Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: OmcCYOjoQiz/AbhHa60zgYxIhUak+VTjeXm1X9bDftg=
Subject key identifier: 40:4A:2F:0A:46:EF:84:F2:EF:2B:6F:3E:55:B0:04:CA:B4:52:4F:11
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 019D375220C838FA199AC2363C44257218AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0C4E
Signing time: Sun 29 Mar 2026 02:00:22 +0000
Manifest this update: Sun 29 Mar 2026 02:00:22 +0000
Manifest next update: Mon 30 Mar 2026 02:00:22 +0000
Files and hashes: 1: VQhXdpnb-jTQY6PqAAihZNZwDw4.roa (hash: Q2jemjgfE2gR0vDgu/bUC/EL1Il/dNd22FjPO0/dvVY=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: fi+PPS+uuyoOSBcT7rnGPJ5T1JqJoA6FmVHqoQizLJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:20:c8:38:fa:19:9a:c2:36:3c:44:25:72:18:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Mar 29 02:00:22 2026 GMT
Not After : Mar 30 02:00:22 2026 GMT
Subject: CN=404a2f0a46ef84f2ef2b6f3e55b004cab4524f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4b:48:3e:18:e3:95:44:5f:19:c9:bc:8e:69:
29:38:23:20:03:21:05:d2:b7:27:14:9c:e8:64:d9:
c8:31:f4:73:94:16:60:46:5a:77:6e:69:a3:4f:13:
38:ab:40:68:13:48:94:39:cb:8d:9d:6d:4d:1a:c9:
89:c0:76:5a:fc:80:8c:bb:1e:c9:28:5f:60:dd:46:
5a:70:98:66:5e:31:93:24:d4:82:ed:8d:b6:58:54:
01:0c:32:86:19:4b:ec:b8:77:66:aa:7f:f7:c6:5a:
ec:3b:5d:ba:ca:7f:15:a5:6b:4d:a5:54:78:39:0f:
1a:08:74:32:cc:af:fa:3c:0a:03:8e:30:55:f4:86:
c8:d6:4c:30:cc:b2:ae:09:41:b4:e6:2d:71:ed:8e:
57:fb:5e:52:5a:42:63:cd:9e:3b:da:98:1a:30:74:
5b:de:14:c7:6b:bf:f6:40:63:08:b4:87:5b:22:73:
5c:7c:85:79:7b:83:eb:93:2f:ac:2a:2d:8b:d7:6a:
36:5d:d5:60:00:4c:5f:2a:e5:c3:b1:52:39:5a:51:
a0:be:08:6f:4f:45:a6:80:b6:c3:5a:26:77:6b:47:
c8:bb:c4:b0:4b:95:63:55:24:33:6f:f2:79:0d:e7:
63:fd:b1:48:cc:93:73:e1:2f:74:73:c3:0e:3c:3a:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4A:2F:0A:46:EF:84:F2:EF:2B:6F:3E:55:B0:04:CA:B4:52:4F:11
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d5:dc:4b:00:d3:07:fd:fa:e1:a5:73:63:02:f1:fe:45:90:
d1:1f:91:88:ee:ee:2b:87:f8:56:f8:46:21:3b:9f:4d:e3:96:
bf:05:12:39:5c:27:f2:09:43:93:ab:fb:d2:cd:33:e5:57:86:
51:2f:5c:33:42:da:0f:d1:5a:c0:9a:52:91:1e:aa:da:6c:3a:
5a:64:f8:9d:ea:50:cd:27:63:32:94:8a:59:f5:65:36:39:7c:
e4:d7:c8:51:b7:22:c4:79:b7:a4:63:ad:72:e7:cc:01:7c:fa:
e1:b5:00:bc:8d:82:71:55:77:ac:9c:8f:d0:34:d4:bb:eb:9d:
f5:45:27:cc:d9:76:5a:4f:ef:51:9a:32:1b:91:82:20:8c:93:
18:b7:fb:38:1d:be:84:61:8c:b7:39:a5:7a:7b:83:6e:91:39:
27:b3:f9:0a:12:33:cf:91:16:ea:5e:b6:1f:01:a4:be:95:d5:
9d:56:a5:8e:c2:0b:79:f9:22:ca:d0:40:1d:00:14:e9:ca:15:
28:4a:9f:f2:d0:22:9b:32:18:9b:7e:88:78:ff:d8:66:61:a1:
98:c0:2b:cc:de:74:62:33:b8:1d:1e:fa:68:8d:5d:db:31:5d:
27:67:6b:26:c3:27:7d:8e:f4:e5:89:c5:cd:9d:79:ce:e2:89:
9b:53:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:00 2026 by rpki-client