:46:0d:5b:c2:67:19:28:a6:c3:
46:df:b8:a4:fb:a9:3e:16:fa:2c:55:da:18:e7:13:
09:86:1a:3e:cd:37:61:b3:0d:d0:09:12:3f:72:70:
05:46:f0:1d:e6:87:7a:30:e4:09:c8:ca:ef:18:e1:
3f:31:5f:4a:a2:1a:49:a4:b7:7c:35:97:c3:7c:64:
9c:8a:a2:80:90:58:21:5e:39:79:f6:85:f3:7d:53:
8e:db:c8:3a:07:02:8f:a0:02:e5:9b:23:86:f6:11:
d3:3c:49:1e:b3:c5:c7:8e:2a:0d:66:ee:04:3c:83:
91:12:6d:8b:97:44:11:3c:87:d9:2e:ba:12:64:d5:
1f:7b:14:36:5f:49:1b:74:2f:61:9e:93:0e:90:0b:
49:e3:b2:2d:6a:2b:aa:78:a7:95:76:88:ca:a3:69:
b2:56:21:cf:c1:aa:59:6c:24:6b:09:ec:bb:70:98:
11:7a:4f:50:db:f0:4f:b0:e0:01:00:ac:de:36:09:
c2:b5:7d:dc:e1:02:3c:c0:a3:ae:37:c8:9c:66:10:
07:8e:7d:b0:e8:f7:5a:03:69:fb:d9:5d:a2:0f:61:
38:69:07:99:0d:ec:ef:c6:bd:00:81:c1:1d:95:bb:
c5:20:f9:a3:e2:dd:85:16:0c:59:33:89:14:20:ce:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:5A:1D:4B:CD:25:5C:82:B1:7C:19:5C:0A:47:14:85:54:D9:72
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b7:1a:9f:a6:c9:46:58:90:8f:72:e8:91:2b:b6:9d:c9:1a:
e9:8b:42:c9:4a:d7:c5:9a:7f:61:7f:f7:fa:20:07:63:24:7a:
be:18:b2:60:23:44:d6:18:ee:04:b7:89:11:a3:7d:09:9c:e7:
49:0b:d3:01:a5:8f:7b:e7:e2:3a:99:23:35:e1:22:57:e3:ad:
23:2a:29:d3:28:c2:68:6e:3e:cb:aa:1b:07:3a:5d:35:fc:a5:
06:5e:bc:51:c6:f6:ba:4a:95:fb:24:78:4f:bb:40:d6:72:aa:
59:59:a5:81:3f:d8:d9:95:89:bb:a0:b8:ae:9a:78:34:29:b1:
28:f0:90:a8:99:89:5d:c4:99:a0:c0:aa:fe:b0:ea:69:35:df:
6f:bd:d5:b1:29:94:03:87:94:35:5c:6f:94:17:ce:0f:0a:4c:
31:69:1b:f7:cc:f5:2f:5b:7c:fe:d3:eb:8f:0e:53:d3:34:6d:
16:00:49:95:2c:ce:51:70:dc:08:85:c0:f9:1b:8a:a9:d5:bf:
fc:75:ee:bd:59:78:9a:59:1c:21:8c:44:56:77:93:d5:01:c4:
0a:8b:2b:06:c1:c9:f5:75:aa:60:93:a6:f6:f8:8b:77:6b:b2:
f7:e6:fa:22:75:ab:a4:d8:27:22:92:97:46:4a:eb:14:56:d9:
3e:0b:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:31 2026 by rpki-client