Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier: XTU+uCvqzKfYxvMMtlqKcGMQGB54iIL0ic/1UQLHtQo=
Subject key identifier: 1A:DF:75:97:33:83:6D:EC:97:1D:16:1D:20:DF:04:C8:75:94:93:32
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019CAD595BD0EEFE812C960C525C5C039C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number: 0153
Signing time: Mon 02 Mar 2026 07:00:40 +0000
Manifest this update: Mon 02 Mar 2026 07:00:40 +0000
Manifest next update: Tue 03 Mar 2026 07:00:40 +0000
Files and hashes: 1: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
2: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: YCrTesVr8M7FhGicQz4G1q7ciqdOaJLsLc3ZeFxHkNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:5b:d0:ee:fe:81:2c:96:0c:52:5c:5c:03:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Mar 2 07:00:40 2026 GMT
Not After : Mar 3 07:00:40 2026 GMT
Subject: CN=1adf759733836dec971d161d20df04c875949332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:a4:d8:0a:7d:d5:84:97:9e:f8:98:6b:47:
ca:01:67:3e:3f:93:04:f7:cf:68:cb:18:d1:cb:ef:
90:7c:74:18:16:dd:26:df:85:bf:8d:82:f9:8e:fb:
26:35:41:0a:7e:18:f5:3c:be:47:4d:fc:15:62:f4:
c1:bb:10:c8:68:06:78:5e:b0:80:51:c5:8f:48:54:
df:80:33:99:16:48:a5:7d:71:45:6f:1b:bb:e0:38:
dd:83:a6:e8:20:ef:06:fc:01:9d:18:f2:1f:ef:b8:
62:bd:c0:73:2e:38:a6:93:32:fd:a9:9a:21:20:51:
43:54:e9:69:94:8a:b2:94:2b:03:e1:fa:d0:f5:fe:
92:64:ac:ab:7a:26:38:30:0f:33:a6:ef:38:8b:35:
9f:6d:29:ad:8a:41:f4:6c:0e:bf:de:4e:ae:26:9d:
5d:86:47:39:15:7f:45:3a:44:4d:fb:23:a0:c0:8b:
58:59:e0:be:c8:c7:5c:5b:a4:aa:47:5b:51:41:39:
6f:f4:b8:b5:ee:88:de:0a:00:6b:c4:be:97:c2:39:
1c:df:65:33:c2:45:e9:55:d8:51:97:d3:65:07:88:
0a:33:2f:f3:ac:93:79:79:d5:03:68:87:47:3e:ef:
84:1c:f4:28:b2:b6:be:ba:af:54:f4:ac:70:ae:0d:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:75:97:33:83:6D:EC:97:1D:16:1D:20:DF:04:C8:75:94:93:32
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:91:50:c0:fd:33:4b:3a:e5:86:d0:80:c6:f7:4f:b7:ca:3b:
f8:e3:1c:28:b0:86:11:aa:be:ba:6e:1c:ba:22:49:87:b1:7b:
4e:33:45:f5:c5:91:95:0d:55:01:2c:fe:a6:93:1c:d9:92:50:
b6:f6:ed:30:3f:b8:4b:fa:38:be:9e:d9:67:bf:4c:f2:dd:0e:
eb:ae:83:e3:43:f4:0a:0f:21:73:c1:31:07:8a:a8:11:2b:3b:
68:fc:4e:b7:2a:0f:6e:31:2c:22:c4:0e:d6:86:e2:a3:6d:3d:
19:7c:02:8e:4c:d7:b8:dc:57:2b:aa:fc:a1:e6:4c:86:45:25:
f2:20:8a:e1:f1:9d:0d:ac:10:e2:01:0a:0a:a0:1f:02:79:04:
44:b8:be:c9:50:9a:c4:27:15:39:15:bc:45:d4:9c:4d:f6:b4:
04:ef:5b:1e:c1:40:3d:44:fb:45:1d:a8:d6:0b:f3:2e:16:60:
4e:27:7d:4d:c9:5c:08:9f:76:50:b6:07:30:d9:da:3f:d0:d7:
3a:78:45:d6:ad:d6:01:35:5a:31:88:9c:20:e0:17:c3:d6:4a:
11:21:90:c6:06:64:5e:fe:fc:cd:af:8b:20:99:08:1e:47:cf:
dc:3b:68:45:61:d3:1d:f3:cd:72:3a:1d:97:d6:51:41:66:0c:
10:3b:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:54 2026 by rpki-client