Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: TS/IvV9sSZ3wYub2jR50PftkAxoY4MLaEm4C3Asxdqk=
Subject key identifier: 3B:4D:2C:27:5D:5A:67:4D:C7:31:76:D0:EA:60:6F:C9:9B:A8:D6:2F
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 019CAB3458D98CB0FF99AA11D57AB55A333D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: epu072M-yH5fn0wfi8GRSm2aacI.roa (hash: 9aUM3YHdPt6HdRiEkTchPF8BsPvndsWsaCnn8YIY3Mc=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: J6r7J+276ESCymrZJHBNomRxkc6hi92J7co2DS6YZYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:58:d9:8c:b0:ff:99:aa:11:d5:7a:b5:5a:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=3b4d2c275d5a674dc73176d0ea606fc99ba8d62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:1e:d4:f8:66:4a:f9:62:22:57:9d:de:80:
37:ac:88:06:f0:33:4f:3a:b0:9d:33:67:88:59:8e:
ee:b4:c5:34:5d:71:3c:c2:06:f8:ca:f5:a1:c7:9c:
50:d2:47:e3:07:89:28:22:0b:d5:69:63:a2:14:7c:
a0:70:6a:8b:d0:91:3a:2c:15:a8:54:36:48:3e:ff:
47:39:3d:37:1f:de:5e:13:3f:78:48:b6:b9:32:89:
c5:d5:96:40:bf:9d:ba:a8:c1:f2:0b:04:ad:df:7f:
e3:7c:3f:97:23:06:05:f2:31:61:12:cd:80:fb:6e:
31:d8:59:ac:01:5c:2c:7f:a5:0a:49:0e:b9:b0:9b:
91:5c:9a:9e:5b:77:fc:08:c5:2f:cb:47:bd:af:fd:
3d:90:38:67:09:fa:65:83:71:55:88:5f:20:17:9a:
57:c6:c0:7f:34:1a:46:e6:24:26:88:be:ca:e3:2b:
f8:c5:ca:67:61:4e:a2:b1:3b:c8:4e:d7:16:95:26:
e7:be:f1:47:bc:dd:b2:52:cc:95:b1:80:66:b4:33:
58:76:e6:b3:35:c1:46:5d:d3:ec:86:ae:54:00:e2:
81:dc:24:22:52:f7:78:76:f9:44:08:ec:f4:8c:3d:
14:bb:ea:17:81:8f:24:db:14:d6:f5:f2:f7:5b:c4:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:2C:27:5D:5A:67:4D:C7:31:76:D0:EA:60:6F:C9:9B:A8:D6:2F
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a0:fa:c9:23:cb:98:e2:3a:3c:77:db:d4:d2:f0:f3:9b:73:
f4:01:18:dd:2d:3b:c3:42:c0:53:70:a4:34:7d:3b:b6:fc:47:
25:92:14:7f:85:4f:4a:a2:ca:7f:da:fd:56:9c:0c:af:a4:71:
e3:30:74:ed:e6:a2:6d:f1:cc:eb:4a:01:9f:9b:25:74:67:61:
80:fa:99:19:7a:22:3c:cc:5c:28:3e:c9:13:c4:34:0d:f3:f3:
39:d3:95:a2:d4:17:30:b2:0d:29:4a:4b:43:e1:78:14:e6:7d:
49:b4:1d:9b:e2:54:ee:0a:06:43:ce:91:21:30:18:2d:86:fb:
91:47:b6:27:fa:1b:9d:d9:f4:92:a9:b9:dc:31:6d:35:c6:27:
31:22:f1:cc:0f:fe:1d:ae:e0:8f:96:2e:e3:57:10:78:44:f2:
95:74:43:66:40:f1:59:81:05:6b:dc:53:54:f3:f0:3c:f5:a2:
18:ce:a3:31:92:cd:c7:50:fb:97:2f:99:a4:df:47:a1:be:e3:
02:c3:57:b3:1b:8c:67:af:f9:83:04:c1:1f:9a:f7:52:46:93:
ca:ba:ba:b8:8a:40:00:2a:c2:7a:dc:20:35:d7:a5:53:28:f6:
70:97:5e:95:af:92:90:3d:9b:8b:36:e4:d9:97:3f:8f:c3:5f:
29:8a:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:18 2026 by rpki-client