Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: aIXEmBBmpzhJJDx2xTom4kkoD6Bdo23Re6Pgp5PY0Qo=
Subject key identifier: CD:A7:74:14:8C:95:C0:39:32:C0:58:B2:9A:A0:7E:22:BA:BE:E1:56
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019D37F75C61DB1011B71A109DF2D90900B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: vwYc0NdULJI3j3kxlcMZLa7GJTGox9Q3xSOVe1Kkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5c:61:db:10:11:b7:1a:10:9d:f2:d9:09:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=cda774148c95c03932c058b29aa07e22babee156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:8e:a5:e9:57:4f:8f:db:ea:35:f3:b5:6c:
94:ea:dd:34:c9:29:c4:06:f3:64:e5:df:06:6a:5e:
69:e7:4f:3d:c2:56:03:b0:54:bc:a7:af:f7:01:9f:
68:94:02:f4:6f:62:78:4e:ef:48:7b:bf:e8:ca:62:
e9:4e:80:61:d0:03:cf:03:78:0e:42:be:b8:a2:20:
f0:e6:2e:44:34:11:83:83:54:1f:62:6f:97:7b:bd:
11:1d:3e:f3:1a:93:2d:9f:fe:95:36:ab:12:da:1f:
1d:ba:d4:2c:70:70:d5:50:50:1d:1b:d4:93:b1:fd:
b0:7c:b8:df:1a:5a:28:f7:fa:0c:ae:0f:ee:81:6e:
b4:42:72:d6:51:49:49:fc:60:63:26:e4:5f:16:15:
4c:5a:37:c4:81:33:de:01:a3:9b:91:99:98:7d:01:
9f:1c:8b:46:4c:28:5a:db:b4:36:fa:6e:e1:ab:0f:
e9:de:4c:ab:07:5e:b9:81:a0:8a:f5:d3:70:08:84:
f5:4a:a8:6b:61:79:43:ae:79:44:8a:a7:1a:81:1c:
f8:cc:c9:2f:cd:d2:c5:d1:23:cb:6d:3a:17:9c:80:
85:fc:a9:72:96:75:99:3b:d1:1e:b7:21:5e:48:9d:
47:45:aa:11:76:d2:2f:03:d4:9c:fd:7a:20:25:1c:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:74:14:8C:95:C0:39:32:C0:58:B2:9A:A0:7E:22:BA:BE:E1:56
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fd:ed:9c:b9:b1:cb:e4:cf:4f:36:52:a6:58:be:ee:fa:47:
b1:4c:c9:c9:59:7f:b1:3b:3a:4b:dd:2d:dc:09:65:e9:29:e9:
4e:f6:c7:1d:5d:e6:91:57:e3:98:44:09:dd:96:81:fb:1a:a5:
03:9f:eb:41:8b:c6:a6:6f:bf:a6:d0:8a:5e:91:fa:b9:63:53:
b8:a9:43:8f:a1:c1:18:48:07:86:ca:14:38:89:cf:9c:4a:9e:
3b:95:37:79:9b:db:1e:eb:b1:19:a1:ed:c0:48:7f:c3:f9:1a:
a6:13:1b:b9:07:68:94:57:46:db:7d:d9:b3:c6:ab:09:ec:98:
33:c6:05:c2:05:0a:c9:85:c2:61:c1:ff:37:35:55:0e:a5:48:
15:2e:bc:14:3e:4d:b2:ad:c9:cc:69:4c:bc:0f:99:5d:c2:a8:
c6:f3:dd:05:27:93:e6:da:5b:d4:51:3a:b1:86:7f:a2:dd:f4:
e3:e5:f5:6f:57:28:81:4d:9e:e4:6c:40:d9:78:0a:42:6f:af:
1f:94:b0:a6:42:07:04:0e:a0:8c:3d:a1:56:71:d4:cd:fa:ac:
10:d4:4a:88:71:5d:46:ef:ed:c6:8c:a1:95:31:2f:28:85:fb:
db:8a:2f:b1:0c:2f:ed:88:bd:49:97:f0:a4:e3:4d:dc:8f:45:
6f:0f:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:44 2026 by rpki-client