Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: XSUWyQ5Ds8uQPt/h6lHZ7bO9Y2zJx68FzVBV5YPYmuU=
Subject key identifier: D3:6B:5E:3D:DA:64:E2:70:0C:CA:1F:92:40:CB:A1:ED:C3:19:CD:A3
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 019DD0BF5538D75C2EE2CBE442B3F50A8734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0D49
Signing time: Mon 27 Apr 2026 21:01:33 +0000
Manifest this update: Mon 27 Apr 2026 21:01:33 +0000
Manifest next update: Tue 28 Apr 2026 21:01:33 +0000
Files and hashes: 1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: NKCXJ1apa7ILP8rVUo360kXN/NvLD5tJPo5ISFSIaTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:bf:55:38:d7:5c:2e:e2:cb:e4:42:b3:f5:0a:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Apr 27 21:01:33 2026 GMT
Not After : Apr 28 21:01:33 2026 GMT
Subject: CN=d36b5e3dda64e2700cca1f9240cba1edc319cda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:b0:12:70:30:44:a5:0e:4f:0b:e2:db:42:
e9:ec:ce:b2:17:7e:90:bf:82:3f:25:06:c7:a8:68:
46:2d:89:41:36:55:9c:63:c1:61:ec:17:32:ae:18:
49:08:04:38:a4:2b:da:b2:40:47:8f:00:21:92:98:
74:9b:3a:e6:1e:be:4f:5f:7a:3f:c8:da:98:59:da:
d7:3e:6d:da:fc:6b:f9:db:83:34:ff:86:b6:08:18:
28:01:0a:88:ca:86:bd:c9:08:40:e8:4e:d1:66:18:
ae:63:f1:5f:05:1a:86:a5:aa:2c:ab:d3:7a:6d:d3:
67:ec:1c:24:b0:cb:74:72:9d:2a:20:aa:2f:ab:e7:
60:cb:53:c7:6e:f8:d7:33:77:93:05:77:a5:1b:cc:
f8:76:d3:45:7b:e9:0b:11:19:a2:ce:3d:4f:10:7e:
00:38:73:f4:47:05:8b:07:5b:d1:b0:ac:17:f5:ce:
16:0f:71:7e:e9:40:c5:f4:bf:7f:fc:e2:e3:85:68:
7c:84:ac:4e:f4:ed:e2:e6:3a:d9:00:c4:69:08:c1:
e2:81:da:7a:f1:29:6e:00:32:d7:a5:f1:40:26:fc:
5a:5f:3d:fd:76:13:8a:0d:8c:2d:f3:36:cc:d0:b5:
8e:d8:d3:7a:08:02:64:27:db:0b:c7:0c:c0:38:04:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:5E:3D:DA:64:E2:70:0C:CA:1F:92:40:CB:A1:ED:C3:19:CD:A3
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a7:d1:72:a7:29:ec:d0:8b:ad:72:00:cc:c0:36:80:03:67:
c8:ec:2a:63:62:79:17:04:f5:63:4e:d8:af:4e:c4:34:84:ea:
6c:8f:1c:88:76:7c:9e:30:20:9a:6e:2c:02:6e:ed:b4:91:ed:
fe:99:c7:88:ae:1d:69:67:0d:c5:33:7d:72:92:47:8a:c4:dc:
0d:32:70:f0:fc:b3:52:ea:c0:9f:91:89:91:dc:cc:27:e0:a3:
92:b1:fa:b1:e9:d8:c5:2b:0b:b2:a5:40:a3:1a:78:3b:9a:ab:
74:0c:c2:0f:1c:a7:c0:ce:fa:5b:5f:ca:73:57:05:91:c2:a8:
a0:08:20:30:b0:1f:20:31:5c:fb:ba:40:98:d8:6d:4c:ce:d8:
8a:68:81:36:00:cc:69:2c:9f:66:dc:12:6d:66:bc:a2:c4:d6:
5c:dc:f2:04:b1:4e:b3:03:6b:9f:b5:a0:03:cb:b1:bb:d6:b0:
e9:68:1f:b1:85:34:89:7c:a7:9c:0a:f8:41:ae:9d:4b:2b:3f:
49:a9:4c:06:c6:6f:f9:fa:08:9d:4c:b2:59:9e:a6:f1:ab:42:
15:d5:28:06:0e:d6:ed:96:f1:e3:31:a5:5e:cb:45:b6:4a:24:
f6:e8:6b:e3:39:5b:4b:69:58:85:c5:4e:94:14:c5:ca:36:a3:
db:a0:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:42 2026 by rpki-client