Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier: dRslfYPOnI9txzCo+6r2iXRXBe7ysSaeb0dDUcJb5cI=
Subject key identifier: 37:A2:47:A8:53:25:C4:F5:F9:0F:2D:82:C5:C5:B6:90:06:D3:38:55
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 019CADC76B3E93DBCE67595C2078BD4B489D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number: 0F2A
Signing time: Mon 02 Mar 2026 09:00:53 +0000
Manifest this update: Mon 02 Mar 2026 09:00:53 +0000
Manifest next update: Tue 03 Mar 2026 09:00:53 +0000
Files and hashes: 1: SSYiDgD_3-1wMHqQrv7qO7JPevs.roa (hash: 1WfeKCTajb/KdbOomr3V7iu+Ay5TdD7m9U7zyCHhLwM=)
2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: 8KZpbOflFzLQ9Ckg0wQCTZl6Qnf8WOCsMIyqNFCAIsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:6b:3e:93:db:ce:67:59:5c:20:78:bd:4b:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Mar 2 09:00:53 2026 GMT
Not After : Mar 3 09:00:53 2026 GMT
Subject: CN=37a247a85325c4f5f90f2d82c5c5b69006d33855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:00:42:77:82:40:9f:bd:a5:62:ee:89:c2:
e3:c8:f0:44:71:c6:9f:6d:e5:97:83:1c:37:d3:27:
75:37:ec:ed:30:e7:59:84:f2:7f:18:e5:fa:d8:76:
77:c4:9f:d4:4f:64:3c:9d:1d:b1:fa:eb:b1:8a:7e:
a1:55:84:a7:f3:a2:ff:63:f8:bf:ca:fc:98:f6:df:
e3:c5:a0:a5:32:20:59:fd:34:f9:42:3b:f7:64:92:
89:2d:d6:92:fd:a8:24:7c:f5:f2:da:9d:20:2b:7c:
53:83:57:31:d8:59:7d:56:55:c9:95:a7:f0:03:f5:
fc:d4:01:4c:ff:22:a1:48:2b:ce:30:2d:31:12:b3:
b3:34:e9:08:14:5a:0c:d4:96:e1:61:c3:0d:cf:ec:
19:1d:8c:45:52:9f:1e:5d:01:67:1a:a2:4d:d3:50:
f4:15:c4:b2:52:85:37:1d:f2:54:6c:ed:49:7a:d8:
4f:9a:53:3d:8a:e6:0d:c8:02:5c:4d:8c:0f:a1:2e:
12:01:51:4d:51:ae:8b:c4:89:dc:82:51:57:cd:56:
68:15:07:80:7c:eb:11:4a:90:21:3b:a8:95:50:d0:
26:14:2f:50:67:1a:a0:47:3f:a2:e5:6d:c5:64:1a:
c8:4e:d3:1b:f4:f2:7d:67:08:6f:48:dc:43:29:b4:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:47:A8:53:25:C4:F5:F9:0F:2D:82:C5:C5:B6:90:06:D3:38:55
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:16:cb:22:35:4e:fe:7b:98:14:a9:c6:97:3f:b8:68:10:56:
27:95:19:ba:34:9e:f6:56:72:47:36:08:35:f2:db:fd:72:3b:
9c:08:16:94:d4:47:3d:ca:3d:c6:03:f2:21:26:9e:c6:a7:0f:
9d:55:c8:bd:31:a0:9b:07:6c:61:72:07:5a:82:7b:0c:d5:18:
e5:3d:4e:aa:b3:10:fd:f1:44:ec:8f:fb:1c:80:3e:25:0a:38:
9c:22:9a:50:35:0e:c1:d2:68:97:4c:25:38:58:75:4c:6b:d1:
46:15:8a:c5:d4:2e:1f:c1:fe:be:6f:c2:6c:d2:1d:ed:ea:ae:
ff:a2:31:76:e1:a9:e3:96:01:f2:08:07:b8:05:29:ca:ea:7c:
57:99:ec:ef:18:c9:25:ce:3f:7b:14:a3:be:35:3d:61:7e:92:
f4:87:ff:76:46:d8:c6:00:92:db:04:07:20:f0:78:57:e1:32:
fb:45:c6:4a:2a:01:e3:cb:a6:01:99:24:64:e4:f9:0b:19:8c:
12:b1:0f:03:5b:0e:1a:4a:26:4f:b8:7d:5e:ec:3d:78:59:ab:
73:44:4b:a1:a8:21:09:b2:f9:81:69:3b:15:ea:c3:b1:b7:bd:
07:c9:76:30:9c:8c:51:84:3c:b5:58:9c:72:0f:90:17:66:e0:
55:7c:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:32 2026 by rpki-client