Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File: Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier: fPXGDcSDVg17/fPFNIa2shkJT0y5Xp/1zxVT/1MRm9k=
Subject key identifier: 4F:7D:9B:E5:30:BF:B2:60:DB:BF:7E:E4:5D:D1:5D:B7:E9:B2:27:92
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial: 019D390990596F7916411C5B5F0853E9E652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (hash: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=)
2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: VPUqgP4lMN3JYtjlJuN2n3NhJmSfft+VjrdWcVecvgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:90:59:6f:79:16:41:1c:5b:5f:08:53:e9:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=4f7d9be530bfb260dbbf7ee45dd15db7e9b22792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:64:c0:19:6e:6d:da:58:94:59:11:3c:c4:
be:47:7d:b5:33:df:e5:9f:0e:77:58:0c:16:f0:cb:
0d:ce:e7:12:31:9e:ab:18:22:77:c4:20:a5:a2:cd:
73:3d:39:f7:4c:80:4f:20:15:32:8e:3f:d9:f4:89:
8d:a7:e5:98:c2:4b:70:83:a0:9c:87:e2:d4:6f:b4:
c4:f2:48:f8:5d:d5:86:eb:45:1f:a8:27:5c:d4:08:
c3:f3:b5:fd:80:5e:ce:65:ee:81:01:35:62:4a:56:
ab:44:5e:f2:00:42:de:42:ca:6a:12:92:b6:00:03:
d5:a8:bd:41:aa:ea:b7:7c:22:c9:fd:ee:05:52:ec:
a4:5a:ff:ac:7d:6c:02:25:b2:fb:ae:df:0c:86:1a:
25:e9:d9:1e:33:4a:74:0b:5e:2d:70:fd:ed:4a:50:
61:fb:27:81:50:93:8d:e2:83:95:c2:c1:89:a3:0a:
9e:87:56:8b:6d:7e:73:e2:2f:72:87:3a:f1:1e:af:
26:17:86:a2:2b:47:8c:e0:02:39:be:c6:8d:f8:27:
53:e1:8b:24:8b:e1:56:a0:8c:e3:c0:27:ad:c1:94:
d0:03:7f:e6:41:93:b1:9f:5f:b8:c0:df:f1:8c:54:
2f:c5:f6:3f:dd:54:42:d3:6b:8e:a3:f3:1b:aa:fa:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:9B:E5:30:BF:B2:60:DB:BF:7E:E4:5D:D1:5D:B7:E9:B2:27:92
X509v3 Authority Key Identifier:
keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e9:cd:7a:1e:04:0e:72:10:57:4b:f9:d0:96:41:a7:d8:c4:
e4:eb:2d:42:94:31:0d:7e:1d:a2:8c:52:c2:d3:72:31:54:f7:
a7:91:62:8a:2a:bb:1b:bf:e8:67:dc:11:9e:24:fe:34:62:88:
09:eb:96:96:bd:ec:1b:8e:9e:e2:2f:6d:ed:0c:ac:cc:c6:4c:
a7:cf:e9:6d:79:3b:85:34:f5:d2:f2:38:c6:d3:15:68:e1:02:
9d:ca:9e:63:bb:f3:59:55:d8:87:63:92:a5:1b:1d:1f:1d:47:
e7:62:a6:82:f9:b6:26:98:3a:60:51:f5:b4:7a:f9:b1:59:18:
a1:fa:9b:e8:3e:39:7a:47:20:47:bc:73:90:ce:8d:da:ff:26:
37:94:28:b5:6c:bf:0d:b6:97:86:d6:ed:cb:a7:83:77:48:1c:
72:db:cc:35:02:5b:c2:e1:f4:41:4a:d5:7f:80:2e:70:fe:1e:
51:df:13:99:f5:9b:2f:7b:f7:af:68:d6:27:35:7e:e4:a1:6c:
8a:fb:b8:54:05:fc:d2:48:52:af:5e:77:62:8b:70:c1:b9:07:
8e:5e:aa:82:ae:4b:4a:cc:8f:9b:5f:e5:72:a3:bb:c0:85:d5:
9f:b3:12:cc:69:56:3a:05:1f:19:65:7a:9d:26:d8:65:b8:bb:
26:4d:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:16 2026 by rpki-client