Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier: /sMQSoPEg05dbyFGn4lMR4ijJS2P7qVI0eSjGYcbjq0=
Subject key identifier: A2:51:DF:7F:57:A6:3A:8B:B3:B3:60:F1:E5:FA:F2:3C:CE:B4:77:97
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer: /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial: 019CAE3577858793D54D95CA9D2537D0D332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number: 1040
Signing time: Mon 02 Mar 2026 11:01:05 +0000
Manifest this update: Mon 02 Mar 2026 11:01:05 +0000
Manifest next update: Tue 03 Mar 2026 11:01:05 +0000
Files and hashes: 1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: yyhid2xzb+d/0wJtkxGsbQ4n30pLe0jcS+EzFyqOMio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:77:85:87:93:d5:4d:95:ca:9d:25:37:d0:d3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Validity
Not Before: Mar 2 11:01:05 2026 GMT
Not After : Mar 3 11:01:05 2026 GMT
Subject: CN=a251df7f57a63a8bb3b360f1e5faf23cceb47797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:87:d3:d0:66:1e:e6:df:f1:73:3f:f0:57:
e0:9d:15:98:9e:74:6c:a9:60:0f:5d:f6:88:1f:4d:
a8:80:ae:a8:58:e3:0e:21:75:f1:e7:64:34:f1:70:
78:7b:01:cb:ef:8e:16:6c:37:55:67:fb:48:d6:53:
fc:95:b2:43:0a:54:af:33:6b:67:4e:ad:a8:0d:34:
9b:ed:f0:9f:2e:ea:78:36:0e:25:a4:05:6a:2c:63:
ff:6d:17:e9:15:20:3d:cb:b3:3a:fc:0b:dd:07:33:
0f:c5:76:20:c5:2f:81:f9:0f:4f:af:17:93:84:0f:
ee:10:d8:cc:ae:20:7b:03:69:06:e2:4b:35:f5:cd:
f4:e3:58:76:6b:e9:23:af:a7:71:a0:a5:8c:85:a4:
e9:c7:b2:ae:b1:b7:ce:27:78:ba:1d:c8:96:15:05:
89:6c:ec:36:d8:18:99:0c:3c:aa:8f:c0:e6:ad:fe:
49:03:73:84:f4:62:52:74:64:ce:d9:73:b9:3f:cb:
db:3e:2a:d6:fc:38:19:92:ea:3f:a9:e6:86:55:9c:
36:0d:ab:1a:e4:08:aa:45:06:f8:29:2b:23:ee:4e:
13:21:e6:f2:49:73:cd:8a:8e:61:32:db:a1:95:fa:
bc:c7:53:74:e4:43:96:54:1f:30:5d:0c:4f:8e:a7:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:51:DF:7F:57:A6:3A:8B:B3:B3:60:F1:E5:FA:F2:3C:CE:B4:77:97
X509v3 Authority Key Identifier:
keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8b:d6:cd:2a:17:0c:88:35:d9:ad:f7:b7:c8:8e:16:9e:25:
3b:ea:b9:a1:b1:c9:34:bb:06:ba:ef:f8:37:5f:2f:5c:7a:75:
db:71:5b:b1:0c:06:cb:40:ae:7a:df:de:ab:49:c2:27:46:6b:
0c:dd:5d:fe:27:17:0c:07:c9:81:6d:59:9a:85:88:4e:60:7c:
38:0f:b4:6b:3a:06:23:eb:96:47:dd:7a:f8:29:f9:34:93:fd:
79:9d:34:3f:f6:77:28:62:bb:47:af:b2:06:6b:1c:99:1e:39:
6a:9f:62:6d:bb:28:0d:55:c3:33:e6:1c:3b:2b:d7:f2:4f:75:
28:c4:62:c4:18:ba:e1:86:a0:5c:e0:ab:4c:3e:11:36:da:d5:
9e:8e:8e:b0:6c:37:37:fc:d7:01:02:78:2a:78:13:5b:a3:3e:
08:0a:88:8a:80:b4:bd:63:07:58:ea:b1:5b:ae:b1:a1:9c:c3:
f3:45:6c:e8:40:51:e9:4d:dd:67:20:2e:20:3d:a0:18:c6:0e:
39:34:88:23:6e:fa:74:89:95:71:7f:26:fd:ae:2c:88:25:b1:
5d:11:18:73:a8:51:b3:2d:c8:ed:bc:0a:b3:65:bc:7c:73:69:
25:2c:0b:07:10:fd:e4:b0:c6:2d:8a:9a:cf:4c:84:a9:e3:81:
13:54:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:46 2026 by rpki-client