Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier: Z+n3m+hm3d2+B0McCmz2ricNb642ZfthvacQfVXkvMs=
Subject key identifier: A1:19:76:3D:29:B3:8F:EA:68:BB:3C:AA:5B:57:AE:4B:4F:83:98:03
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 019CF383F81F987DBE9141F61DCFEDBE9691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number: 0BC7
Signing time: Sun 15 Mar 2026 22:00:38 +0000
Manifest this update: Sun 15 Mar 2026 22:00:38 +0000
Manifest next update: Mon 16 Mar 2026 22:00:38 +0000
Files and hashes: 1: Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa (hash: WNChQ5FZcNT+Uy6r/VXAfEff5h4yB9HjomF668ERFPs=)
2: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: gB4N+sVUTcyM6VlTgmyWBGQr8MlhxcFc4+ZMMy+4hG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:83:f8:1f:98:7d:be:91:41:f6:1d:cf:ed:be:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Mar 15 22:00:38 2026 GMT
Not After : Mar 16 22:00:38 2026 GMT
Subject: CN=a119763d29b38fea68bb3caa5b57ae4b4f839803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:df:af:fd:64:fa:26:6f:98:a5:37:02:07:
40:73:c5:e9:4e:a3:00:ab:a6:e6:37:f9:51:3e:7c:
8f:6f:0c:3c:e6:0f:e8:a5:96:3e:b8:0b:7e:cd:d1:
9a:ab:20:61:34:88:a2:7f:e2:f2:44:6c:79:02:7a:
52:85:6d:34:ab:4f:e5:9b:c2:13:d4:f0:8a:da:8c:
7d:9c:da:85:29:8a:1a:59:9b:ec:af:b1:35:d0:ec:
51:bc:95:01:e2:5b:21:42:3a:65:af:b8:ed:8a:59:
af:1d:32:24:8f:db:25:e7:60:f5:99:5f:3e:21:57:
66:26:00:2a:14:c6:0a:5f:97:b5:85:fa:c6:45:ef:
f3:90:44:0c:f8:a2:75:5c:33:90:bf:88:f9:ea:f0:
bb:e5:c2:f0:a7:86:92:a2:45:b9:42:9f:5c:e0:8d:
b1:19:34:b6:4b:94:a2:f3:87:fd:f3:de:9e:52:50:
1f:7c:8f:fc:af:37:c1:28:b9:e6:e7:91:69:e5:96:
36:42:64:f1:3d:86:7c:ba:3d:ab:5d:81:a8:8f:70:
bd:d7:6f:1d:a9:51:6a:96:3b:41:f4:5f:41:fa:58:
b1:50:57:4a:72:86:8a:27:c4:09:24:3e:2f:37:2d:
03:30:b9:75:4c:1b:27:f2:ce:70:6d:1c:fc:5a:f3:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:76:3D:29:B3:8F:EA:68:BB:3C:AA:5B:57:AE:4B:4F:83:98:03
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ca:6b:90:40:a7:68:25:0b:39:73:77:7c:a4:b9:a7:63:75:
02:1c:5d:3a:c8:7f:b0:d8:d3:26:54:64:f6:36:6f:d0:e6:f4:
91:6e:c8:a8:71:2a:92:cb:98:2d:ac:21:93:93:55:46:df:ec:
ab:b8:98:a3:57:0b:d9:a4:ea:3b:07:1f:ff:55:8c:ca:04:3f:
ff:ae:fa:95:17:68:79:6c:14:40:2f:98:f0:c7:8e:72:e0:bc:
88:98:c5:a0:97:3d:54:16:07:06:9a:2a:25:df:96:65:d1:52:
13:b9:dc:cf:f0:8b:95:3b:b4:78:14:a7:a9:c5:f4:f8:5d:6e:
45:b6:de:aa:79:04:ea:85:83:96:e8:8f:68:a9:ea:69:63:fb:
b0:f8:0f:ad:56:b6:b5:c5:6b:37:0c:a3:2e:ac:97:ef:54:5e:
03:01:fb:2f:02:13:33:17:d8:99:31:49:e4:2c:a2:68:3d:41:
d9:b9:42:38:84:77:3c:33:1c:ed:01:9d:ab:e6:56:a6:a0:03:
c1:79:aa:12:76:1a:25:7a:40:8d:c4:ec:ba:2c:73:3c:38:4e:
a3:b9:ed:58:4b:9c:6d:83:66:4a:97:db:aa:ed:13:7d:f9:e8:
de:b9:b0:b7:aa:78:7f:b1:ff:ec:87:48:e0:01:4c:eb:85:f7:
2b:f8:64:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzg/gfmH2+kUH2Hc/tvpaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDAxYmNjNjlhMTY1MDM0MjFiODg4NTFmNDdhYTE2YzVj
ZjJkYmMwHhcNMjYwMzE1MjIwMDM4WhcNMjYwMzE2MjIwMDM4WjAzMTEwLwYDVQQD
EyhhMTE5NzYzZDI5YjM4ZmVhNjhiYjNjYWE1YjU3YWU0YjRmODM5ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR7fr/1k+iZvmKU3AgdAc8XpTqMA
q6bmN/lRPnyPbww85g/opZY+uAt+zdGaqyBhNIiif+LyRGx5AnpShW00q0/lm8IT
1PCK2ox9nNqFKYoaWZvsr7E10OxRvJUB4lshQjplr7jtilmvHTIkj9sl52D1mV8+
IVdmJgAqFMYKX5e1hfrGRe/zkEQM+KJ1XDOQv4j56vC75cLwp4aSokW5Qp9c4I2x
GTS2S5Si84f9896eUlAffI/8rzfBKLnm55Fp5ZY2QmTxPYZ8uj2rXYGoj3C9128d
qVFqljtB9F9B+lixUFdKcoaKJ8QJJD4vNy0DMLl1TBsn8s5wbRz8WvNTEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEZdj0ps4/qaLs8qltXrktPg5gDMB8GA1UdIwQY
MBaAFHcAG8xpoWUDQhuIhR9HqhbFzy28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMt
MGE4YmQyZjM2YzcyLzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMtMGE4YmQyZjM2Yzcy
LzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcprkECn
aCULOXN3fKS5p2N1AhxdOsh/sNjTJlRk9jZv0Ob0kW7IqHEqksuYLawhk5NVRt/s
q7iYo1cL2aTqOwcf/1WMygQ//676lRdoeWwUQC+Y8MeOcuC8iJjFoJc9VBYHBpoq
Jd+WZdFSE7ncz/CLlTu0eBSnqcX0+F1uRbbeqnkE6oWDluiPaKnqaWP7sPgPrVa2
tcVrNwyjLqyX71ReAwH7LwITMxfYmTFJ5CyiaD1B2blCOIR3PDMc7QGdq+ZWpqAD
wXmqEnYaJXpAjcTsuixzPDhOo7ntWEucbYNmSpfbqu0Tffno3rmwt6p4f7H/7IdI
4AFM64X3K/hkBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:06:43 2026 by rpki-client