Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: zQCBASvi1Htje1nTBxg91nhNx12dc8fUe/s3+5aUGdU=
Subject key identifier: 3A:21:73:88:6C:81:F9:C4:06:E0:36:04:8A:E5:68:FA:33:B4:F9:62
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 019CACEB66617E87AD12D13A09E5C5C15BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 07B6
Signing time: Mon 02 Mar 2026 05:00:34 +0000
Manifest this update: Mon 02 Mar 2026 05:00:34 +0000
Manifest next update: Tue 03 Mar 2026 05:00:34 +0000
Files and hashes: 1: 2wk8UskQOSnxqw7Oo7NOQFVMdPk.roa (hash: wAiBLEjJ/qsnMqj9/B2glZy/BgEewLbuD+HKTaBdnNM=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: x0IA/8syY8FqWVCqVW+SPBsTYNxVSYRfj3+1mjwmIYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:66:61:7e:87:ad:12:d1:3a:09:e5:c5:c1:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Mar 2 05:00:34 2026 GMT
Not After : Mar 3 05:00:34 2026 GMT
Subject: CN=3a2173886c81f9c406e036048ae568fa33b4f962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:72:6e:9a:b5:f5:9f:63:4c:4d:58:f0:48:
ed:d6:80:8f:e6:80:43:74:d5:0f:34:fa:bd:38:45:
68:bb:86:94:6c:cb:46:4a:14:dd:85:41:81:44:4d:
c1:ce:68:97:96:8e:db:e8:a7:c0:af:27:90:0d:cb:
79:80:e4:c1:a3:96:dd:da:1d:10:1f:4b:62:50:07:
8c:25:ef:ba:5d:90:e4:9c:21:e5:29:7d:ae:0a:3b:
f8:37:e1:6d:93:87:86:3c:f9:e8:0c:4c:c9:8e:c1:
fc:fc:6a:3b:91:b1:0d:1d:8c:45:5d:66:00:3b:0e:
09:c7:0f:13:3f:0d:28:ab:b5:6a:7e:2a:d2:d8:e8:
7e:e7:bc:2e:f2:f2:da:e6:c3:99:3d:c2:86:8f:bd:
2f:b7:18:d8:3c:be:c6:19:43:02:79:bd:e3:74:97:
35:fa:4a:47:09:1d:03:8a:3b:66:d9:e5:30:38:43:
61:63:2a:03:6a:89:c6:1c:7c:80:ac:7f:22:06:17:
c3:d4:fe:85:bd:4a:8e:96:df:f6:8a:31:c6:e6:73:
bc:ac:38:9d:b8:41:04:94:36:82:79:fc:41:82:d8:
3b:be:6c:1c:02:34:c4:11:2b:a1:72:ae:6a:8b:62:
c8:f1:b5:b3:37:66:d4:54:40:54:22:1a:7d:d0:25:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:73:88:6C:81:F9:C4:06:E0:36:04:8A:E5:68:FA:33:B4:F9:62
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:6c:18:08:ed:22:b6:f2:d3:89:ff:f3:97:2d:48:87:66:
6a:d6:18:e3:80:99:f1:ca:49:d0:b1:08:92:21:9e:ba:26:a7:
72:e2:12:41:07:6a:a7:4f:73:32:16:f2:47:a3:b7:75:d6:28:
31:be:55:88:db:fc:c7:76:f3:a8:7f:d3:09:92:44:d7:c4:f9:
95:17:44:28:41:9d:cd:79:23:15:4b:64:74:fe:e3:29:4c:6a:
f2:46:e0:a2:90:70:f9:99:87:30:5f:98:d6:ee:af:a1:bc:eb:
cd:c5:bc:b4:f0:ae:92:31:02:af:cb:2f:e0:1f:87:ac:38:0d:
6b:a7:e3:c0:d1:c5:b3:64:ef:f1:e8:83:a4:27:38:13:36:0a:
e3:ea:7c:fd:7e:20:c8:68:df:b4:21:8b:76:b7:9f:22:ff:7f:
bf:c6:77:fb:d6:d8:45:fd:3a:03:37:67:13:9b:7e:7f:fe:7e:
8b:f0:69:f7:3a:24:92:3e:71:38:17:63:e6:a6:fe:24:0c:d9:
47:70:a1:f3:65:19:75:b5:7e:fb:ee:e8:94:a6:81:8e:d3:55:
17:2b:06:41:36:a3:31:a3:fe:9d:14:a0:8d:1a:8c:66:0f:72:
ce:9d:27:b9:b7:90:fa:52:5f:91:f2:13:ae:9e:86:ec:9d:f0:
5e:6d:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:21 2026 by rpki-client