Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File: _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier: cR0dd3wDZmGt9mhh1zrbLKC8GN8bdOTH3Kml4lKRZSo=
Subject key identifier: BA:DB:3B:D3:3F:BA:C5:7A:3A:2D:54:6A:E9:E3:F9:B3:A5:BC:37:89
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 019DCF080CD42AEBCC56D67937F2035BEAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number: 1724
Signing time: Mon 27 Apr 2026 13:01:44 +0000
Manifest this update: Mon 27 Apr 2026 13:01:44 +0000
Manifest next update: Tue 28 Apr 2026 13:01:44 +0000
Files and hashes: 1: 8huTzHW57A5cCLn4DJengqWUHbU.roa (hash: QbaePOyAbanHl8XCDKIaOAWESWKmtviz49Mi0ZJ8gU8=)
2: _6DXV1WE0v-oybUplKLLF-qO42Q.roa (hash: Iu/YSu6oOqTfa7ZyhKaNhQqb474GLyUXE1gWIy1f6g4=)
3: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: nFYPI5YTeyX2p0FPQBhGcTypjN5Ex0TUmrvuGH8kKbA=)
4: cnRs0nFBKnPSwQ1F-1xOIce5la0.roa (hash: OKJospeoF5ncHQtQYt7c9nFDBBSFOmh/9wk/WbCnrEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:08:0c:d4:2a:eb:cc:56:d6:79:37:f2:03:5b:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Apr 27 13:01:44 2026 GMT
Not After : Apr 28 13:01:44 2026 GMT
Subject: CN=badb3bd33fbac57a3a2d546ae9e3f9b3a5bc3789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:a4:08:59:bd:ad:25:be:32:5a:d0:93:13:
fb:59:fc:00:3e:03:01:16:0a:dc:37:32:bc:89:45:
20:99:49:95:b4:21:f3:99:1d:f3:c2:cc:1f:50:db:
c2:12:f0:c1:49:3a:bf:e4:fc:77:9d:7e:d9:cb:57:
93:87:bf:aa:52:2b:5a:83:1d:87:3d:2f:83:c7:1b:
36:85:80:e1:39:5b:51:97:3f:1c:6c:dc:ad:c0:b5:
ac:2b:2a:2b:b7:3f:a9:38:7f:26:d9:a1:24:c0:46:
44:ff:2c:ca:2e:ae:c3:c3:e7:bc:de:5c:f9:f7:e7:
92:2b:05:88:30:a1:2d:de:e0:d7:e2:5d:5f:7a:79:
97:bb:51:ca:6b:74:b1:a5:64:12:e5:54:26:53:e2:
3c:56:67:5c:b8:f7:04:42:3f:f1:00:1a:81:fe:2d:
f6:ef:82:5a:57:72:44:60:3a:74:bb:c6:67:98:93:
3a:73:0f:cd:fe:43:f6:90:a6:58:ee:fb:fe:9e:fb:
52:16:28:ff:0f:b7:46:7c:74:fa:2e:92:1e:2e:88:
cf:04:0f:ee:51:5c:50:36:89:8b:b9:20:ac:a9:24:
db:7e:2c:ce:3a:c5:a4:e9:e7:ee:0c:db:a6:f7:54:
6d:cc:e9:38:8e:01:93:f2:4a:40:d8:e0:2b:c8:54:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:3B:D3:3F:BA:C5:7A:3A:2D:54:6A:E9:E3:F9:B3:A5:BC:37:89
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:05:2a:32:14:1b:4f:fa:32:ef:bd:9e:e2:ec:1e:93:4e:ce:
c3:d2:8c:79:5e:0a:e3:ce:5b:96:e5:05:c0:bd:35:20:85:71:
32:4b:e4:cd:eb:96:9b:66:e7:54:af:16:73:a6:b8:3e:58:45:
c8:8f:30:96:f4:72:74:cb:71:8b:7f:88:f2:5e:e7:64:a2:9d:
75:fd:7b:e1:ee:3e:6d:1f:8c:8d:53:d8:3d:8c:24:82:ca:5b:
50:21:6f:db:4e:04:59:6c:c7:31:46:54:73:bb:7b:18:2f:2b:
eb:30:ea:3b:f6:f4:ce:52:26:3e:92:f7:33:f8:7d:a1:1b:60:
4e:fa:da:f6:67:7b:db:14:af:f0:04:0a:ce:04:24:88:b8:48:
97:36:57:a2:20:14:18:47:ef:9d:b5:50:90:e5:53:60:80:69:
74:72:b2:87:18:c0:0f:aa:9c:f9:0d:16:55:9b:33:70:33:2e:
5f:41:a3:de:d2:17:c1:52:3b:9a:29:3d:b6:1a:54:b5:fe:53:
0b:a7:a7:7d:f4:44:69:0a:86:21:a2:21:86:41:93:55:11:57:
8c:2c:bf:b2:d4:50:c5:55:d9:af:d3:0f:92:6c:74:99:78:8c:
3a:54:e2:5f:3b:7e:15:7d:38:e1:7a:24:f9:d1:56:86:24:d1:
0a:8a:17:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PCAzUKuvMVtZ5N/IDW+rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz
YTA1ODIwHhcNMjYwNDI3MTMwMTQ0WhcNMjYwNDI4MTMwMTQ0WjAzMTEwLwYDVQQD
EyhiYWRiM2JkMzNmYmFjNTdhM2EyZDU0NmFlOWUzZjliM2E1YmMzNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4ykCFm9rSW+MlrQkxP7WfwAPgMB
FgrcNzK8iUUgmUmVtCHzmR3zwswfUNvCEvDBSTq/5Px3nX7Zy1eTh7+qUitagx2H
PS+Dxxs2hYDhOVtRlz8cbNytwLWsKyortz+pOH8m2aEkwEZE/yzKLq7Dw+e83lz5
9+eSKwWIMKEt3uDX4l1fenmXu1HKa3SxpWQS5VQmU+I8VmdcuPcEQj/xABqB/i32
74JaV3JEYDp0u8ZnmJM6cw/N/kP2kKZY7vv+nvtSFij/D7dGfHT6LpIeLojPBA/u
UVxQNomLuSCsqSTbfizOOsWk6efuDNum91RtzOk4jgGT8kpA2OAryFTmiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrbO9M/usV6Oi1Uaunj+bOlvDeJMB8GA1UdIwQY
MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt
OGU2NWIzNDdmMjE4LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4
LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwUqMhQb
T/oy772e4uwek07Ow9KMeV4K485bluUFwL01IIVxMkvkzeuWm2bnVK8Wc6a4PlhF
yI8wlvRydMtxi3+I8l7nZKKddf174e4+bR+MjVPYPYwkgspbUCFv204EWWzHMUZU
c7t7GC8r6zDqO/b0zlImPpL3M/h9oRtgTvra9md72xSv8AQKzgQkiLhIlzZXoiAU
GEfvnbVQkOVTYIBpdHKyhxjAD6qc+Q0WVZszcDMuX0Gj3tIXwVI7mik9thpUtf5T
C6enffREaQqGIaIhhkGTVRFXjCy/stRQxVXZr9MPkmx0mXiMOlTiXzt+FX044Xok
+dFWhiTRCooXFw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:47:34 2026 by rpki-client