Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: qEy2ao/+t9D3JnA4eT8y93fu/tzeXXmSHVEPTpgjnTE=
Subject key identifier: D8:C5:EE:BC:60:8E:AE:2B:EB:DB:F3:01:11:FA:EB:AB:08:B6:2E:3D
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 019CA7FD2EBA3E6B02E355D6010080F780C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 13F2
Signing time: Sun 01 Mar 2026 06:01:53 +0000
Manifest this update: Sun 01 Mar 2026 06:01:53 +0000
Manifest next update: Mon 02 Mar 2026 06:01:53 +0000
Files and hashes: 1: IokgSudl3AkR5yh01t-OFzPg4qE.roa (hash: KcJVO/wfX/Xcbn1mfQvmOj8I+t/hByN+WDPLWTnqUfw=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: MyYLPKRNIfwamYsVsNbweP74V9cBCD1V7Mw0AB/foUY=)
3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fd:2e:ba:3e:6b:02:e3:55:d6:01:00:80:f7:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Mar 1 06:01:53 2026 GMT
Not After : Mar 2 06:01:53 2026 GMT
Subject: CN=d8c5eebc608eae2bebdbf30111faebab08b62e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:90:43:0c:a5:38:bf:27:02:a9:b0:f7:cd:
50:5a:b3:7a:ab:40:3b:8b:33:4c:e2:b7:e8:91:a7:
10:56:f9:2a:8e:97:f8:3d:ac:27:0b:2b:82:7e:01:
62:84:34:25:f5:4d:cc:45:67:01:a0:ee:c4:bf:72:
f9:a4:44:24:d3:37:ee:aa:c4:45:57:91:92:95:6d:
da:49:af:e9:ef:86:20:21:c3:c6:4c:20:08:06:50:
8f:11:f9:e2:f7:04:12:63:69:a3:ac:57:f3:ea:d6:
bb:83:c9:ae:60:1f:79:ee:b1:f8:45:b1:99:15:7b:
1a:7a:24:02:4b:7c:3e:e5:d9:63:14:44:4a:f0:84:
cc:ce:56:c7:49:49:fb:df:37:c3:8d:4f:9c:0d:29:
e4:af:f4:e8:1a:6a:25:e3:78:ca:e0:7b:86:a8:dd:
5f:37:7a:7a:05:4d:7d:86:3c:29:27:a6:63:91:dd:
a7:43:57:a6:26:a6:34:12:45:66:b4:cd:83:64:79:
bc:b5:7e:19:74:c2:06:53:f9:86:92:82:a5:55:bc:
3c:4a:b8:5f:6d:c4:dc:d6:bf:ce:b0:18:4f:93:f4:
65:8d:89:9e:b9:b6:bf:90:a1:94:ed:af:01:7e:bb:
84:93:4c:c9:62:02:9c:72:ed:8b:e7:13:e5:4d:2f:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:EE:BC:60:8E:AE:2B:EB:DB:F3:01:11:FA:EB:AB:08:B6:2E:3D
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d2:2d:80:a4:c8:a5:ef:5e:38:a2:bf:f5:1c:21:b4:21:16:
64:35:cd:6a:c5:65:19:76:ca:8b:7a:4a:63:f7:4c:0c:aa:12:
c8:57:48:69:91:1e:6a:99:2c:3c:18:55:f4:06:33:0c:2c:0c:
81:c3:fc:61:7d:d4:16:ce:39:e8:c1:52:a6:21:8f:ae:1d:6a:
76:15:90:83:1b:be:7c:43:c6:af:f7:2e:9b:2d:4e:53:55:a2:
89:29:18:40:cb:0d:5e:80:6a:6e:e8:0a:83:b9:cc:e8:65:48:
e4:2a:7a:bb:6a:72:8d:a0:ab:c2:24:41:67:42:b0:ee:54:7b:
2a:9f:db:e8:13:f6:36:f3:dc:b4:ba:c2:00:48:db:40:d5:2d:
8f:f6:35:b6:9a:b5:13:94:ec:db:10:77:e3:80:de:a4:1d:c4:
b5:11:4f:d6:25:8b:2b:ec:ec:43:02:ff:69:8a:f7:37:a9:70:
7d:00:84:be:b3:db:e6:1c:5d:1c:8f:01:58:d6:21:4e:7a:69:
12:27:5c:d2:3c:b3:98:96:c4:61:c9:9e:5f:1e:45:49:71:b8:
a4:81:d1:3e:4f:56:0f:33:93:c4:45:a7:81:64:79:15:cd:a3:
2c:0e:86:83:b5:40:d3:5b:f9:aa:57:ea:89:68:87:e2:30:b2:
b7:d2:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:44 2026 by rpki-client