Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: YhRCMYE5BxdHdES6+POMqrVEHZBww+C3+usX85eiE4M=
Subject key identifier: 49:79:B6:E2:E0:86:AD:71:FA:CD:B4:EF:70:CB:B1:F0:1A:E2:64:F6
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 019D37523AAF1D8ED1CB7CB0B5E79B13D838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0C72
Signing time: Sun 29 Mar 2026 02:00:28 +0000
Manifest this update: Sun 29 Mar 2026 02:00:28 +0000
Manifest next update: Mon 30 Mar 2026 02:00:28 +0000
Files and hashes: 1: 4M_UsjI3sTlD02Fx3KfoZHfdDb0.roa (hash: dlLvX8/Ejpl0nrFnm4Jn56Ulk4bAMrdScrrJoG2sLZI=)
2: da7V_Ge3OwJ-tptvN6P_P-82QWY.roa (hash: LhRu3/JonoqXhl7X7FsOj5gA5Kow+TvLPdq0yyZ9ncU=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: 2eV+/WSpLxEJRoRFXBpU/Lr9R6xbNtnfaZoT4w5jqzg=)
4: mT-pF9AMKMZsgk-sXRGFTjdjjTw.roa (hash: 8hi8c5X3lOfRNm6eAGE7trxa/urAr1vNuOA2SfS5/jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3a:af:1d:8e:d1:cb:7c:b0:b5:e7:9b:13:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Mar 29 02:00:28 2026 GMT
Not After : Mar 30 02:00:28 2026 GMT
Subject: CN=4979b6e2e086ad71facdb4ef70cbb1f01ae264f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:88:67:8b:39:83:3e:9c:95:f7:c4:59:cb:
5e:84:f8:ff:6c:92:34:f1:2d:36:e5:6b:f1:df:20:
7a:2d:f5:d8:53:58:3b:eb:75:1f:80:f5:d6:02:48:
d7:63:cb:07:78:f8:2b:59:51:83:2a:e7:fd:a6:ca:
97:1d:4e:6e:ad:c9:9a:18:de:47:98:96:91:5a:a1:
06:54:90:0b:d6:d8:9d:e9:68:f8:7d:90:c4:a7:97:
0f:47:56:9c:d5:06:ba:08:f2:b6:3c:11:94:92:98:
4d:93:2a:0c:ec:47:ec:9f:62:df:75:5a:e6:5f:2c:
08:b5:a8:57:84:99:88:bd:c9:04:be:90:3c:2f:14:
87:fe:86:11:2b:02:bb:53:cc:63:53:a5:44:42:44:
81:71:4f:58:37:4c:6e:67:68:fc:26:6f:e5:44:43:
cf:85:4b:90:dd:a8:b2:27:dd:84:a8:33:c2:e0:a7:
f3:63:01:df:a2:51:b5:79:96:55:81:60:04:0e:9f:
09:3c:ed:ff:69:68:24:e8:40:2b:ea:ff:06:7d:e7:
91:26:30:e9:b1:83:97:ca:d9:50:54:ed:94:7e:41:
71:53:39:be:6f:9b:62:32:67:e1:d6:e6:3d:91:cc:
7c:97:eb:92:29:45:7e:c5:ce:b7:27:8a:3b:97:72:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:B6:E2:E0:86:AD:71:FA:CD:B4:EF:70:CB:B1:F0:1A:E2:64:F6
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1c:4e:11:80:9d:46:4e:03:f0:ae:50:2c:ae:2b:1e:d6:34:
b7:50:73:eb:8d:c9:e6:26:18:2c:63:b8:e2:f7:98:c2:af:58:
b9:35:db:83:e9:a5:18:c3:71:78:5f:d5:b9:8a:65:33:a4:82:
5c:94:87:dc:a0:25:46:c3:39:d7:9a:c9:60:a9:a7:ad:48:c3:
fa:2d:03:ae:00:15:52:01:d9:8c:cc:3c:69:5a:17:62:0e:fb:
53:7f:9a:06:37:ff:43:a7:d0:8c:72:3e:df:03:64:99:ae:6a:
ab:32:5d:20:bb:d4:4a:34:0c:30:c6:e9:be:60:f8:80:83:a6:
a1:4f:0d:b1:8f:a4:6a:8c:aa:40:42:96:b9:8e:c2:e3:e2:c9:
67:fd:cc:0e:e3:cd:63:be:51:92:8b:a2:4a:93:1c:9d:39:d9:
06:4f:47:32:9a:5d:9a:13:42:7c:3e:8c:e6:fc:28:81:ac:4b:
c7:81:b6:52:3e:a7:43:9e:6b:ba:d3:a1:5f:3c:04:e6:e4:bc:
56:7c:d0:46:ea:7a:4f:b4:63:c8:18:47:b4:6f:ae:74:d2:26:
5f:70:7f:44:e5:e6:3c:f6:7d:a8:1c:5b:45:c3:a6:a5:9c:fe:
8c:c6:c0:29:a0:46:30:c6:4c:e3:b4:cf:13:73:06:fb:c0:73:
14:57:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client