Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: U7J9kgVu6AKDvfTlTUCvEwb0oplhRlZ2BS7FoZ/6N4A=
Subject key identifier: B9:66:AD:12:8E:AD:71:1D:D2:FA:CB:10:00:7E:45:59:CD:2C:87:EC
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 019CED82C593CD66EA7BF65AD05B9DAE3EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 1868
Signing time: Sat 14 Mar 2026 18:01:36 +0000
Manifest this update: Sat 14 Mar 2026 18:01:36 +0000
Manifest next update: Sun 15 Mar 2026 18:01:36 +0000
Files and hashes: 1: 3zDXj12FVAF9XeXyFE67e6JY6lg.roa (hash: yDL38rTQ8XpaiZahcdQcgu5FHofBAzcqqnIqz6pUsPE=)
2: QDqYZmLzV23YVoA-rNr3_dudehM.roa (hash: DU7wizlaOucg4WwRR/OJogCxUlPPjJyoBT/zCr/m24w=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: nRKaoSqD/lYV2J9dn2tGW8mxd3lrEd6i9gV7t+M93rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:82:c5:93:cd:66:ea:7b:f6:5a:d0:5b:9d:ae:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Mar 14 18:01:36 2026 GMT
Not After : Mar 15 18:01:36 2026 GMT
Subject: CN=b966ad128ead711dd2facb10007e4559cd2c87ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:2c:43:5e:dd:8e:d2:b3:86:6c:a3:e0:ec:
44:00:dc:3d:de:b2:fb:b7:a3:99:23:21:97:86:d8:
4b:50:6f:f4:a7:14:89:27:6d:2a:d0:9e:92:07:e0:
21:5c:d9:e0:77:34:07:b5:e2:3d:7b:26:72:91:45:
0a:ff:5c:07:85:48:95:74:09:b7:05:19:17:44:67:
25:67:25:79:fa:fc:41:25:bc:36:bf:ed:bc:bd:e9:
e6:66:d8:6c:10:44:9b:db:48:18:02:f6:82:49:02:
30:e5:cd:46:90:bb:ac:ab:1a:57:76:ac:e6:35:7a:
39:3f:ef:a9:27:ee:2f:d1:ad:71:a6:99:73:8f:4d:
29:93:51:7d:6a:d5:af:11:0c:84:c8:50:77:8b:fa:
e5:6d:12:42:df:17:c2:b8:8f:18:4f:a2:2f:5a:65:
76:83:fc:52:44:60:8f:dc:0c:37:c3:4e:88:8e:94:
58:f0:30:1b:61:f5:d8:cc:6d:d7:08:ef:d2:7e:58:
6b:cf:6e:15:02:f0:21:c3:ab:65:2d:95:93:98:43:
32:1e:14:c8:ae:17:d8:83:91:3d:82:16:89:d0:6a:
59:31:66:54:34:13:5f:ff:c8:ee:45:fb:db:e2:c7:
d1:62:89:82:f2:e4:f9:92:b7:03:32:ca:f2:7b:91:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:AD:12:8E:AD:71:1D:D2:FA:CB:10:00:7E:45:59:CD:2C:87:EC
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:10:34:3c:f4:58:e1:54:73:33:90:75:1f:70:2e:ab:80:
b1:d0:56:d7:0d:6b:37:66:35:d9:4d:35:65:dc:0f:a7:f2:18:
d4:1c:b9:c1:c4:60:22:04:2d:33:6d:a1:22:b9:b0:f4:d5:22:
6f:6d:aa:64:98:68:a5:c0:02:54:43:da:09:78:fb:17:f9:38:
d2:df:75:b2:c4:54:72:b0:03:56:cb:6f:c6:58:4e:05:c0:71:
30:ba:93:1f:d5:83:fb:34:c3:4e:84:30:2c:a0:86:07:5e:4c:
c7:61:16:dc:36:3b:be:9c:44:8d:cc:cf:8e:5e:d1:ba:9a:3c:
b7:8b:fc:75:28:2f:f4:c6:b9:53:fe:82:ed:9e:43:54:d9:2b:
82:48:84:40:39:ca:d3:e4:a2:ff:b9:f6:18:eb:7b:79:60:99:
f8:1c:b0:3f:10:df:ab:aa:99:93:b6:e6:a3:c6:57:0e:bf:c6:
37:df:58:db:94:c7:e1:5a:57:29:5a:22:d9:03:af:7b:4a:c9:
17:bb:0a:68:79:c1:2a:69:b4:ae:95:0e:24:64:3c:57:51:cc:
d4:50:de:4a:7b:31:b8:61:06:8d:3b:e5:26:28:a4:71:d2:39:
08:bc:93:71:5a:0f:83:d9:43:1b:c4:81:ff:d2:5b:b7:b4:b4:
ad:c1:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:22:57 2026 by rpki-client