Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: eT6oJnaGJZ19KYinWhdGPZHREcTvU8L8f5Qw3bD9jk8=
Subject key identifier: E5:7A:BA:FF:1A:FE:F4:D9:4F:6E:EE:2E:B2:F7:87:C8:32:6B:D6:3E
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 01A17B1621F9C444A702B9A0FA06DCB37919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 02:00:10 +0000
Manifest this update: Tue 27 Oct 2026 02:00:10 +0000
Manifest next update: Wed 28 Oct 2026 02:00:10 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: nkaqBel56ztX6iglKsA6GiggWgopYB8MvcqWCwtPJOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:21:f9:c4:44:a7:02:b9:a0:fa:06:dc:b3:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Oct 27 02:00:10 2026 GMT
Not After : Oct 28 02:00:10 2026 GMT
Subject: CN=e57abaff1afef4d94f6eee2eb2f787c8326bd63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:95:4a:90:39:8f:d3:c0:95:22:3e:d1:a6:
f6:ee:e4:27:9d:22:b7:65:34:d7:12:3b:7b:01:0f:
cd:a8:3d:96:24:a3:a8:9d:dd:5f:36:00:fc:1d:92:
7d:44:da:ae:2c:62:a4:bf:fc:9b:a3:8f:9c:f6:64:
b8:0e:71:0d:e4:6d:4d:29:24:91:85:09:78:75:f5:
dc:ef:ca:c1:52:11:47:07:f2:92:b8:bd:04:61:fb:
0b:1e:0a:82:85:e2:b1:6b:fb:9d:e9:31:46:82:40:
2d:0a:cc:4a:79:84:5b:14:eb:32:3d:e4:97:9f:49:
8c:81:de:e9:3a:1d:5a:0c:02:27:e6:7c:83:0f:bd:
a2:98:a7:c7:df:bf:58:1a:09:ca:8c:69:d7:63:a2:
c6:5b:c5:c3:91:bd:4f:12:e7:b1:b1:32:ec:7d:1a:
65:f8:b0:1c:fa:19:45:c8:79:23:60:7e:3e:12:07:
47:9d:d5:23:06:6b:b5:3c:2c:5e:c1:2c:57:7c:49:
46:41:51:40:9c:b5:4e:3b:8e:ca:d2:1d:b2:cf:3f:
98:4a:10:60:a5:4c:ac:67:31:b4:3a:a8:81:a3:08:
ce:a3:45:b8:cf:83:68:71:02:df:40:1e:3d:41:dc:
09:21:3d:b3:14:fd:e8:a1:79:d6:7f:6c:f0:d5:dc:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:BA:FF:1A:FE:F4:D9:4F:6E:EE:2E:B2:F7:87:C8:32:6B:D6:3E
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:97:f0:e1:0d:51:db:bc:22:f8:b9:b8:45:9b:d4:73:2c:d7:
02:6f:f4:a2:8e:fc:3f:0e:d1:0f:a5:8f:55:74:8f:37:e9:d0:
51:33:17:99:8f:15:36:dc:19:ad:46:83:ba:12:e5:a2:46:94:
84:e3:e6:d7:df:9c:68:78:f7:27:82:fa:95:34:26:e4:e3:bc:
c2:38:b7:bd:55:20:a6:c7:f3:47:c6:1b:b8:4a:f3:23:f4:b6:
ef:17:b8:42:fa:65:45:1f:a7:17:e9:06:bd:e2:7f:c4:51:94:
a4:40:aa:53:34:fa:1b:60:75:c1:5f:2c:e4:dd:9e:90:29:9a:
af:62:72:c2:ef:e7:5a:09:a2:03:59:e4:1f:3d:f8:74:04:6d:
13:39:60:87:d3:f8:4b:3c:a9:53:1a:48:45:3c:b3:73:b8:4e:
d6:4b:21:df:78:7e:58:51:72:74:23:30:01:e9:7e:58:fe:7b:
c3:42:79:b9:f3:db:68:d5:de:52:d1:01:d2:8c:db:13:ac:3e:
a5:bd:9a:d3:c0:5a:68:9d:2e:f0:d4:2a:b6:cd:e2:3d:d6:85:
2c:1b:e8:9b:56:4c:f7:11:62:e0:93:6c:49:7e:be:c3:78:3d:
01:d4:51:aa:02:e6:c8:9d:b9:22:f9:47:f1:e3:11:05:6c:3f:
16:5e:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:57:31 2026 by rpki-client