Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: wy2ATlJuEWxV7mzSaRP7O4Ih+aujy7ib+9RzEnmhqIc=
Subject key identifier: 3E:8B:4A:4E:91:D4:22:E8:6F:03:FA:C3:6B:AD:BA:9D:C8:69:D4:86
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 019D3977A126E6420104526FBBF6A83958F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0B07
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: 78kqC8j6LoRWjdngK7kKihALOYk.roa (hash: 7AMmVdZKov3gEwV1YiogGxz3l6UvzVaoKb5Zky6YO88=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: hYk5omFA4QSTG3cS8FMmeoxwaO+FjV22ekyA6G4pBp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a1:26:e6:42:01:04:52:6f:bb:f6:a8:39:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=3e8b4a4e91d422e86f03fac36badba9dc869d486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:9f:08:7c:13:7b:a4:f7:4a:47:c5:8f:7c:
01:81:8c:d8:4e:3e:97:98:a9:06:8e:a8:fc:1c:2d:
09:99:aa:07:af:21:3a:af:37:51:18:af:e0:55:55:
6a:3e:5a:e0:e5:8b:14:5d:c4:c9:bf:c4:fd:4a:7b:
96:88:97:64:1b:99:68:af:c1:73:d8:31:96:76:c0:
c8:66:e4:a2:86:6e:6e:13:46:a4:4f:6e:ed:cb:2e:
5e:87:f3:29:3b:6f:a9:90:d4:c0:38:8d:fb:bc:8e:
e3:a4:7f:df:95:f4:0a:6b:87:08:97:02:72:22:a1:
0d:01:2e:ac:f7:2c:05:2d:ea:21:5d:02:f7:79:b7:
70:bf:08:f7:75:5a:12:06:95:ee:8a:91:3c:52:d8:
f1:fe:ab:2e:7b:36:04:c1:97:cc:3e:01:d9:e9:4d:
68:3c:0a:4e:e2:0d:9b:5e:f3:d7:ae:3a:ff:38:d0:
ef:b1:a4:d6:19:a4:09:22:ad:50:84:ab:64:a8:23:
df:39:9c:0d:b8:4f:8c:11:4b:b8:00:16:75:53:28:
64:7b:94:db:fd:1f:27:5c:03:3e:22:2e:29:eb:95:
c7:7e:ad:fc:5e:30:a1:2d:9e:d7:30:7e:c9:07:c0:
fd:7a:83:6d:ed:00:24:d7:6f:d5:89:36:97:33:ec:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8B:4A:4E:91:D4:22:E8:6F:03:FA:C3:6B:AD:BA:9D:C8:69:D4:86
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:32:45:10:79:ff:16:89:51:5f:79:46:c3:54:e4:c0:8b:98:
73:b9:9e:d1:91:76:ca:47:1c:9c:dd:7c:81:cf:b1:d7:82:3f:
39:35:2d:87:b3:31:03:10:e2:62:ae:93:99:07:6a:99:ef:5c:
de:85:cc:c3:9e:b3:9e:50:5e:92:3f:cb:ea:57:33:f0:5a:6d:
bb:c6:70:87:9e:64:12:29:11:bb:1f:60:7a:fc:93:44:05:65:
bc:ed:ef:67:3c:87:47:51:d0:48:2e:1d:00:52:a3:64:6a:5d:
d0:03:de:f0:6d:77:c1:4f:86:15:5e:b6:b0:16:41:fa:bd:4a:
3a:b9:3f:da:b1:ac:94:61:ad:51:28:e0:4c:81:db:ad:97:dc:
d5:c0:ee:d8:8e:49:36:49:cc:af:0f:b4:19:03:df:d0:39:7e:
52:da:2a:08:fd:0f:18:2a:13:a6:63:41:e5:52:9d:18:37:d9:
67:0e:a3:5a:7a:33:1f:7a:52:7c:b4:d5:d8:18:dd:5e:9e:b0:
e7:e5:b7:1c:59:12:e4:78:61:d4:be:82:78:ae:9f:89:23:60:
1d:09:61:1d:c2:81:ec:f2:27:b7:f7:6c:67:3f:e5:3f:2d:2c:
62:ce:7b:38:ae:3e:9e:3f:52:eb:3d:bb:f7:6a:80:74:05:ad:
eb:27:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:14 2026 by rpki-client