Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: BbcD4KYxVs7CRjeiaRwPIRat2IdH7ML17IIpsX84OHQ=
Subject key identifier: 99:A2:D0:4C:61:5B:20:D9:46:EB:80:4C:3F:F9:99:04:BC:4F:F6:02
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 019D38D2A6D0514C0622CB7FE8D2D622EFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 0874
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: S3dQebE7SbNZ/rlNgFTxiqz05ZeW+LfOZ8dS3m89m94=)
2: oog2fr3azEwEvR96dUyVexH-pPI.roa (hash: 5Y/z/o0CKihXpA4MvidWc/Ioyt/faMA9m4DgHjwqJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a6:d0:51:4c:06:22:cb:7f:e8:d2:d6:22:ef:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=99a2d04c615b20d946eb804c3ff99904bc4ff602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a2:35:0f:16:47:47:b5:d0:0f:90:ea:f3:3f:
58:c9:b6:a8:4b:bb:87:29:f1:7a:14:6f:a2:c6:78:
99:f0:fa:52:89:16:5b:5c:6b:f5:c7:9c:13:2b:f8:
ce:57:15:40:cf:11:d5:e4:35:60:bd:06:29:c6:4a:
9b:e3:c0:be:2a:90:7c:8b:3c:e3:b0:b7:36:3a:00:
17:ee:12:9c:06:57:61:ec:60:c6:5c:c2:14:46:55:
79:83:8a:28:89:d7:57:c8:e8:a0:20:bb:a8:08:a3:
77:6d:4d:f0:f6:3b:72:b6:ca:17:82:10:a0:2d:20:
e4:c1:75:e0:a5:54:9c:19:c9:91:27:c9:ba:7b:32:
9f:36:e8:bb:df:1f:2f:c1:e6:71:af:ad:0c:4d:ee:
80:17:93:5c:98:b7:bd:9e:9a:ef:07:89:e2:b7:86:
6b:5f:7e:c0:82:0f:6d:62:db:65:18:c3:83:7d:25:
71:f1:b6:fa:e4:95:5c:00:70:f1:88:96:a7:54:ae:
f5:33:0f:f3:8d:9e:81:44:72:cd:92:34:88:a3:7f:
92:6d:33:45:95:92:31:ea:05:6f:e5:9c:5b:9a:09:
f1:c1:b9:ae:99:47:77:e7:67:ab:7b:8d:8b:d6:45:
5e:0b:c5:8b:4e:7f:69:9a:fb:81:fb:a9:4d:af:c3:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A2:D0:4C:61:5B:20:D9:46:EB:80:4C:3F:F9:99:04:BC:4F:F6:02
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e7:20:5f:ca:2c:97:62:03:6d:92:4b:65:c1:a1:ac:ca:aa:
35:4c:63:c3:6e:e4:45:df:20:77:5e:ef:55:88:ac:95:f7:b8:
c8:fe:64:10:e0:f2:fe:61:08:d6:6a:fe:c5:9a:c1:f7:c2:7c:
87:2e:74:73:24:45:a8:54:b4:78:af:6a:b5:94:64:db:3f:ef:
24:f2:79:c9:07:7e:9c:ef:25:5c:cb:14:d7:ff:99:35:07:7b:
b7:21:1b:90:81:0e:18:f5:6d:1c:5d:2a:f0:b7:da:7b:09:4d:
b4:02:e6:dd:03:d4:0e:92:33:6f:48:d9:64:51:c9:b4:7e:a2:
bd:b9:71:f1:b0:33:9c:e7:85:97:8d:16:8d:37:0c:43:7d:fc:
d4:c0:d9:15:68:d8:4d:87:d3:4c:35:29:16:e6:04:94:d2:bd:
9c:dc:70:42:85:d8:72:1e:18:51:0f:71:c9:86:46:e8:6c:d4:
be:08:7c:16:89:36:b0:5e:34:c8:2f:65:f7:10:3a:21:d0:bc:
20:b4:15:6a:1e:f0:96:67:90:5e:83:df:98:17:37:7d:c1:96:
22:e4:84:96:44:91:78:57:0c:7e:58:cc:1e:a5:1d:32:77:9d:
37:00:e3:5f:7d:fc:b2:46:3f:c3:30:fc:0b:b0:b7:8b:5e:e7:
bf:d7:85:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:42 2026 by rpki-client