Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File: dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier: wV/RqbLaibLEljycR6t6+6As6Dm79GEiMvaq0k0rXak=
Subject key identifier: 5A:98:EE:C7:0E:F5:3D:E9:BF:90:07:0E:9B:FF:D2:4F:13:AD:58:68
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 019D3977F6D1956312F7FAD380A3FC47C0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number: 1829
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: T1wzOJHSS/Xol900a3PuKTvkDHulWMwJ3QmKsUU9xJY=)
2: eEDMI9EWeOPChG5XbrAWLtEHI_w.roa (hash: Xe0k2b+LaeqrGNhq3Bb77UB8l2FoXh1XrZU68OpxkZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f6:d1:95:63:12:f7:fa:d3:80:a3:fc:47:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=5a98eec70ef53de9bf90070e9bffd24f13ad5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:de:c6:f0:9c:f3:55:dd:7f:56:ba:b3:81:
2a:d9:c1:e7:4f:68:dd:27:a2:93:4c:e7:2f:1c:32:
ac:6e:87:7e:b8:2d:ac:84:11:80:94:43:c6:b1:55:
07:37:de:52:79:53:d0:1d:f0:5a:a0:87:93:ca:c7:
87:bc:fd:ab:ca:c6:9e:6c:2f:4b:9f:e0:9a:e0:f9:
19:70:df:16:73:6e:65:d8:61:34:6d:39:f3:8f:44:
57:b6:f6:57:9a:c9:2e:1a:0c:60:64:2c:3e:e9:8b:
97:80:88:67:f9:c4:b3:32:8d:08:9b:f6:26:37:6e:
9c:4b:63:2c:f1:35:87:07:c0:06:0b:c1:82:69:94:
7f:5d:4d:8f:44:44:68:76:b8:7e:b3:be:ff:6e:77:
4e:15:a5:f7:31:d4:25:a5:99:24:a1:bb:b3:e4:6d:
98:30:f0:b7:59:93:5c:81:a7:2a:71:4f:35:5d:a2:
ec:02:ef:1a:76:5b:1a:ba:f9:f1:e2:21:bc:4a:d9:
ba:89:4b:91:56:0e:49:89:2a:55:6b:fb:a2:47:0b:
9d:39:5f:a6:5c:d3:b6:bc:3e:8d:7b:a4:c0:22:8b:
e7:00:09:8c:a0:54:d3:a0:7c:4d:db:5d:93:7a:85:
67:e7:e0:4b:38:1f:10:15:7b:c6:38:04:46:64:87:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:EE:C7:0E:F5:3D:E9:BF:90:07:0E:9B:FF:D2:4F:13:AD:58:68
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b4:7f:6e:4c:92:d8:51:ec:68:81:49:0e:ef:82:c3:24:e4:
4d:49:0d:18:d5:86:5e:9b:a0:4e:c6:8d:f8:7a:58:16:15:00:
dd:50:ab:f7:b1:b0:0e:85:34:ef:c7:b9:88:d8:b1:74:46:15:
00:26:9a:91:85:8d:fa:9c:1f:f8:80:95:89:03:c5:fc:c4:04:
dc:96:8c:44:eb:4e:b1:bb:73:8d:ea:f7:f8:3f:81:3f:a9:45:
73:30:be:8f:80:35:db:6c:46:a3:ce:ba:89:f9:75:d4:ca:f3:
95:70:90:1b:72:cc:d6:1d:f0:9e:de:c7:71:c4:9c:e6:17:f7:
7a:3f:10:46:fc:35:3d:19:f7:c8:29:96:5f:1b:c0:e2:2f:5c:
96:bd:b0:69:69:d1:d0:5f:76:cb:20:24:d8:73:f3:0b:4f:fd:
fc:a4:cb:cd:47:47:94:60:54:24:46:95:73:79:d5:7d:d1:a7:
22:26:39:31:da:07:8f:94:6c:22:e5:a2:04:d0:89:34:65:c9:
72:87:2f:ca:60:e8:68:38:81:1d:3a:9c:64:80:c6:7b:61:cd:
f1:c8:66:36:68:2f:ae:1a:63:f0:3a:98:00:f0:bd:58:f2:9f:
26:bb:8b:46:47:d6:50:8b:df:c8:e0:f2:85:a7:bb:74:38:0c:
33:1c:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:45:58 2026 by rpki-client