Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: iujsYihA6Lt9vIqzvhyzTR77c6VUuw+USz04xMyPw1E=
Subject key identifier: 5C:5F:30:5E:C0:EF:80:22:B8:73:12:9C:4D:0F:D2:D0:A4:97:02:36
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019CAA589D675BBE91F8D167742845ED4AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 0629
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: wGbx2I0k6PHwr4kwzsur3exBR8bv25WBVKjkwmYNtxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9d:67:5b:be:91:f8:d1:67:74:28:45:ed:4a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=5c5f305ec0ef8022b873129c4d0fd2d0a4970236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:87:63:91:89:c3:f4:bc:e7:2a:78:9b:36:
c6:09:54:b2:84:9f:0d:2c:bb:8b:85:15:4e:63:5f:
67:93:e8:98:3f:2e:c2:2d:ed:2c:c5:1e:6b:f7:38:
0c:5c:22:eb:b2:bf:87:f8:21:9c:12:77:b6:62:6f:
fe:cc:4b:f8:18:84:21:db:00:a2:5c:45:94:68:a2:
7e:24:99:06:ac:6b:e4:dc:b2:aa:04:8c:83:b1:56:
94:50:26:63:5c:22:44:1b:27:c6:31:03:a9:69:4e:
eb:b2:b3:f9:bc:c0:b3:d8:aa:e9:3e:d7:7f:4b:31:
b3:fd:14:4d:d0:af:55:c9:18:39:9a:e0:b2:00:d0:
72:32:cd:70:85:b3:08:54:31:f5:40:c9:01:5f:12:
24:fa:30:3e:ae:d6:3e:cd:57:07:c7:14:9c:e3:ee:
eb:e7:d9:c5:a5:8e:af:46:85:fe:34:2b:43:e3:b7:
ac:9a:60:38:d1:df:bf:52:e4:f7:f1:69:63:59:73:
15:8b:64:c3:dc:f0:96:00:2f:21:9b:00:22:bf:92:
21:74:79:ad:06:e8:f6:9a:f3:97:fd:38:93:1e:bc:
42:5a:2b:53:06:1b:d7:59:4a:59:88:df:aa:0d:3b:
45:32:2c:71:c5:23:2c:f5:33:ce:65:d5:ca:0d:4e:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:30:5E:C0:EF:80:22:B8:73:12:9C:4D:0F:D2:D0:A4:97:02:36
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:2e:49:78:23:c2:bf:7f:8b:78:53:d3:a9:84:98:7b:c7:85:
9c:57:fb:66:71:1a:41:83:6a:de:aa:41:95:53:74:e6:b8:fc:
2c:d2:59:02:73:e1:c5:65:82:bd:51:8c:34:42:17:e3:0f:1d:
96:df:ee:9d:c2:92:a6:36:70:a2:d4:99:5e:4d:23:c5:55:c5:
2c:b4:50:56:4d:93:c4:0f:6b:3e:2e:6a:1f:5d:8f:bc:c0:a8:
62:e1:a3:c1:20:c6:9c:00:52:f5:63:d6:c5:b6:a6:e4:3d:be:
9d:4d:25:ed:f7:b4:b7:c2:18:03:21:45:ae:7a:7c:cf:b1:12:
a9:4c:e2:9d:16:fd:35:c6:25:70:3b:8d:ed:c3:4c:81:d2:4b:
a1:7f:9f:c3:9f:15:73:f8:c5:de:f8:d9:44:c8:7b:04:7c:94:
26:ab:c5:87:fa:6b:2d:0b:38:56:fb:6a:60:ed:6d:07:01:e1:
4c:e2:61:a3:b5:e2:0a:bd:27:2f:c3:d8:15:b2:54:80:7f:87:
b9:a4:c9:3a:12:7e:7f:e3:0a:3b:34:9d:40:21:24:6b:6a:7a:
30:7a:66:62:7a:29:98:60:4f:3f:36:dd:9b:67:74:50:6f:49:
d4:f0:a3:ac:57:82:4e:7f:4c:d5:81:0a:03:ab:9a:15:16:42:
b9:3e:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:41 2026 by rpki-client