Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: LmJP7kusMx0aq5w73rNhCd0Zfmvha/WghLoezfd1qpg=
Subject key identifier: CF:D5:69:B8:49:CC:3C:3C:20:3A:9E:40:FC:89:8D:39:89:C7:AD:63
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019D3752AEB4A3507865104207EA2D0007ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: lLDgCUAn8dDKjztBB/jOGzZ8aR0XMkuiiw7IVX4N9uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ae:b4:a3:50:78:65:10:42:07:ea:2d:00:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=cfd569b849cc3c3c203a9e40fc898d3989c7ad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:0f:01:40:35:22:5c:83:5c:3b:ab:f2:98:
6e:2f:12:de:dd:f6:f8:b7:07:f1:07:42:16:c1:08:
9d:6c:4b:fc:58:e5:64:9b:89:72:c3:16:4c:ea:37:
9f:19:58:9f:e1:9e:dd:03:59:e8:6b:e4:1c:91:15:
74:62:d5:53:e6:8a:0a:f4:86:3c:5a:e0:0a:b7:ff:
f9:59:a7:bc:4b:d3:2d:71:2a:80:9f:e4:c8:05:2d:
a0:bc:30:06:53:d3:94:5e:83:71:38:43:5b:cb:b2:
a6:a8:a0:eb:f7:44:5f:03:01:51:a1:58:7e:c8:74:
2e:c0:13:a4:39:b5:ac:71:e8:3e:73:c4:77:1a:42:
a8:7d:bb:36:df:16:1e:ca:51:69:8a:f0:7b:e3:de:
0b:9e:64:59:46:3e:9c:82:e8:92:07:ff:ef:69:45:
20:34:06:cc:19:71:bf:3c:a7:46:e9:09:d2:67:e1:
ab:01:5a:08:bd:69:d5:bf:f7:c0:fd:a3:94:38:7e:
a1:32:70:e9:1f:6e:43:a3:ad:9f:d9:33:44:28:06:
60:eb:e8:96:8f:bd:d6:ba:18:20:0a:ed:b5:c9:b3:
fc:75:69:13:b6:31:86:8f:cd:2a:2e:3b:e9:4c:ab:
59:e8:bc:5e:f6:ce:ee:d4:7a:07:7b:72:d3:13:e9:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:69:B8:49:CC:3C:3C:20:3A:9E:40:FC:89:8D:39:89:C7:AD:63
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:23:8e:14:54:55:c2:12:4a:43:a7:a1:6e:ae:ad:88:65:08:
4e:98:46:78:e1:01:49:78:bb:d9:ed:51:b7:8d:47:86:3e:cb:
33:c0:05:e9:30:98:d7:df:55:41:ce:5c:c1:4c:c1:4e:00:a5:
d8:72:cb:4b:46:5c:56:aa:ad:f9:85:61:f4:d0:01:18:9e:be:
71:e3:3f:00:70:d7:ad:d6:47:82:6e:c9:f2:0d:16:e5:d8:8b:
39:f1:91:a1:98:f8:e9:67:c8:9d:91:c8:5b:32:54:d2:4f:5f:
af:ad:07:52:e9:23:77:88:36:54:0c:02:66:60:bc:5d:4d:44:
06:30:a2:58:72:09:86:bd:10:7c:39:33:1a:35:36:6b:f5:a1:
71:2f:39:62:06:76:84:89:2a:3c:bb:29:a3:87:73:bd:d2:e9:
36:49:28:e0:aa:14:77:ef:b7:e1:c4:6b:9f:31:54:b5:69:88:
08:9f:41:7a:dd:f5:2f:b2:a6:df:15:d0:59:2d:59:21:b4:46:
e9:d8:c7:0a:19:b2:c3:4e:1e:5e:71:4c:eb:30:0f:1b:12:31:
ec:02:4e:84:15:5b:c8:c1:84:37:20:3a:5f:5f:1f:ed:7e:cb:
ec:88:51:48:86:71:fb:f6:fe:65:03:80:fc:97:4d:07:65:8f:
8c:e6:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client