Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: 42SUUCJrUdPYO6blS4GMnYSveEuQ+nqNswuAHgPV9+0=
Subject key identifier: 33:50:78:01:35:E5:0A:E3:74:36:3E:2B:E9:B7:14:A4:FD:C5:D0:06
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 019CAC46E6E7E0DE53F7B5904B2372F2BA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:53 +0000
Manifest this update: Mon 02 Mar 2026 02:00:53 +0000
Manifest next update: Tue 03 Mar 2026 02:00:53 +0000
Files and hashes: 1: AaoD9e1Rc9A7OLbVCIZcDp6j6JM.roa (hash: ytSdeQxHuy+yxjmnJ8gqjABXw5mRmre0ka6vBBpW/Mk=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: 2cCT7ywQlZ8ncJ+teQ3TE8BY2XLhhLjIIoVAgrra0ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e6:e7:e0:de:53:f7:b5:90:4b:23:72:f2:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Mar 2 02:00:53 2026 GMT
Not After : Mar 3 02:00:53 2026 GMT
Subject: CN=3350780135e50ae374363e2be9b714a4fdc5d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:26:a1:c1:56:ad:09:35:0a:7c:c7:df:92:
ef:6f:f3:5f:cb:a2:8a:d0:c4:4b:cd:a0:b4:de:11:
5c:18:80:6c:32:26:98:e9:4d:0b:80:e2:db:49:15:
f1:01:58:93:ca:cc:e9:21:6c:16:a2:16:44:4d:45:
e8:21:55:f0:87:7e:16:1e:a7:a6:d9:f0:40:7e:59:
0c:a4:82:ea:29:3f:be:70:50:8a:a4:c4:b5:a5:36:
82:1f:10:d7:86:27:1a:98:3f:4a:8c:a2:71:af:a6:
74:ea:a0:fc:b3:60:c6:12:c2:97:c3:4a:42:9f:86:
5d:32:b1:20:79:b6:4b:98:02:d1:41:84:9d:69:9e:
e1:d9:66:8d:72:45:9b:8a:05:9d:15:42:d0:7e:29:
0c:ba:46:8c:88:46:55:a7:dc:44:72:1e:15:85:e7:
ec:52:54:9f:61:69:d6:bb:02:fb:f2:84:3f:1f:93:
34:a3:ec:e2:38:c3:00:5b:a0:26:6b:41:58:9c:41:
26:ee:30:c4:fa:9c:69:71:81:c7:46:3f:ee:c0:23:
08:38:74:4e:70:85:e9:be:bd:bf:0a:46:2f:c3:a3:
83:be:b3:da:75:1c:75:1d:50:89:69:5b:0e:7d:8c:
80:7f:94:af:46:2f:3a:d3:9f:c7:a4:18:65:56:eb:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:50:78:01:35:E5:0A:E3:74:36:3E:2B:E9:B7:14:A4:FD:C5:D0:06
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:33:c5:47:c6:34:02:ab:41:60:35:54:9d:5c:06:88:97:88:
2f:96:d4:b2:0d:2e:e6:94:21:3e:0a:c7:81:eb:57:60:51:b2:
86:d4:f8:e2:fc:99:ce:a2:4a:97:8f:9f:6a:b1:df:7b:08:9a:
a1:81:b2:72:57:0d:28:5b:3b:fb:44:2f:f0:67:8f:64:86:ab:
e7:59:15:c1:d9:c9:01:ff:41:b1:42:63:2e:47:34:ea:02:82:
4b:63:a1:cf:12:86:29:99:9b:c3:a3:a9:f5:24:3d:40:4b:64:
d9:a6:1f:9a:ab:15:01:de:86:ea:93:94:e5:b6:ea:56:1d:60:
41:cd:16:12:20:51:7c:d8:d8:6d:ea:57:6e:46:b6:21:5c:62:
3b:4d:96:d7:12:b4:4d:54:8e:f3:b0:9f:f5:29:5b:18:0e:95:
4a:50:58:3a:5c:cb:c3:e1:c4:d5:d2:04:28:c3:39:6f:4d:c2:
d7:7a:97:dd:57:d7:22:f8:2c:38:22:e2:54:76:34:84:56:1a:
6a:17:a7:b1:1d:0d:44:2f:e4:53:d6:5c:9e:35:f1:2d:e9:b7:
47:ee:0e:aa:e0:f2:9f:a1:a7:97:32:cd:6b:2c:ce:0d:49:3e:
41:9e:29:d8:df:79:b9:d0:55:46:78:36:7e:60:43:46:cf:5a:
8f:42:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:24 2026 by rpki-client