Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: kiE0ZEbuOC3o3NsE15P+8XTrDBTPbX4aqyRAX1QbdvE=
Subject key identifier: 0E:6B:69:9A:BA:DF:FF:93:B0:6F:C6:F0:99:B6:A1:9E:1D:06:E9:7D
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019CAC7DFCADB752AA086B6DA985D023DB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0E4B
Signing time: Mon 02 Mar 2026 03:01:03 +0000
Manifest this update: Mon 02 Mar 2026 03:01:03 +0000
Manifest next update: Tue 03 Mar 2026 03:01:03 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: DwOjxE82gGgUgdG/ClrcFr7bsax8DsbFBrZtIk6d6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:fc:ad:b7:52:aa:08:6b:6d:a9:85:d0:23:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Mar 2 03:01:03 2026 GMT
Not After : Mar 3 03:01:03 2026 GMT
Subject: CN=0e6b699abadfff93b06fc6f099b6a19e1d06e97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:69:76:d6:c4:9e:80:e7:76:56:90:a5:83:
97:08:86:a2:ca:5b:74:1e:d6:5b:00:2d:ee:ff:49:
fa:e7:4d:3d:28:5e:e0:79:c2:8d:2c:53:93:a3:04:
7c:dd:39:97:f3:0d:8f:5c:65:79:1f:a0:9c:fb:54:
9b:ee:c3:50:88:04:c6:0b:38:2a:0f:2d:f9:25:c6:
b8:7d:36:60:ef:2f:7e:e4:99:1a:0c:38:56:df:75:
b5:bf:c6:5a:41:14:b9:01:77:56:97:63:73:09:3a:
21:c2:a3:4a:30:bb:9b:56:56:b8:0b:8b:18:90:e4:
b3:b1:56:80:5a:59:69:3d:f9:f8:a6:2d:95:09:e9:
da:8f:0f:6b:02:41:2f:21:c0:3c:f8:5a:95:4e:10:
00:5b:e7:0f:b7:f6:7b:5a:f0:09:28:36:3e:ba:9c:
b0:80:0b:df:b6:da:82:fc:e8:b1:56:27:69:b5:8f:
9d:74:13:52:ff:f0:cc:23:96:3b:90:5e:ed:8c:c7:
fe:66:30:3c:35:e2:fe:ef:0c:d6:65:44:e8:ce:5a:
f6:50:d6:c3:42:d4:da:fe:83:a7:b8:a0:6b:8f:e7:
b9:be:2f:a4:97:38:07:c4:6e:4e:55:cc:02:97:f2:
36:8e:e9:b3:7e:d1:72:52:5b:9c:d1:c0:e3:31:ce:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:69:9A:BA:DF:FF:93:B0:6F:C6:F0:99:B6:A1:9E:1D:06:E9:7D
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:34:59:22:c4:7f:32:5f:77:0a:7e:e5:8b:85:eb:ce:41:a2:
50:b5:f9:7e:ea:3e:72:d2:aa:71:61:7f:f7:2a:cb:12:40:aa:
86:b9:bb:c2:a9:c3:8c:91:99:a3:b7:db:62:86:a4:b1:09:b4:
92:9d:b6:a8:55:62:af:9e:6d:62:2c:64:cb:c7:82:b1:a4:99:
ee:41:fa:25:f7:65:a0:1a:9d:65:33:6b:89:90:15:e0:53:84:
58:3c:11:ba:c6:bb:5f:1f:fa:4b:2b:b5:56:c6:e9:37:a7:17:
0e:b7:de:f2:14:50:8f:e8:47:32:e8:d3:e8:1e:83:9e:c0:23:
88:bc:ec:e9:84:2a:95:09:6d:79:24:c4:fa:6b:9b:e6:f9:41:
95:aa:48:85:3a:a2:cc:85:e2:6a:11:04:20:2c:56:6f:ce:6d:
69:70:03:05:01:59:b7:cf:92:3c:3d:e5:45:27:2c:cc:5c:7f:
d7:82:41:f8:7a:1a:bf:1f:c5:7f:fd:f6:7c:b2:15:ad:be:70:
98:23:13:e2:bb:57:13:a8:7e:87:6e:cf:43:d4:71:59:7e:ea:
c8:06:27:20:ad:9d:08:a6:63:25:51:51:be:bd:f1:c6:11:12:
55:61:98:5a:ae:87:0f:51:ae:ca:f0:18:18:a0:00:95:ed:fe:
2c:73:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:11 2026 by rpki-client