Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: ibK8aslhmXoO5DM03ZhywXVoTgbhE4qivWjyPLOa2+c=
Subject key identifier: 21:48:2F:EB:7D:58:25:A6:77:E7:B4:3C:E5:46:66:0B:27:16:E9:85
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019CAB343DE3BD848A47A966C1B55DD18616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 164D
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: 0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa (hash: kZAZ+FtKOmvNUJYXZ93DTfdC6kgpQf3D40b45bZU8Bg=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: AV9k4p4kej99Ff3HqqEaPGNZ9IQgFs4JYhIrjxBjvbA=)
3: hjf42_UdZaBcTmMxK9JfIjVnYF4.roa (hash: XYP9CSJ0v1KuulLYS04N8rRaMuUIS0Lpmjnr6cJWmek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3d:e3:bd:84:8a:47:a9:66:c1:b5:5d:d1:86:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=21482feb7d5825a677e7b43ce546660b2716e985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:62:7f:8d:03:eb:74:73:05:0b:4c:c7:f9:
ca:aa:ff:7b:a5:c1:ff:95:09:d6:c0:94:84:d6:a4:
4c:28:d7:51:80:96:f5:d5:7f:bb:b5:75:20:d6:3d:
8e:55:5a:3b:88:86:17:2a:46:04:3a:db:2c:6d:29:
e3:b9:ee:bd:75:b4:65:8f:0e:f5:04:81:d9:d4:b3:
a8:7f:53:14:14:06:d9:04:f4:5b:af:ee:d0:c3:c9:
76:a2:14:79:98:a1:9d:1c:e8:5b:5c:3d:3a:24:5f:
6e:25:bc:a7:c6:b8:2e:9b:8f:68:1c:b3:a3:a6:c4:
da:38:01:75:56:e1:4e:27:24:58:1d:37:9f:38:29:
9e:e6:ad:01:9b:84:2d:e2:58:29:3e:70:6c:24:0a:
79:7e:27:9a:58:1d:b7:50:8f:ff:be:8c:fa:de:c5:
3b:7b:be:ad:73:38:fe:ff:2d:fe:bf:ae:ee:d1:80:
1c:4c:2d:dc:a5:bc:b6:ec:65:f5:0b:a6:17:c4:e8:
4c:d6:76:8f:83:9c:7c:76:a2:07:38:3e:d4:8f:21:
84:2e:2a:8e:43:22:29:13:9e:c2:ba:a2:f7:fb:bb:
40:f7:34:43:d5:4d:38:f5:30:e0:17:f0:ce:1e:b0:
27:63:fd:23:28:6a:d5:6c:ab:79:8d:59:c2:5b:71:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:2F:EB:7D:58:25:A6:77:E7:B4:3C:E5:46:66:0B:27:16:E9:85
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ef:2e:b1:e9:d6:43:c7:9c:1b:2b:67:cf:a2:42:d3:33:51:
11:66:16:5a:29:ff:e7:70:54:9a:39:20:ef:ee:a6:69:b7:a3:
a1:38:60:d0:b7:69:d6:59:0f:c6:88:63:c2:69:c9:9d:0e:55:
da:c9:47:0e:01:8b:43:2e:d6:f4:49:7b:4f:c3:c3:f1:f4:71:
a2:af:52:1b:16:62:9d:d3:cf:c9:79:72:da:05:a2:5a:c8:d3:
cd:f9:4c:c5:37:f5:96:a6:12:8a:1a:c4:1a:55:44:ca:d8:79:
92:2d:21:67:99:c1:11:fc:27:28:e8:54:6f:2c:39:65:fe:f4:
46:66:78:45:d2:3b:23:b2:4f:69:ee:7d:fa:22:ff:56:3e:66:
81:e1:16:3d:49:28:d7:0f:87:59:14:75:b6:c7:56:fe:a7:aa:
ae:bb:46:53:e7:a6:a7:31:cc:81:b8:48:46:08:03:e7:28:3e:
ab:01:b0:f0:75:0a:d3:c9:78:95:4a:97:3e:fb:77:31:7f:dc:
fc:ba:3f:6e:21:b8:d9:39:7a:ef:e9:a9:41:97:4a:ad:4f:cf:
7d:c1:02:d8:ad:af:fe:0c:f5:54:2d:52:3e:c9:1c:fb:99:a7:
46:6c:fa:eb:3d:73:c4:b3:79:15:42:fb:fa:ed:d0:ea:9a:5a:
19:f7:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:34 2026 by rpki-client