Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: nYp3UhY5edw/5vXPUpYwC/g2ixsfdL4fBCchBm+SAY0=
Subject key identifier: 87:AE:22:96:EC:76:73:5C:39:A2:65:AE:30:84:DF:DE:90:0A:28:70
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019D382E97542F1D6E48A6DB56B1A6707E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 0414
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: V/QhrhVK8ZVZDG01eLyRMe6fLO/5SXa2OXaUftMBAgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:97:54:2f:1d:6e:48:a6:db:56:b1:a6:70:7e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=87ae2296ec76735c39a265ae3084dfde900a2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:6b:09:08:ca:b8:82:d7:5b:1a:8c:5b:33:
84:1b:d0:a2:90:47:73:f6:fb:ce:44:69:49:cb:8b:
fe:95:36:66:fe:c5:98:0e:63:c4:24:e7:9b:71:0d:
14:98:7d:1a:74:a5:e7:6a:ad:26:48:59:13:52:71:
28:39:33:d3:9e:a6:1f:28:29:6f:13:b4:60:48:3e:
20:02:bf:ca:6d:0a:51:76:59:87:56:14:11:28:6a:
33:17:b5:a7:fb:fd:76:98:70:82:3c:d5:b1:b3:ab:
5b:66:22:ff:1a:6e:4a:30:dc:9d:9b:c8:b4:b5:82:
0d:f4:2b:71:5c:27:fa:ea:d5:8a:9e:ad:78:2c:6d:
c3:28:2a:19:39:b5:0a:cd:13:18:5f:42:56:1c:c7:
8b:90:4e:e5:b8:58:94:da:d5:ef:6b:ec:f8:df:ae:
72:61:9a:ec:90:50:86:18:c7:85:39:44:11:86:06:
6a:e2:fd:b9:a8:2e:e1:bb:d3:80:7c:90:8a:b5:57:
2e:b2:dc:9d:38:e5:79:47:75:7d:4d:87:2e:b7:a1:
35:bc:4c:65:06:90:f3:6d:8f:fd:9f:2c:48:a5:71:
07:91:49:5e:0d:52:6d:67:ce:ac:f7:d8:f8:fa:54:
34:9b:fc:2c:14:3e:14:71:f7:b4:0b:77:01:bb:52:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:22:96:EC:76:73:5C:39:A2:65:AE:30:84:DF:DE:90:0A:28:70
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5d:a3:c2:74:2e:2b:9b:e3:b0:ba:c0:c6:06:d9:9e:2c:ba:
8c:ff:41:45:c2:1b:bb:2d:04:69:41:86:bc:83:6b:df:ec:95:
aa:45:43:87:d6:5b:15:4a:79:81:bd:6f:84:cc:40:a2:05:cb:
f1:71:df:40:02:d6:ee:cc:e6:26:47:c2:41:03:e1:51:f1:19:
12:72:f5:fa:0c:b8:42:16:70:b9:d1:b2:ac:4b:38:52:21:46:
e2:bb:92:b3:46:7c:b6:fc:af:ae:d3:5c:19:fd:c0:31:51:57:
5d:e2:b9:36:13:51:eb:2c:ca:3c:d8:f5:ee:92:f5:68:b6:69:
38:70:5f:8a:64:10:e5:44:b2:8a:53:83:1c:fa:ac:ad:e6:4a:
52:0b:34:33:60:90:b0:f9:af:7f:a6:65:44:27:6d:23:5c:20:
90:dc:a8:78:7d:8c:97:1b:dd:79:f9:0a:89:d1:e8:03:6c:a3:
b4:eb:bb:c4:b4:dc:5f:49:e3:95:9b:96:2e:8c:59:72:a1:78:
ca:b7:1a:62:11:fc:cd:20:e5:9a:78:92:ba:5f:4b:ea:43:9f:
b1:62:03:fd:d9:a6:fc:22:ce:a9:5b:5d:83:6e:db:61:fd:ba:
11:ed:83:cf:a3:6f:dd:24:67:9a:e5:74:69:ee:a1:37:7e:26:
1f:bd:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:58 2026 by rpki-client