Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: x8QC0+QHzIGXb+Fyjxlbnf9U5mKxFPK48HvoO97fOeE=
Subject key identifier: 93:15:7C:71:48:DD:A8:C7:AA:26:3C:D2:32:7C:17:3E:A5:00:51:7E
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019CE749EFD5A3FD22A9FB3860E11DFF3E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 1611
Signing time: Fri 13 Mar 2026 13:01:48 +0000
Manifest this update: Fri 13 Mar 2026 13:01:48 +0000
Manifest next update: Sat 14 Mar 2026 13:01:48 +0000
Files and hashes: 1: JHlwQGDbvrC4juRVad57B3oI92U.roa (hash: oSK/eP8u/19D2+8PlzxQLpygFc07vdIXajuQXABfEZE=)
2: fomrS4dX5UyQctRbUOlEOReM51s.roa (hash: OwhdfcJ0K62trAYFFVz/ZuzwZmZiy8nl9/D+tMVNouE=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: a84S+BA+Hy5yVSLRvBn+j8ryV715laKFPNX9D8MB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:ef:d5:a3:fd:22:a9:fb:38:60:e1:1d:ff:3e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Mar 13 13:01:48 2026 GMT
Not After : Mar 14 13:01:48 2026 GMT
Subject: CN=93157c7148dda8c7aa263cd2327c173ea500517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:5d:8c:19:21:9a:9a:1b:85:e3:8f:3e:ab:
f5:77:fd:ce:5b:c4:10:a6:2f:05:f9:55:0a:e9:19:
49:6a:78:ef:9c:6a:b9:9e:df:94:13:66:b5:0e:20:
5c:ce:33:cc:70:a5:f8:76:34:7e:69:b6:26:50:89:
fb:eb:a4:b7:db:55:c3:37:5b:a0:f8:a8:fe:fa:6b:
f1:bc:3e:71:e4:d5:c9:6c:fd:91:bf:4b:b0:5d:5b:
92:1e:b8:d0:02:2a:e0:d5:3c:56:a2:50:50:60:27:
59:24:10:c9:54:e5:8f:49:8e:62:57:dc:20:2f:ed:
15:dc:78:98:ad:5e:c8:49:9f:40:91:25:ba:66:84:
85:67:f6:03:d2:71:01:94:76:77:bd:ca:b5:4a:40:
18:59:27:17:91:97:2d:31:fc:0f:3d:14:e4:01:06:
b6:75:9e:cd:f4:c1:32:a0:8d:34:74:ee:1c:2d:c0:
7f:20:95:ca:be:98:bd:45:21:52:3e:21:aa:b9:d1:
b4:8f:42:47:67:fb:5d:bb:84:25:0d:17:76:17:7d:
29:3b:94:05:60:8e:02:fd:05:86:23:98:40:c9:a6:
75:ec:c6:8c:c4:09:5c:f5:39:c5:26:3d:c0:12:34:
0e:be:a4:b0:f8:3e:33:3b:5f:96:21:54:b1:b0:2b:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:7C:71:48:DD:A8:C7:AA:26:3C:D2:32:7C:17:3E:A5:00:51:7E
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:0b:e2:65:32:81:17:26:97:0b:2d:13:8d:de:c7:9b:d8:
c4:d4:fc:f7:a3:ae:6b:19:0e:ee:a5:08:63:52:fc:9c:08:2f:
59:b2:9b:df:ce:2d:73:97:88:97:7a:2b:86:17:e4:52:b6:0b:
c3:d7:f1:35:52:bc:00:61:39:1c:6a:1f:ae:0a:19:6e:e7:9e:
e5:77:ce:c5:7c:17:5f:d1:15:49:81:16:5e:f1:7d:bd:fa:f7:
44:97:ef:04:4f:e1:cc:a9:76:48:d2:32:e8:f1:23:94:15:b4:
65:38:40:7f:4d:cf:08:c9:19:87:d6:3c:b9:e2:d9:66:da:ec:
40:ad:8d:a2:8c:ba:a5:79:47:ff:a3:46:58:36:80:c7:87:2c:
81:be:a7:96:94:5a:38:b6:e9:38:7e:33:cb:40:dc:61:09:66:
e7:07:3e:f5:49:b8:e2:a8:4e:37:a2:f7:08:ba:94:f5:f8:b6:
11:e6:83:af:e7:0e:0a:62:7d:3d:08:09:49:dc:65:b6:c7:e4:
3f:59:3e:e1:f1:54:39:69:0e:a9:2b:e7:ce:35:04:cd:b8:5d:
02:be:f5:36:25:2b:43:9d:82:8c:3f:c3:d8:96:36:cb:b9:ca:
11:7d:3e:fc:9e:c8:03:38:b6:df:f7:a1:8d:29:c6:09:d3:d4:
33:ce:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:05:36 2026 by rpki-client