Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: T3MIODVIALC+1D2zFPELJrZ6R61SWSvWuU/+4bjKQiI=
Subject key identifier: B6:5A:A1:C7:6B:F3:22:7E:D9:B1:D6:C5:AC:B5:17:99:4E:1D:56:27
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 019CA8D7D25D61BBE81AD56214CE293BD431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 15BA
Signing time: Sun 01 Mar 2026 10:00:42 +0000
Manifest this update: Sun 01 Mar 2026 10:00:42 +0000
Manifest next update: Mon 02 Mar 2026 10:00:42 +0000
Files and hashes: 1: 6WdR5ALUcJI-sJuaADDlA6E9Y0A.asa (hash: VJWjlwq1JUBaxiGK+9yYjlSpnVeoc6WMAIqDzfDLC38=)
2: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: AxuZMfLMVYiYP0F0gDeVsW5SLbCv9dc3mf3FSYWcRBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:d2:5d:61:bb:e8:1a:d5:62:14:ce:29:3b:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Mar 1 10:00:42 2026 GMT
Not After : Mar 2 10:00:42 2026 GMT
Subject: CN=b65aa1c76bf3227ed9b1d6c5acb517994e1d5627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:b2:d8:07:0a:68:3f:e6:a1:ea:03:aa:df:
34:5b:47:a6:a4:c0:87:4d:f0:44:bd:89:79:31:6d:
82:fe:58:b4:bd:5c:16:7b:7d:09:bc:61:d7:66:fa:
bb:6d:17:d3:60:fa:f8:79:e1:58:ac:09:a4:4e:1d:
6b:ae:71:5b:8c:ff:05:16:63:1c:cc:d7:63:f5:64:
c7:ff:f7:5f:33:8a:c3:71:72:7b:61:a6:a4:73:e2:
4b:cc:04:d7:bd:60:4a:e7:4a:11:91:7b:1c:15:23:
b8:96:ea:ab:d0:d3:6c:0c:0e:ea:30:da:78:7d:1c:
21:52:f1:0b:6a:83:5b:a0:8d:ea:72:b4:28:95:71:
35:14:c9:5c:b4:f6:2d:20:f0:c9:89:f2:cf:40:28:
0e:6e:45:45:76:27:59:82:ac:70:4b:a6:a8:de:7e:
9d:17:1f:77:af:86:63:a4:e2:1b:8f:83:8a:a5:21:
da:07:01:b3:07:bf:cb:66:01:8b:8a:3d:12:b3:71:
17:d4:74:1e:9e:60:e9:fa:02:19:b0:0d:7d:f0:0c:
2a:0b:c2:11:58:76:c2:6f:57:ea:69:5b:7c:68:02:
66:49:70:e1:90:a6:0c:0d:19:2e:99:e5:3f:01:18:
e7:18:20:82:f4:6e:83:05:ec:e0:4b:74:c8:b6:aa:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:A1:C7:6B:F3:22:7E:D9:B1:D6:C5:AC:B5:17:99:4E:1D:56:27
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:a3:92:39:99:74:07:94:fb:c2:e0:2a:6b:82:2e:bf:a3:
7e:01:df:2f:ac:d3:50:a0:20:57:d0:d9:d3:d7:00:70:d8:c1:
9c:95:8d:34:6e:34:93:9c:cc:80:f6:6c:50:0b:c1:00:e7:72:
90:bb:54:31:52:ff:99:0b:e5:5c:90:6e:43:43:16:e3:99:75:
5a:96:33:1b:f8:da:53:f8:2c:84:af:57:0a:66:d5:51:11:cc:
b4:d3:c4:1d:12:9f:67:53:d4:cf:f1:14:50:a7:7a:7d:71:13:
24:49:2d:9c:c2:8e:ee:49:00:72:90:7b:0c:6d:71:19:03:c8:
b2:76:2b:50:cd:84:3e:46:83:07:11:bf:54:cd:de:a9:eb:65:
08:22:fe:53:b3:7f:92:3d:7b:dd:8a:87:f8:3e:bf:fe:44:0b:
4c:84:5f:cb:f3:76:db:58:c8:b9:00:8d:81:68:b8:b2:79:fb:
94:e0:45:df:5c:6d:5b:6b:67:2c:6f:55:ff:8c:7c:87:10:f9:
53:74:98:b0:a0:06:22:52:8c:17:9f:c3:0f:67:a8:f3:fe:10:
9d:d3:56:a0:5d:38:58:5f:60:1d:cf:ae:32:cd:57:60:06:a6:
c5:41:89:27:f3:3f:13:cd:6e:7a:e8:a0:3c:df:40:5f:c3:93:
2a:8a:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:57 2026 by rpki-client