Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: cQ075MJdLVkcs0VGllr6ZpYtl6fC5ZxxQMUuvv3GU9I=
Subject key identifier: 73:8A:5E:8E:87:36:A8:F1:6E:57:08:08:AB:72:0C:21:D0:FA:6B:F5
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019D389C13872F0D22F34BC52618DCE4D706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: cZIYRt1v2ir5xKarukb7TYh2S+tavoYCFGl+bxWgQ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:13:87:2f:0d:22:f3:4b:c5:26:18:dc:e4:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=738a5e8e8736a8f16e570808ab720c21d0fa6bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7a:22:fe:95:be:cc:a6:a6:b4:ff:a0:d0:38:
50:76:61:42:ce:98:dd:9f:4a:e2:15:fc:5d:e8:9e:
16:70:40:92:e1:d8:47:49:96:10:68:2b:0c:5f:a7:
b5:46:64:1b:31:da:a8:bb:92:87:eb:45:d8:32:fb:
df:21:d4:73:de:a2:13:6d:f3:02:90:d2:7e:f5:63:
2e:96:99:c8:f6:f3:57:09:87:12:13:bf:79:91:0f:
1d:a2:89:ef:94:d8:6d:3d:76:42:06:ee:ae:61:8a:
d1:97:cf:83:01:b6:71:c1:3f:f3:b1:18:5e:57:02:
a8:8e:11:93:e9:aa:d3:c8:b3:11:fd:69:1a:e6:5c:
0a:f8:79:c1:29:20:7a:76:c4:a9:2e:f5:cb:1a:4d:
73:54:d1:1b:eb:9a:b8:6d:10:34:89:1c:92:8f:2f:
82:67:49:35:f4:20:db:6c:df:17:2e:b5:1e:67:54:
26:44:5a:77:8e:3e:be:05:f1:70:7a:55:94:14:16:
d3:79:07:3c:e3:6e:60:4d:cd:13:0b:e4:f4:86:e1:
94:61:ef:4e:bb:19:b2:06:83:c6:34:02:cb:05:80:
17:73:bd:58:d3:e7:da:ba:c3:78:66:e5:41:fd:11:
bd:d6:d3:b4:36:4d:b5:2f:95:a5:57:fc:a2:d2:8a:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:5E:8E:87:36:A8:F1:6E:57:08:08:AB:72:0C:21:D0:FA:6B:F5
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c6:ab:80:85:a9:94:d0:69:71:cf:f3:d1:46:a2:04:dd:da:
64:5b:57:bb:80:7b:b4:1c:cb:28:db:41:b5:26:d6:13:06:99:
75:27:fb:29:fc:4a:67:dd:cb:43:e3:04:70:84:6d:a3:13:69:
c9:50:26:ba:4b:de:ec:13:41:6a:b0:38:c9:eb:86:d2:63:f8:
42:2c:eb:c3:cd:73:3d:04:98:fc:23:d7:87:c6:b4:8a:d7:9f:
47:eb:6a:7c:66:b4:11:dc:44:a3:73:2a:cd:90:74:4d:0d:a9:
ae:45:7a:88:a4:fd:f0:7d:10:0b:8a:ba:2a:5e:d2:9c:68:01:
5c:eb:48:ed:4e:d9:b1:16:4f:8a:f1:cd:81:ef:95:8b:e0:c4:
d5:55:00:48:af:f3:e1:25:49:0b:a4:95:2a:2d:b3:8e:3e:b4:
7a:15:6a:4a:ef:c2:52:8c:48:a1:c3:69:40:20:2a:79:30:b4:
64:34:36:13:c0:9d:30:a8:41:d3:0d:d4:f6:13:6c:14:07:83:
b5:89:06:f9:5a:da:04:6c:9f:a7:e4:d4:86:1b:ad:f6:09:ab:
2e:61:63:46:20:75:7e:cf:c5:6f:c1:f8:09:0a:f4:1d:da:68:
bb:89:66:85:63:fe:02:bd:e2:4e:31:03:1d:4f:2d:36:79:52:
09:08:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:15 2026 by rpki-client