Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File: wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier: 3JKGim4sKH5BG+lrXfzaeOd0Lf+s3y4RIra/5t8iqC4=
Subject key identifier: BA:2C:1B:CA:4C:91:52:92:5B:B6:8D:59:53:BE:EE:9C:87:AA:2E:D2
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial: 019CACB515CCD1DBAB8A26463F860BCAB23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number: 0FF7
Signing time: Mon 02 Mar 2026 04:01:14 +0000
Manifest this update: Mon 02 Mar 2026 04:01:14 +0000
Manifest next update: Tue 03 Mar 2026 04:01:14 +0000
Files and hashes: 1: HEmaONS-4AyfdKSuhqxZ1eXPDvA.roa (hash: Zph0f22jUL4/wY1fTUmGHlz5Uf3hM9c2kdfEksVr4m0=)
2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: Sow4dQZhQnb77r8M7Ibymb6uN0ySdmHl9bhuku5LzmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:15:cc:d1:db:ab:8a:26:46:3f:86:0b:ca:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Validity
Not Before: Mar 2 04:01:14 2026 GMT
Not After : Mar 3 04:01:14 2026 GMT
Subject: CN=ba2c1bca4c9152925bb68d5953beee9c87aa2ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:71:ee:68:64:7e:4f:d4:0d:d5:0e:cb:ec:
e9:07:08:cb:d4:88:ac:03:70:71:87:52:9a:6e:7d:
37:39:d8:da:a4:69:5f:62:b9:62:a4:c2:a7:3f:e9:
72:32:05:92:22:0f:fa:e9:aa:e4:d2:aa:20:e7:1c:
ee:1b:80:0b:72:99:f0:92:16:59:2a:89:8c:13:97:
66:1a:91:f3:53:89:f8:98:7f:3f:c2:28:81:8d:67:
90:fe:2f:9b:ed:4d:7c:65:1a:02:2b:0f:c4:7e:a7:
06:08:f1:c6:e9:4f:b9:39:a1:e5:d1:42:30:c3:b6:
0a:5f:21:c4:07:e7:98:66:97:6a:f4:86:d7:36:fa:
81:ab:73:52:17:46:c4:b2:b4:7e:3e:f7:c1:21:0e:
9d:cf:9a:ba:30:ca:cd:d2:d8:fb:53:6a:7e:74:c8:
a5:40:71:eb:a1:7a:83:26:8f:23:1c:86:ab:1d:86:
86:d5:5e:55:fb:4d:4c:c5:45:ac:1a:42:3a:a2:15:
74:ba:83:46:12:09:e1:7f:b6:32:59:22:df:3a:4b:
db:06:f3:32:cb:65:5e:44:dc:e5:88:46:0a:c6:3e:
4b:ac:7b:a6:0d:74:e7:d0:1f:1a:0c:d6:db:68:95:
b4:2f:14:31:02:ad:fd:d9:38:26:0e:62:80:c7:5a:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:1B:CA:4C:91:52:92:5B:B6:8D:59:53:BE:EE:9C:87:AA:2E:D2
X509v3 Authority Key Identifier:
keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:12:43:19:e8:46:75:8b:23:0e:2c:ab:e1:55:1c:b6:ee:9b:
98:33:99:a8:7e:d3:18:a4:92:ee:b4:19:37:7f:ce:e7:56:72:
76:1c:bd:97:35:4b:1a:47:07:00:36:98:a0:1a:96:98:df:25:
ab:e5:49:21:24:b4:54:58:99:63:b6:24:eb:aa:b0:a7:10:c3:
9e:30:d9:01:1d:23:2f:82:a1:97:39:d4:a4:1c:07:74:65:56:
b5:c6:1b:2d:d3:df:6e:ab:74:01:43:bc:b4:be:71:05:6e:fb:
22:ad:97:11:61:5c:05:bb:74:60:fd:bd:19:d5:95:01:b8:a7:
43:65:c9:14:40:31:48:e3:1d:63:28:8f:d2:d3:0e:e7:ea:d7:
84:fd:3f:25:98:66:ac:6e:90:a3:6b:dd:22:6a:cd:5a:78:0f:
67:00:81:bb:40:c4:82:db:26:bf:bc:7c:eb:42:ae:66:ea:36:
0a:f7:0e:f7:96:1a:24:36:bf:78:5c:e9:c3:00:59:0c:12:79:
31:c8:5e:21:23:92:d9:52:f7:b8:c2:fd:90:79:16:95:00:87:
76:a5:5b:6d:0a:21:25:d9:4c:b5:49:39:d5:f8:ad:79:13:c9:
b7:41:2a:f2:86:e4:f2:34:af:f8:37:25:7b:a5:b7:45:84:bb:
5a:8d:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:59 2026 by rpki-client