Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: 0+Br/rZ8hvdd13mjBMk+Tu8D2Yrdcr6tIQFa7YJ7GBU=
Subject key identifier: F0:D4:2C:55:71:9F:79:EF:3E:7E:28:CB:08:37:E1:41:87:8D:87:C4
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 019CA8A12CCB7B116C82C2E38B23C1FAF7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0F1E
Signing time: Sun 01 Mar 2026 09:01:00 +0000
Manifest this update: Sun 01 Mar 2026 09:01:00 +0000
Manifest next update: Mon 02 Mar 2026 09:01:00 +0000
Files and hashes: 1: 5WdAfePuazyKOqDBol6a24O3XpY.roa (hash: mhrHbQmeUkZKLJUs5FqRvkUEbMJKmKPn0IXdQCttlDY=)
2: 9NEEsIaoOSxV4C68oWD-8q01-s4.roa (hash: Yeh595qgzPBaen9pZBMaBJZ2g7PUtXo9qE04VFTndRI=)
3: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (hash: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc=)
4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: LB7MGvle8VDwPnZ3Nf0cNDzZwoqD+KVpmnsJ8Ck1ShM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:2c:cb:7b:11:6c:82:c2:e3:8b:23:c1:fa:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Mar 1 09:01:00 2026 GMT
Not After : Mar 2 09:01:00 2026 GMT
Subject: CN=f0d42c55719f79ef3e7e28cb0837e141878d87c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:8e:7d:e9:71:56:38:c2:9f:d8:50:ad:9b:
46:e3:39:65:9c:67:b3:84:05:ee:2f:fd:9d:08:cc:
86:54:dd:e6:78:16:fa:d9:22:0c:34:12:07:e1:74:
6b:77:21:ba:0e:70:9f:a9:c1:bf:01:fb:73:77:20:
40:e2:e8:ee:c8:0c:1f:8c:3d:2f:1c:d6:82:14:5b:
7f:e5:5b:a4:09:a6:56:f7:0b:d5:66:1a:fd:db:0f:
b0:c6:69:10:c5:74:b1:7f:7e:35:ba:95:d2:63:3b:
51:f6:9c:44:71:dd:81:26:2f:b5:01:db:16:e1:2f:
3d:ab:e0:ea:07:32:1b:19:54:e2:29:cd:5f:ae:24:
71:98:41:cf:25:18:0f:13:10:41:d1:e6:d3:ee:93:
7e:b5:48:7c:61:9a:76:39:ee:f6:35:6e:5e:4d:7c:
5d:b3:23:0a:62:9f:bc:85:4b:53:6c:c6:ba:58:d0:
ea:c2:80:3a:52:93:3a:02:c4:ef:7c:97:0b:81:bc:
a0:1b:7d:6d:99:b4:3d:55:33:fb:2a:0c:e9:58:87:
a7:13:09:d7:aa:da:9a:15:22:56:fc:0e:24:46:56:
60:19:98:67:61:2f:be:59:bc:2f:2d:86:3b:02:8c:
1a:cb:48:42:11:ab:61:d4:1a:84:94:84:e5:92:1c:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:2C:55:71:9F:79:EF:3E:7E:28:CB:08:37:E1:41:87:8D:87:C4
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:94:23:cb:9d:1b:6e:a2:9e:ea:ab:32:4c:54:fc:63:e3:9d:
1a:48:6c:dd:af:cf:8e:05:52:b6:6d:e1:46:c5:c9:51:95:c0:
e6:ce:f3:25:2b:49:33:32:50:0b:09:bd:75:db:5a:a3:aa:23:
25:ac:3a:71:f7:fa:c0:4c:b2:b9:ce:14:e2:43:b8:a6:ff:05:
e3:1a:be:f9:a6:df:70:d0:72:8b:39:41:10:04:8c:91:96:4e:
b5:31:0d:e7:f6:3e:67:1b:36:8c:dd:c0:fb:b4:ab:61:97:9d:
fb:9b:43:19:80:82:ab:e2:a3:f7:6b:cb:84:54:74:56:be:73:
48:cb:ab:3d:eb:1e:d8:df:ab:2b:ff:0f:95:af:36:d4:c4:29:
e5:c9:63:e4:a3:35:0d:c8:bc:d6:3a:f6:aa:1d:5b:44:40:29:
55:8c:4c:3a:4a:32:21:06:ac:81:6a:f9:a5:17:5e:49:3c:dc:
c3:8f:9b:b4:70:f1:b7:ff:38:59:72:91:ad:e0:ca:2f:89:8a:
c2:4e:06:72:e8:d0:4c:e8:10:e6:69:70:bf:cc:c1:b3:31:ee:
80:f6:f5:00:a7:d5:e3:49:ed:38:ca:3b:72:8a:1a:b0:95:3a:
cd:1a:2a:0c:55:e7:e9:96:a7:04:44:60:42:f9:7f:7b:4d:79:
90:65:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:12:08 2026 by rpki-client