Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: jCiVqsQT5/sG1ZRUeTnZsEqHm7g6y3kIJtLtE+VhuA4=
Subject key identifier: 02:66:22:C9:A7:24:C4:AF:04:6A:06:F9:00:8D:20:FD:9C:EA:1C:0E
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019D37527DC557D9B0A80AB5B66EFA3D3C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 1584
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: OBjM2iKRMxSjqa98ychsixD6X5g.roa (hash: q2aIFop5k0Cp3GYeaHHvGFWE530UcdAx8s7zzr0tPgM=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: dTbeKqhOs/1T4qHEq6pVk3gsrSPo/PWURDdfNLchyOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7d:c5:57:d9:b0:a8:0a:b5:b6:6e:fa:3d:3c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=026622c9a724c4af046a06f9008d20fd9cea1c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:bf:f5:4c:a5:6e:a5:36:ba:ca:e0:e8:e7:
42:f5:c8:a8:37:40:54:ef:42:06:98:66:16:23:c8:
7c:70:12:f3:48:03:0f:94:32:d9:c2:ec:18:16:65:
cb:6a:12:38:06:04:8e:bb:0a:ad:4b:d6:0c:a1:fb:
88:d7:59:23:95:39:89:e5:0f:ac:d5:b5:2f:54:c5:
af:36:a1:a1:1f:1d:fd:7d:6c:cd:2c:63:4b:10:0d:
8c:2a:c6:87:1d:21:f0:01:4a:c0:0d:f2:23:c8:e5:
c4:f4:56:8c:61:23:c9:e1:41:6c:2e:a3:d1:d9:8a:
aa:37:6d:5c:db:d5:b2:af:36:ed:f7:2b:1d:f2:ae:
b4:04:87:52:68:37:53:95:d8:f7:6e:d2:bb:5d:1b:
87:c4:dc:6a:5b:73:45:16:3c:8f:36:e8:e0:82:d6:
90:0e:cc:b5:ea:37:fe:a6:95:53:41:df:9d:31:ca:
30:24:b8:d9:da:5e:d8:b3:44:95:06:76:01:9b:0b:
74:76:6d:3e:23:d8:1c:fe:d3:c7:86:54:a1:c3:23:
c7:07:bb:bb:1f:ae:fb:90:48:e4:7b:18:f9:e5:ac:
33:c4:f6:b8:51:6c:3b:ad:53:d7:59:fe:6b:b4:55:
ad:bb:e9:f7:e4:a2:b7:c2:61:1a:5b:8e:46:ae:a2:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:66:22:C9:A7:24:C4:AF:04:6A:06:F9:00:8D:20:FD:9C:EA:1C:0E
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:ae:64:ff:28:47:b0:f4:88:6b:3b:39:a8:82:84:95:f1:
37:ca:90:d6:66:c1:16:4f:a8:32:3d:e6:96:7b:5d:35:55:84:
54:16:98:c4:67:2e:81:9f:52:0c:73:79:22:22:db:bc:71:1b:
b3:83:1e:6f:38:a7:32:eb:02:29:00:94:1c:88:00:5b:eb:47:
32:14:ab:9e:73:6b:11:25:61:9b:17:e9:7b:f3:a7:2b:e3:d8:
84:78:d7:56:20:5c:9d:71:00:1e:e4:8f:cb:a6:7a:fb:c3:43:
4e:14:a8:9e:8f:92:5a:fe:b7:9f:3e:89:19:a6:77:dd:d3:fb:
0d:f6:ba:b1:e6:03:91:65:ab:7a:2f:a2:c8:d8:04:12:8b:fb:
27:ef:47:49:4f:fb:79:57:d5:3c:b0:50:74:75:93:7f:9b:d8:
3a:6f:59:62:31:a2:31:d8:14:07:9b:78:c7:cf:d8:60:df:a2:
4c:e9:c2:a9:3e:60:6a:bd:3c:dd:20:48:f6:aa:71:82:62:60:
88:8e:18:cb:29:af:b6:c3:29:78:49:50:3e:0b:b2:c9:1d:1d:
d4:a5:30:19:91:57:62:d7:69:cd:0d:c1:3b:5e:25:fc:1a:98:
5c:cb:99:54:f9:06:fc:f0:09:51:0a:14:6d:1a:c0:22:9f:8c:
e8:91:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:55 2026 by rpki-client