Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: knWAQBza0taE45rv7wIzSVR8OgtG/zvVPnN2mQafh4g=
Subject key identifier: 23:6F:AB:0D:0E:A5:6B:D8:ED:8D:E7:B7:F5:38:1F:DB:E2:E9:A2:20
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 019CAAC6052D07D1109B1CC5C4DB0DD8A70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 17F5
Signing time: Sun 01 Mar 2026 19:00:29 +0000
Manifest this update: Sun 01 Mar 2026 19:00:29 +0000
Manifest next update: Mon 02 Mar 2026 19:00:29 +0000
Files and hashes: 1: TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa (hash: uq4vQs4ODd9sCXDYk4Ut6c6LpnPmQWEBmYs07mf3VWY=)
2: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: v/fkKOuPixcOUQnViMQ680Ceke+pAatoEI1vij1nsR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:05:2d:07:d1:10:9b:1c:c5:c4:db:0d:d8:a7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Mar 1 19:00:29 2026 GMT
Not After : Mar 2 19:00:29 2026 GMT
Subject: CN=236fab0d0ea56bd8ed8de7b7f5381fdbe2e9a220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:98:7b:95:0a:1d:f6:ea:54:cd:3e:9f:65:
82:e2:7b:48:5e:4b:28:c3:f3:a3:4c:92:6b:d1:0e:
b2:32:af:04:11:49:b4:e6:2c:b7:51:1e:81:30:49:
b0:66:36:1b:74:6f:95:63:1a:6c:f5:37:43:36:6b:
25:b8:12:b2:cd:bc:1e:e9:0e:ac:84:1b:c5:8f:3e:
16:4f:af:5f:c8:6a:aa:27:f9:2e:70:29:16:0d:b6:
70:28:c6:dc:bb:57:a1:10:85:88:63:bc:ae:3c:ce:
4d:9f:ed:1f:cf:52:f9:52:30:be:5b:ad:15:4f:75:
ba:f2:ba:dc:4f:71:14:67:10:50:1c:0e:27:c5:ec:
13:a0:e7:a3:78:09:b1:d9:a3:eb:76:5e:ff:ce:f7:
8e:9d:1b:cc:81:f0:c7:f3:b0:0a:4b:7b:d8:c9:a8:
46:99:eb:a9:5c:20:a1:36:cc:6d:a0:a7:9f:4c:34:
e3:20:f3:83:c0:8d:23:2a:a0:75:bc:51:c8:c6:08:
5e:51:65:e6:e8:60:20:a8:49:84:80:42:0b:ef:bf:
23:85:63:7a:1e:b2:78:d5:75:3d:49:a2:e2:85:7c:
85:04:19:98:e5:4d:e2:c5:23:2d:23:65:53:8c:14:
f6:c5:22:82:73:42:f6:41:58:2c:f0:1f:4d:2d:dd:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6F:AB:0D:0E:A5:6B:D8:ED:8D:E7:B7:F5:38:1F:DB:E2:E9:A2:20
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:55:3c:9b:fb:f6:4b:5a:d1:50:6d:27:7d:14:c6:8c:6e:90:
9b:78:10:ca:db:b2:50:ef:7e:fa:2f:ab:c6:b6:38:8e:49:ec:
0a:2f:41:61:46:8f:9e:fd:13:90:5e:72:14:61:3d:75:ba:b5:
ec:f1:92:52:37:af:01:12:c6:11:13:d3:3f:35:c8:88:e7:26:
a7:3e:b2:c2:60:03:41:e9:26:d4:43:a3:e2:aa:2d:5d:88:ab:
70:78:8a:cb:6a:9e:9b:a1:94:5b:f9:98:a7:8c:aa:ea:23:ed:
9f:5a:8a:a7:1a:64:96:07:7e:1b:6d:0a:4b:e2:2f:1a:50:5e:
df:85:74:42:25:ba:1a:57:62:4f:ad:60:fa:f7:4c:9c:3f:84:
74:81:6e:11:c3:d9:4e:28:dd:16:55:8e:cd:81:69:20:23:b2:
17:c9:8b:b5:f9:1c:d3:da:54:40:e6:a7:f2:a7:ea:7a:a1:ad:
f9:65:bb:b9:12:73:9b:43:bf:ff:3a:76:7f:da:39:40:4d:ce:
57:1a:39:b8:50:17:ad:a4:90:4d:e6:8e:f7:81:bc:3a:fd:16:
f2:08:c9:06:b2:91:25:4d:5c:d5:97:1f:27:89:bd:d7:44:b6:
d6:9b:fb:91:6c:a0:0e:c2:ae:24:c1:9c:44:41:3a:15:56:ff:
2a:90:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:10 2026 by rpki-client