Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier: XHBfep+7I5EZLaYRWiZxptjXrud9PjK7mI+obkG4+UM=
Subject key identifier: 57:B5:B1:BD:A6:6B:D8:66:96:BE:48:D5:02:F7:D9:9E:D9:02:3B:56
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial: 019CAAFD115FCB62907700DA50AD698D0D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: AvyUsGmD_FZSKoOLRhh-bjGaAsc.roa (hash: zPe3RFgMAuhI1JggJJNojXmQ9y8rJ9aHTKAukLLAFVw=)
2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: w+7nDMNbz3BBsA5tppkX5+vrodPok9kNUeVQWdVjCBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:11:5f:cb:62:90:77:00:da:50:ad:69:8d:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=57b5b1bda66bd86696be48d502f7d99ed9023b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:18:04:44:fb:b6:f3:0e:c4:5f:d7:62:70:
d1:3a:27:f7:63:f1:7a:ec:7d:02:65:8a:17:af:c1:
d8:fe:70:68:b4:98:1a:79:b7:06:7b:f1:cf:93:3c:
1f:83:80:b2:7d:73:15:56:44:8b:1f:11:24:95:5c:
dc:4f:d0:be:d6:8b:93:a5:9e:24:5f:08:32:1f:8d:
af:cf:d6:91:17:6e:ac:87:c2:03:ed:83:f7:e4:cf:
f5:f0:0c:e8:d9:a4:28:e0:29:38:31:02:8d:c0:b5:
72:e6:60:1a:9e:38:26:6a:97:81:4d:ed:0e:c1:f1:
18:81:41:27:be:dc:f2:78:ef:bb:a0:81:01:df:23:
66:74:3d:99:09:a6:65:18:bd:bd:2a:dd:22:8b:33:
94:5c:a9:53:5b:67:81:55:55:f1:11:c5:89:37:68:
42:9b:74:59:83:b2:6a:5d:3a:cd:e2:22:95:d5:02:
10:a6:d8:23:86:01:e0:08:e2:ea:f4:b6:1c:fb:da:
f2:03:ab:1c:99:fd:d5:70:c6:a8:d1:10:07:23:4a:
c2:8d:20:c9:38:ca:99:3a:55:e4:da:7d:58:64:3d:
fb:fc:2f:88:27:13:94:89:8c:26:e0:fa:c5:c1:bd:
49:52:96:36:dc:7b:d6:be:04:7c:6e:d5:e8:c1:f6:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:B1:BD:A6:6B:D8:66:96:BE:48:D5:02:F7:D9:9E:D9:02:3B:56
X509v3 Authority Key Identifier:
keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fe:8b:09:42:fa:ce:a4:e1:57:37:9a:18:35:01:0b:bf:6a:
55:b8:d0:5d:64:d4:cc:72:3b:71:36:c1:83:74:03:87:9c:58:
ab:62:15:66:9c:ad:c9:de:79:0a:4e:0d:ce:fe:ba:3a:24:a5:
87:80:c2:47:2b:7a:88:43:ae:d9:a4:0b:31:82:a0:57:f2:1e:
62:3a:d1:dd:6e:0d:20:6f:98:b2:2b:20:32:4f:66:cd:9b:e9:
d3:1d:6d:15:d5:f3:60:f3:57:e4:82:fe:79:ac:a4:1d:ed:02:
fc:d3:70:21:bd:05:9f:30:d5:72:8f:bf:6f:96:bb:f6:8b:17:
fd:79:8e:2e:5f:10:a2:c5:8e:eb:d4:0e:41:5c:c3:c2:ac:3d:
9c:5b:37:b0:9e:17:b2:6d:66:3e:41:e4:ce:21:20:86:73:42:
8f:d1:b5:94:98:57:69:6b:cf:fc:eb:db:c2:84:fd:67:c1:af:
f0:c6:4f:d1:12:9f:57:34:d7:15:8e:82:43:5d:30:b7:b6:1b:
2f:8e:66:af:43:cb:9f:d5:fd:3a:88:01:9a:20:eb:f6:f9:ac:
28:7a:08:2c:31:e1:a6:09:87:c6:16:33:ad:0a:b2:1c:f5:18:
21:fa:1e:1f:69:68:49:21:8c:a2:3a:fc:3f:72:21:4f:f8:1e:
51:3e:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:58 2026 by rpki-client