Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: 0ukQQqmNKMIzsO8ummkdTVqZMeKy2wF4V4QyRVxzTNs=
Subject key identifier: 93:21:0A:0B:9D:49:E7:51:B3:FD:FC:A6:B9:4D:0C:94:DE:68:6D:72
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019CAAC63B897FE0D005E8ED205310045A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0A6F
Signing time: Sun 01 Mar 2026 19:00:43 +0000
Manifest this update: Sun 01 Mar 2026 19:00:43 +0000
Manifest next update: Mon 02 Mar 2026 19:00:43 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: DOMDEXYEeEX/AhuSjiQWItgk2f650iwls7Z78ByUMLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3b:89:7f:e0:d0:05:e8:ed:20:53:10:04:5a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Mar 1 19:00:43 2026 GMT
Not After : Mar 2 19:00:43 2026 GMT
Subject: CN=93210a0b9d49e751b3fdfca6b94d0c94de686d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:89:a1:53:67:76:eb:3c:cb:cd:36:5b:0a:8e:
e6:2c:eb:96:94:b3:f2:66:3d:a4:02:bf:02:62:30:
18:fd:0f:49:39:5f:ea:d0:e5:ef:6d:e6:4b:a1:0d:
b3:c9:57:b2:ea:f7:c3:d5:41:1a:17:04:12:e3:b3:
09:10:87:a8:8a:05:54:03:61:2e:95:81:69:25:6f:
ed:24:67:45:99:32:6b:c1:ef:67:39:6d:a4:db:b5:
55:0d:39:c2:27:df:59:31:c4:ee:a4:4d:9c:09:c6:
c1:cb:59:7a:8f:c5:ba:c1:82:8d:53:d0:2e:3a:00:
7e:df:ee:3b:30:af:46:41:11:3f:56:88:af:ea:d9:
c8:b0:7d:0c:25:fa:17:a2:f4:65:c3:51:8d:dd:35:
f3:b4:55:96:e6:8a:94:45:68:d7:7a:01:c5:60:c2:
45:ae:e1:da:10:8b:61:f8:35:3b:28:12:5e:13:0c:
eb:32:54:34:a5:6f:d7:05:fe:42:6b:ba:36:a4:28:
b3:e7:aa:ea:5f:98:a1:6d:65:92:ee:fa:f4:73:e6:
bb:4b:75:2d:0f:df:c8:91:2d:92:31:e2:88:fe:d2:
2b:80:74:20:3f:94:f7:92:91:b7:5e:6e:ca:8c:f0:
8f:c2:70:39:e4:81:d4:14:38:a7:ba:7a:8d:1a:55:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:21:0A:0B:9D:49:E7:51:B3:FD:FC:A6:B9:4D:0C:94:DE:68:6D:72
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:13:43:17:cd:da:f3:e0:37:4b:cb:43:0d:de:ae:c5:bf:
1d:ff:f3:16:a1:7a:a5:ae:61:55:85:64:17:0f:84:18:29:99:
ae:fb:09:27:a1:ff:84:0a:99:93:da:d9:6f:97:7c:3f:07:5a:
ad:7f:91:9f:50:78:5e:37:89:3b:d0:98:e6:8b:0b:9f:5c:49:
b1:4f:17:46:00:25:f7:bf:c8:f1:41:ac:1b:e5:ca:31:a2:f1:
9c:11:4b:ec:4e:df:a3:09:2c:ec:bb:c4:ed:78:e5:09:c2:0f:
ff:78:bc:86:36:06:8d:22:68:18:8b:36:d7:4e:d1:56:54:43:
a0:a8:f5:3f:ea:de:cb:5f:a7:2f:22:18:89:ba:1a:59:33:1c:
f6:d6:75:72:19:be:a4:e1:3a:71:af:bc:3b:7a:c0:00:bd:3a:
b0:67:0a:42:45:42:e1:95:4f:ec:cc:80:b2:61:32:4b:1f:00:
65:53:21:ea:3b:22:74:f5:e4:9e:ea:70:17:cb:17:28:6f:18:
b9:5a:28:fc:9c:04:2d:33:53:e9:a5:56:64:31:bb:b5:b3:8f:
c4:fd:4d:7e:63:00:17:a0:31:0b:07:00:f8:dc:c2:ec:d6:7f:
41:38:77:dd:02:44:8a:1d:58:d1:d1:3d:da:ed:17:fa:68:3f:
86:a0:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:24 2026 by rpki-client