Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: brnncYLPbOYqMu2abVav526XssnJnyhI0AGmN8HBbYM=
Subject key identifier: F6:1C:C3:E8:16:69:18:E1:BC:6A:E5:D2:4F:42:1A:02:1A:DB:50:81
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019D38658F86A7C3F073D5FE09F3750FFC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 076B
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: VoOw1cAQC+h8yyC5h3VCTXxuLMlYX0tv88Q6eCWMmuU=)
2: vlUmsnf6hFJJ_ExSqkIBAJq54y0.roa (hash: Lg+/aX3TWQ0Z5VlbPaXH4EbEoo4bdOS3f3c2Bb0++BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8f:86:a7:c3:f0:73:d5:fe:09:f3:75:0f:fc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=f61cc3e8166918e1bc6ae5d24f421a021adb5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:f3:9a:61:0f:3c:a4:9f:d2:75:12:5e:a2:
66:e9:0e:02:e6:69:0c:05:1d:e3:f8:81:df:14:e2:
30:a4:5c:57:63:b7:28:10:fe:5d:d2:e0:d7:34:22:
17:ab:78:e4:69:18:bf:01:75:8e:62:82:94:76:e7:
0e:aa:98:c2:72:57:c4:1f:f2:8f:2e:82:fb:96:2d:
67:67:6c:6f:b2:1a:5f:8c:b2:93:f5:a5:60:61:18:
c2:48:eb:a6:59:83:09:a9:00:8c:09:00:2e:81:e5:
72:55:a1:79:9c:79:91:30:d1:0b:20:af:21:63:b1:
e2:49:15:8a:14:a9:80:00:af:18:cd:8d:1c:09:47:
b6:de:55:de:be:57:ce:48:2a:ee:83:5e:e5:cc:0b:
05:67:16:93:6b:5e:b8:1e:5e:12:60:65:e2:4a:af:
3d:5d:4c:f4:b1:32:07:9d:5a:7c:4f:64:83:14:57:
1d:d7:a6:28:86:96:de:a5:12:75:62:8b:bd:a7:38:
4b:21:aa:3b:d3:b5:57:87:59:f1:e7:51:f6:8e:a7:
75:cb:cc:fc:b0:94:e2:02:e9:0b:24:54:f7:98:65:
e6:89:a3:d2:8c:18:85:1e:15:2f:4f:45:53:0c:24:
12:54:65:a3:bf:25:62:69:4e:ec:65:ed:b4:1e:b3:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:C3:E8:16:69:18:E1:BC:6A:E5:D2:4F:42:1A:02:1A:DB:50:81
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:60:74:25:56:73:7c:28:4a:0d:ef:b1:bf:2c:ee:db:20:c4:
b0:ec:1c:34:ae:c3:cb:d6:46:d2:fa:5a:21:bf:f0:c5:e4:00:
85:bf:86:12:be:e5:ca:23:d9:f2:44:74:ab:4f:f3:99:11:db:
b5:57:60:72:6a:76:62:62:4c:2e:c8:d1:87:e5:4f:85:60:aa:
e6:e9:59:2c:55:a4:6c:03:4a:e6:b2:93:12:e0:d0:b3:20:62:
1b:b2:4d:2c:72:c7:6a:9b:49:67:e0:ae:a0:d1:f5:bf:66:3e:
8a:04:f7:d1:29:39:ab:94:59:b4:50:3c:02:03:9a:bc:86:7b:
52:e3:af:b2:27:14:e1:b5:5f:2e:ea:08:c8:88:0b:1c:ca:44:
ca:c9:89:fc:af:a8:a2:03:2f:6e:95:1b:e0:78:dd:f9:9c:d7:
4b:2a:67:42:5a:3c:4a:24:49:cd:6d:c3:de:6c:b6:29:c9:f6:
d5:0e:28:d9:9b:21:86:25:f4:95:d8:9e:16:2e:fe:79:ee:d3:
27:fc:56:48:04:49:3c:8e:8f:ab:d6:00:cf:e4:9d:af:11:45:
e5:40:da:9d:81:e4:48:6a:9b:9a:e5:bb:0d:0d:ef:d9:67:d0:
b9:6a:e9:aa:8c:db:6a:b7:2e:3c:2a:c6:eb:32:76:0b:57:32:
26:73:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:50 2026 by rpki-client