Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
File: wIneL0L89EpNqraoJMEgq7i3Fl0.mft (raw, json)
Hash identifier: t2rz/501Chex7DJ5drFmYFXHhBFqZtNQxsLGXG9k5sw=
Subject key identifier: C3:E1:A8:9E:A2:94:24:C0:B5:C6:25:2B:8B:BF:13:BE:69:44:CD:BF
Authority key identifier: C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
Certificate issuer: /CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Certificate serial: 019D38D359AF27A2A0FBE640B6B170515233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
Manifest number: 023E
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: I3Xf9VKD-tJpcuIxLlSODq6ARfU.roa (hash: 7g0Zv7NUV1llXr3xxVw2ZytxF911Q+NrrEu/LVgTpkk=)
2: W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa (hash: MBpCLgOals90jJpQV95qSwbxGgxUH35zT0YlklNTg2M=)
3: wIneL0L89EpNqraoJMEgq7i3Fl0.crl (hash: wrGDoricHaUDD8F7TbQ4VH2o1zpn+NvtBjEaq5piaYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:59:af:27:a2:a0:fb:e6:40:b6:b1:70:51:52:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=c3e1a89ea29424c0b5c6252b8bbf13be6944cdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:42:6a:ee:7d:77:17:bd:0c:8d:7f:99:c3:
2b:db:99:11:4b:9a:46:74:d6:dd:fa:c8:29:95:03:
d7:e1:4b:c3:2d:e2:b2:ff:22:69:53:24:7e:cb:50:
4c:32:7c:74:fc:2c:c7:7a:2f:f3:4b:a9:f6:9c:9a:
0e:76:ec:41:de:8c:a9:c8:5e:ca:7a:01:ea:e2:33:
db:2b:33:fc:d0:a2:ee:3f:8f:f2:78:17:e3:89:74:
ed:30:bd:24:bb:0a:fd:8e:75:d0:5c:d6:4c:2d:34:
68:1a:ac:2e:f7:d5:dd:88:f7:ae:fc:a0:62:df:5f:
a0:07:12:ba:76:ed:b7:ec:23:e1:3a:66:b8:de:32:
96:4b:ba:37:2e:dd:9c:7d:fc:cd:c2:e6:33:1e:c4:
1f:7c:b2:7b:11:ab:d8:68:3e:b5:4e:f9:0d:b9:11:
92:ec:92:05:02:7e:b5:32:4f:01:63:60:99:31:a1:
aa:27:03:4b:10:b3:92:52:fe:9a:a2:54:50:53:96:
32:47:10:95:c1:c5:23:5b:f5:c4:40:5a:b7:17:5c:
6a:2b:26:f0:cb:d4:fd:33:09:21:1f:3a:6a:58:26:
3f:1b:fd:50:31:eb:1a:34:46:1f:80:99:e1:90:17:
b5:53:da:86:43:10:04:bc:5a:60:f3:8a:6e:48:fc:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:A8:9E:A2:94:24:C0:B5:C6:25:2B:8B:BF:13:BE:69:44:CD:BF
X509v3 Authority Key Identifier:
keyid:C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:51:ed:ad:fe:d0:de:f1:11:2a:2d:40:44:a8:4e:c9:88:2e:
f3:af:fa:00:49:d5:99:f8:ac:67:fe:02:95:41:29:10:9a:68:
da:e1:7c:d6:95:df:4f:6a:30:1b:92:01:be:18:23:b7:75:e8:
24:7c:f2:66:49:ea:9a:5f:0f:2a:3f:ec:66:86:05:79:14:aa:
d8:87:af:70:f8:cf:f7:d4:25:40:26:74:d2:e0:d4:c8:c0:30:
7f:91:03:bb:c9:65:35:c8:4c:a8:7c:64:94:81:81:3c:80:b3:
f7:eb:c6:af:e0:ee:fa:98:d0:7a:33:d1:23:64:9d:e7:18:42:
5f:11:66:60:d0:b7:ce:2f:e8:2d:c5:b4:db:e8:52:c0:00:ad:
8e:84:fc:6b:d2:6c:a0:71:ba:90:dd:a2:5c:39:1c:3c:d0:4b:
59:20:f4:df:52:df:97:1e:e6:e9:83:75:b0:4a:3b:44:5a:b6:
8f:52:61:ba:c4:dd:d4:cc:2f:e2:2b:a8:1b:33:f0:bb:06:66:
73:a4:a5:aa:76:5f:b3:4c:d9:e2:70:68:00:54:5e:ab:e5:cb:
fd:a3:de:a8:06:e4:42:9a:96:02:28:24:b8:27:f3:89:3e:4e:
30:d9:52:0a:4a:11:4e:e2:55:48:42:77:d2:ff:a6:85:d8:1c:
19:18:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client