Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: 5gsYKm4aDLKaAQgKBCxcgo3cprL9Jo53bngl9r0bVfQ=
Subject key identifier: 42:C0:4B:1B:19:6E:D9:8B:68:BB:AF:DF:6A:44:C1:89:EE:18:D7:1D
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 019CA97D72B6DDB0ABB6ECB30B1AC43DA065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 14DE
Signing time: Sun 01 Mar 2026 13:01:36 +0000
Manifest this update: Sun 01 Mar 2026 13:01:36 +0000
Manifest next update: Mon 02 Mar 2026 13:01:36 +0000
Files and hashes: 1: 8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa (hash: /ZabFzyJivcnbLtz1Of+Qh0KFPOxtwgBRMKumxY4Dq4=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: myfYFCMCWhBVwh1AVBNJfAVAZTVHWXFjgRDugrMu9KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:72:b6:dd:b0:ab:b6:ec:b3:0b:1a:c4:3d:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Mar 1 13:01:36 2026 GMT
Not After : Mar 2 13:01:36 2026 GMT
Subject: CN=42c04b1b196ed98b68bbafdf6a44c189ee18d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:48:37:8a:cc:62:ad:6b:a4:30:85:fb:48:
00:de:29:cf:e9:5f:2c:b1:1d:10:6b:fd:c2:72:55:
cc:6a:ff:d2:0e:8d:d1:45:af:23:46:4e:c6:b7:fa:
19:1d:3c:05:c6:8a:fa:41:ee:5f:8c:65:24:1e:03:
c0:0c:f2:18:6c:fc:ca:84:7f:06:54:83:34:c3:44:
99:52:c0:0e:77:12:18:fa:e0:60:4e:40:0c:15:d9:
38:d0:16:1c:49:a7:9b:07:98:69:17:67:90:24:98:
f8:7e:77:bc:96:13:52:59:a5:78:e4:87:b5:d8:8e:
b8:95:df:f7:9c:1e:1b:9b:d8:eb:ad:0f:57:a2:5f:
b4:37:2f:d2:75:57:38:be:0a:57:03:33:d6:10:eb:
de:be:a7:9a:eb:d2:c9:50:c8:aa:4f:de:13:03:d1:
0d:8b:ce:b0:52:bf:63:28:d0:a5:fe:e6:7c:a0:9f:
ac:30:04:30:a9:a3:13:a8:12:e3:71:39:46:7b:82:
85:f5:2f:50:17:8b:19:a9:d9:5b:f6:67:1a:5d:f2:
0a:a0:58:02:21:a9:2e:aa:46:5a:07:be:f6:c1:ec:
6b:a1:71:31:cb:08:32:dd:40:8c:d9:06:7f:c5:81:
8d:8f:05:dd:a3:c5:d5:19:92:7a:0d:69:82:d6:0d:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:4B:1B:19:6E:D9:8B:68:BB:AF:DF:6A:44:C1:89:EE:18:D7:1D
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e0:db:a8:87:64:e1:43:31:fd:75:c7:1c:3c:7d:62:a8:21:
18:99:c2:7b:0d:ea:d3:11:53:54:99:c2:2d:4c:7b:40:1a:a4:
a2:a9:0e:d7:3b:24:33:37:99:f8:eb:6d:62:db:4c:c6:2f:26:
5e:7c:cf:f0:e9:97:c1:e8:7c:3f:58:46:bf:79:96:59:d6:e0:
d9:bc:d0:67:73:e1:80:35:00:e5:c4:ca:a5:04:4e:aa:d0:e1:
b6:2d:9c:27:31:12:b8:5f:6e:ed:0f:86:9f:13:a8:cf:af:a7:
4f:38:53:89:08:23:52:34:af:18:cc:c2:e7:22:71:91:b5:f4:
6d:6d:87:f3:ea:ea:5e:de:54:c2:4b:c7:87:68:a3:e4:87:ee:
68:98:54:79:03:71:29:6a:cc:03:39:61:97:fa:9c:cb:4e:2f:
54:c2:aa:4a:55:d9:26:13:29:ee:05:b4:e8:d8:df:fe:b5:3a:
09:b1:5c:f1:fb:99:ce:7e:7a:e7:00:b5:f9:a9:d7:54:64:87:
85:73:5b:7d:8f:8b:99:65:72:ad:1e:14:11:8f:0d:37:f4:61:
1d:78:70:69:61:8a:da:8c:3d:bc:0a:d3:31:d3:d6:20:26:3f:
54:31:25:09:8c:45:99:79:15:2a:33:ef:0a:60:c0:a0:97:68:
b0:f5:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:47 2026 by rpki-client