Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier: lTQJyG6phOXsQ3ClKIUYaNPsJse6FZIhyJE+6hHfHKg=
Subject key identifier: A9:D2:41:E5:95:65:B0:CD:37:9B:B9:2E:D1:E9:C6:E5:18:17:1B:46
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial: 019CAC474989C4755C2E2F0BEEA6886C0D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:01:18 +0000
Manifest this update: Mon 02 Mar 2026 02:01:18 +0000
Manifest next update: Tue 03 Mar 2026 02:01:18 +0000
Files and hashes: 1: TpnpN44Bjwn-KM0mOzvPS6-zdOY.roa (hash: hWRJEjJqT6dnr6XOVn4Lz5LpaCYeo/xiRnTEsF4dKwk=)
2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: RM4DpHQHHE7oasKjLnxF5I0/Txv9bgE58pjHN9Pps7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:49:89:c4:75:5c:2e:2f:0b:ee:a6:88:6c:0d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Validity
Not Before: Mar 2 02:01:18 2026 GMT
Not After : Mar 3 02:01:18 2026 GMT
Subject: CN=a9d241e59565b0cd379bb92ed1e9c6e518171b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:f8:7b:e3:7b:d2:ab:8b:5d:09:4a:00:6d:
f4:94:dd:48:8e:df:5b:74:61:28:1d:4b:c1:49:42:
17:f6:24:4c:6f:41:96:a3:ae:f5:94:fd:04:90:48:
42:ac:1e:45:bb:17:98:29:d7:3c:3d:1d:37:ae:00:
25:75:ad:1c:05:8c:41:da:99:24:a5:52:ff:d5:cc:
a1:9a:8b:67:0e:d8:c4:50:a6:23:65:93:7f:25:72:
40:62:39:f0:29:9d:0f:11:8f:a0:e2:c9:30:cb:c6:
4f:38:b9:96:32:a6:fb:bf:98:12:29:0b:77:1b:ae:
98:c2:1a:b6:a4:e9:f2:7c:dc:04:b4:7e:4e:84:b7:
b2:50:5d:9e:f8:5f:96:ae:07:c1:b8:90:d3:ef:4c:
c8:72:e4:b6:81:c4:ff:f6:75:ed:5e:49:bb:d1:fc:
70:4d:f8:8c:7e:67:bf:d6:8e:b6:54:8f:e1:ef:f7:
1e:a6:21:b0:73:b2:31:4e:3d:6c:b3:dd:e3:4b:1e:
6b:5b:e5:91:e0:de:71:43:51:d0:8b:9c:e4:ad:a9:
6c:eb:1b:54:fb:34:03:f7:1d:0e:79:47:15:ff:13:
0d:4d:32:14:66:04:ef:29:8e:6d:6e:ea:af:f7:49:
31:f3:d7:24:90:51:23:35:85:a0:e9:44:59:87:02:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:41:E5:95:65:B0:CD:37:9B:B9:2E:D1:E9:C6:E5:18:17:1B:46
X509v3 Authority Key Identifier:
keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:65:8a:82:35:76:4e:b4:b8:8e:4c:9d:c7:d2:ac:3b:6b:
0d:a7:56:3a:db:51:71:b1:3e:69:a4:fb:57:19:74:7c:82:4a:
e0:3d:ec:85:e9:c3:1a:10:18:b3:3b:e4:5e:79:17:49:f7:36:
d1:fb:c7:ef:4f:ef:bc:5a:af:3d:f6:48:be:a0:1c:ae:e1:41:
68:2e:f3:0d:3b:51:bc:be:3d:3b:16:98:a4:22:a7:34:6a:2b:
ec:20:fb:8a:ac:4a:01:2e:61:21:80:58:6c:12:91:42:ea:32:
8b:c4:ef:65:e4:fe:7e:b5:fd:d1:4b:f4:33:e4:a0:e8:a4:ea:
e2:73:31:a4:3c:f5:7e:a9:76:f6:2d:23:41:2e:48:21:c0:28:
6e:29:22:80:ce:a4:df:b7:d1:6b:d3:e2:48:07:23:03:e4:6b:
e6:27:37:d6:eb:cd:e4:cf:2e:53:00:6f:ce:56:9d:9f:c3:4a:
02:6d:b5:49:e1:53:f6:81:e1:01:bb:2f:af:51:b9:35:1d:6b:
45:60:ef:88:e7:8d:c0:91:e8:c5:f6:76:91:9c:11:8e:b7:7d:
26:03:4b:30:b1:5a:52:78:ec:80:15:ff:3a:92:be:06:e6:7e:
3f:ff:44:a9:32:6f:b2:fc:9d:bf:0f:f4:53:12:49:9e:cb:7a:
66:77:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:26 2026 by rpki-client