Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: F7+z7fn0wCKtd34YiOPLzccRnIssDOc42cPWjRtZyrI=
Subject key identifier: 9D:36:42:3A:74:29:05:23:BE:73:36:07:76:1B:5E:19:B2:06:1D:59
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019CAA58AFF395FD98512CE76972F85EB84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0EA7
Signing time: Sun 01 Mar 2026 17:01:04 +0000
Manifest this update: Sun 01 Mar 2026 17:01:04 +0000
Manifest next update: Mon 02 Mar 2026 17:01:04 +0000
Files and hashes: 1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: +EfkWMQFUG37WU/yXksScYv/qixaPIg7f6+3YnjyidM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:af:f3:95:fd:98:51:2c:e7:69:72:f8:5e:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Mar 1 17:01:04 2026 GMT
Not After : Mar 2 17:01:04 2026 GMT
Subject: CN=9d36423a74290523be733607761b5e19b2061d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:8b:6d:fe:c8:a1:59:f5:f2:d7:b3:62:86:
54:24:6f:df:50:66:75:e1:83:9f:fe:1b:fb:e0:ec:
bd:16:8d:bd:ae:c9:ba:86:39:af:eb:e8:ea:c8:9e:
59:6b:5b:fa:97:ee:66:57:22:d2:6f:e4:0f:ae:bd:
3b:9f:06:37:fb:6c:75:4d:74:86:ec:a7:b5:2a:cc:
2e:85:37:d3:c3:26:0e:9a:8f:6f:e8:23:9d:42:e4:
17:26:34:ce:8b:01:88:be:4a:b4:36:c9:7f:02:24:
ff:6e:c6:d6:a1:c7:9a:71:a0:b5:1f:12:55:65:e4:
78:3b:fb:2e:72:40:55:88:2a:02:b1:02:0f:cc:ff:
af:c6:9a:9e:12:5e:94:a7:74:41:7d:95:21:7f:3b:
2d:4b:6a:7c:08:1c:d5:8d:a0:f6:4f:27:70:fe:6e:
9b:f6:a2:26:81:3b:44:4d:0a:61:5d:c6:63:b8:6c:
f0:58:83:cf:10:55:9e:fc:e6:31:74:56:6e:af:1e:
19:38:cc:7a:72:67:b5:8c:9d:a9:0b:26:90:77:fa:
7c:43:1f:84:89:ab:86:c4:a2:df:71:ac:e9:d1:7f:
06:7a:98:d9:90:cf:5a:51:82:34:89:a6:04:71:c7:
5d:01:dc:e0:44:a3:4c:f3:61:9b:9c:c3:8c:67:89:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:42:3A:74:29:05:23:BE:73:36:07:76:1B:5E:19:B2:06:1D:59
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d2:22:b1:52:75:72:b7:65:d2:2f:3a:c2:87:09:fc:3b:32:
75:29:a9:38:4a:85:9d:f4:22:ed:fb:09:6f:91:be:ff:ab:b3:
95:ae:df:de:0f:3d:03:0a:37:a8:94:fb:6b:ab:13:64:d5:ee:
9a:2c:59:9b:6a:db:97:eb:b6:e3:c5:8c:02:e7:d7:04:58:98:
cd:49:33:13:af:e3:c6:61:a3:0d:12:b1:ca:8f:21:df:5a:54:
7f:01:36:83:ff:41:e6:39:29:09:33:0a:65:0b:f3:14:3c:45:
7a:fa:9e:8a:83:dd:3b:8c:ce:7d:8b:21:5c:ba:f7:d4:61:6f:
8c:9c:0e:0a:96:f3:35:e3:a5:59:6a:38:c8:17:ba:bd:67:bc:
76:47:b1:84:92:f1:88:59:0b:be:60:aa:2c:43:e2:82:7f:5a:
35:4a:8c:77:71:4b:dd:06:95:54:0b:13:5e:0f:15:14:a0:dc:
b8:30:07:03:37:3f:d8:3d:90:b4:7d:85:59:68:c5:04:ea:e5:
06:44:8d:61:2b:c6:48:81:39:65:9a:0a:9f:44:1b:5b:fc:cc:
ba:5e:f5:4a:50:2b:ca:c4:c3:2f:88:bd:26:eb:a5:bf:c2:0c:
9f:ad:80:8e:41:49:4f:39:b6:3a:61:95:0f:5e:73:bc:29:a6:
e7:b2:52:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:16 2026 by rpki-client