Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: znTImHngwVvXUcHolC1HyvtV/OQyQImRuiEp0V7cwO8=
Subject key identifier: E5:28:F8:C4:4D:B4:1B:C0:5C:1B:F8:39:E6:18:74:B1:84:8F:6C:41
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 019CACB55B0DE0036ABD57645E51D3CA6240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa (hash: iWxHjwfuXSnOXM+4EBopGhWz6sGJ/Fj0z8QWrUeSyfM=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: KHZ+0E9sK9+95MHce1pMaNRHtKE99tPgMtC1C+2A1WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5b:0d:e0:03:6a:bd:57:64:5e:51:d3:ca:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=e528f8c44db41bc05c1bf839e61874b1848f6c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:86:68:45:7c:e0:7e:54:95:4e:ab:ed:6b:
be:4f:86:e8:d5:17:1b:e2:fe:97:b4:d7:7c:36:2b:
a9:9c:44:83:a5:0d:7e:3b:b7:37:18:c1:e4:65:7d:
5c:2b:c8:a0:32:ae:fb:3a:e9:07:85:d7:c2:b2:92:
9d:34:a9:be:64:4b:07:ac:7c:47:79:87:e2:31:11:
42:11:e7:6a:bb:24:44:04:78:5c:17:72:9b:d6:08:
a3:1d:a7:e8:76:6b:62:26:b6:ac:ed:1c:6d:26:33:
e7:24:5f:4a:81:10:1f:40:10:26:d9:dc:e2:59:01:
c5:7a:06:d3:37:dc:5d:aa:2e:67:30:b6:37:2b:21:
d3:05:d9:73:1f:71:95:36:72:53:55:d8:4f:5f:a3:
87:df:b0:d5:3b:c0:14:80:68:24:cf:6d:21:bb:7e:
3b:a3:de:1c:58:5b:77:e3:c2:38:5a:4f:97:8b:24:
89:dc:e5:8e:2b:cb:20:80:b4:7a:6c:6c:72:b7:bc:
af:0a:45:50:ef:7e:08:92:ec:c0:17:d0:40:ab:2d:
7a:2b:30:a4:37:30:ad:c0:b3:ad:6a:b8:60:6f:31:
e1:83:bd:fa:1a:71:09:16:68:b7:9d:a8:f5:c9:e5:
a3:41:fa:98:10:b1:c8:15:53:94:72:d8:af:19:00:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:F8:C4:4D:B4:1B:C0:5C:1B:F8:39:E6:18:74:B1:84:8F:6C:41
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:ec:b4:3f:3c:47:03:bc:fc:17:4e:d4:f0:15:83:40:64:
ed:ef:3b:46:46:2a:44:39:a5:f4:2a:6c:18:eb:3c:18:fd:12:
ae:13:5e:ec:50:29:68:1e:d1:ef:05:51:67:44:78:0e:9b:16:
91:e6:5f:f4:a9:46:1f:ec:79:4b:8a:20:12:4f:44:f2:44:d8:
77:0c:8a:b2:0f:3d:fa:0f:44:df:3d:f7:22:76:eb:98:34:a7:
3a:75:3f:d2:1d:fa:8c:49:ea:4d:da:ab:08:7e:b5:1d:3e:88:
2c:a9:41:0f:54:b9:5c:9a:da:8b:e2:ed:da:b6:ca:af:94:8f:
7f:97:4c:d0:9c:66:e9:9b:83:52:18:ff:ed:d3:6a:ef:44:32:
bf:f0:48:5b:41:2f:d3:80:88:d2:8b:22:4d:35:2b:f5:03:e6:
f8:88:b6:d5:20:f5:f4:d0:77:0e:4e:d8:2d:6f:a2:cc:c6:17:
8d:1d:38:a1:30:75:cb:99:ec:21:e0:3a:58:d2:74:4a:f3:22:
4c:c0:34:58:97:5d:4d:76:56:23:f1:7b:e2:d6:86:3a:5d:6c:
68:98:66:53:4c:7a:04:aa:21:68:95:32:57:4c:ff:a0:be:8f:
28:4e:37:87:fe:19:c6:18:bd:18:57:3f:1e:af:31:d2:4a:d4:
25:b8:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:30 2026 by rpki-client