Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier: ZK0+N5BlKnw4F2VZHj0U1dMlnS33j24+NxlpFvj9qj0=
Subject key identifier: 89:B0:CE:65:C1:A6:9C:B9:D6:63:32:0C:99:71:71:9D:75:9E:A1:88
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 019CAD5942144801CA2F0AFE497D76656FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number: 0CF9
Signing time: Mon 02 Mar 2026 07:00:33 +0000
Manifest this update: Mon 02 Mar 2026 07:00:33 +0000
Manifest next update: Tue 03 Mar 2026 07:00:33 +0000
Files and hashes: 1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=)
2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: QOuZlz/CiHgjAq+MrWEhpBlPQA2tIMTADFOX3Q3afuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:42:14:48:01:ca:2f:0a:fe:49:7d:76:65:6f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Mar 2 07:00:33 2026 GMT
Not After : Mar 3 07:00:33 2026 GMT
Subject: CN=89b0ce65c1a69cb9d663320c9971719d759ea188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:70:9c:7a:46:aa:60:48:09:6a:1d:c3:13:
62:e2:63:5a:d5:f5:da:ca:9e:77:1c:cd:50:9a:34:
b8:12:4f:37:b5:02:ea:46:a8:94:35:3b:fc:83:19:
eb:41:e7:9b:33:0e:17:45:58:17:e2:ed:d1:07:25:
11:fc:88:0a:7f:7e:e9:4f:82:66:93:cd:1c:d7:f1:
be:60:77:d2:17:e3:11:84:b5:68:c1:bd:77:c7:f7:
a9:89:bd:4b:ab:fd:96:98:58:9a:f6:c9:73:f3:30:
bd:56:23:0a:dc:34:77:66:64:d6:a3:95:09:90:73:
e1:da:79:48:e8:04:71:7d:49:98:db:e6:78:14:c3:
eb:15:1e:a5:56:24:4c:a4:ef:ff:a7:5e:5b:d3:78:
0b:ec:3e:0c:07:ef:07:18:5f:61:ba:cf:9e:00:a2:
fd:8d:87:05:39:ff:4b:54:18:3c:95:b8:c2:5b:dc:
8c:1c:fd:da:ce:e4:5e:60:56:a3:fa:db:36:b9:a8:
3c:d4:0d:f5:18:e9:83:b2:64:c5:d8:ce:a0:e0:e7:
81:91:73:52:f4:31:f4:9c:5f:e5:28:33:ed:53:b4:
85:ed:7b:25:d9:a0:c5:46:3e:d0:9f:0a:0d:e5:ce:
85:58:9d:e4:f8:22:04:69:da:b6:de:21:10:bd:a9:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:CE:65:C1:A6:9C:B9:D6:63:32:0C:99:71:71:9D:75:9E:A1:88
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:40:68:14:70:3f:8e:7f:ec:88:95:7c:2a:55:0e:77:97:1e:
18:e1:2e:f5:c3:df:2f:f9:b5:d2:71:2c:c3:53:b3:1b:1a:c2:
96:21:c7:6a:a1:f4:10:b5:2b:28:d3:6e:02:ad:74:c5:db:09:
5e:48:dd:b4:f9:cf:2b:21:a2:89:d8:ea:a5:60:7b:90:ce:c0:
07:97:f0:5a:49:2a:25:fa:5a:94:47:f5:ef:82:e1:73:db:71:
9f:36:a4:11:fd:16:4a:71:61:48:72:e3:2b:ee:13:d2:3e:e7:
5d:c4:34:c0:70:34:b6:c0:2e:2b:f0:e6:d9:1d:f1:08:a5:ed:
89:2f:65:d7:36:dc:8a:c0:a4:d1:83:5e:4c:32:36:2b:3d:7c:
9c:5b:ad:e8:a0:4d:b3:d4:96:7c:c4:28:36:22:e8:45:34:a3:
ae:e6:be:a3:b3:2a:66:7d:0e:be:58:e7:26:57:5a:c3:7e:8f:
5c:ef:8f:a5:31:fe:21:db:ea:9f:1c:aa:ec:eb:2f:7c:44:19:
98:e8:53:1f:2f:4d:c6:f2:c0:d7:40:43:41:6a:9d:d8:6c:f7:
c8:23:a1:e8:75:fb:01:d6:4e:d5:e2:6e:7d:dd:45:18:83:ac:
70:12:f6:24:09:da:87:27:f4:3e:a7:27:26:77:35:a7:d7:96:
e5:4e:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:23 2026 by rpki-client