Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier: 6suT4bLjH/hAAxUeNo2CIbkzIev9M7izmutNQt6kduE=
Subject key identifier: FB:29:40:31:F2:FB:4F:39:6B:39:F6:54:DD:43:33:8B:F7:25:9E:E4
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 019CAB6AF3F2BA84354DA1D3396685C3B2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number: 13DE
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: GWCQDoCj1EnoGr4G4aQGE_yERiw.roa (hash: jbmBzxR3cM82xnuqQI0lxiYS+XoV+IrgikeHq5X9ZmM=)
2: Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa (hash: Bnj3IDrJ882iRsnMbr53VXkROwmtnT/7J8NLZ7LP/VA=)
3: fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa (hash: 9DTO9B8YoPB/uUt1Im78LbNqxaAWyEGXlRRw0zOgX3E=)
4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: cH8cY96mdOIq5DYTlVKQPh0mQrcx/wT1WxAFTjpDpsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f3:f2:ba:84:35:4d:a1:d3:39:66:85:c3:b2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=fb294031f2fb4f396b39f654dd43338bf7259ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:f0:50:43:31:be:d0:02:7d:5d:0b:c7:0f:
31:16:53:ca:08:5b:19:9f:5f:83:f5:a9:cf:85:a0:
f4:61:c2:07:d9:2e:a5:21:5c:49:a4:6c:ac:c3:81:
4a:09:da:8e:ea:ea:e2:30:da:46:de:03:21:3b:97:
3c:b5:03:3c:47:46:d1:38:ef:bb:f6:37:4b:55:0d:
e6:60:56:81:2d:70:ca:8e:1a:40:ce:da:b1:07:8b:
af:8f:c5:45:23:3a:e8:b5:df:e4:1c:e0:3c:94:50:
52:60:31:b1:68:6c:57:b7:a8:2f:ef:a8:fc:84:21:
27:22:e4:3f:9b:85:59:32:d6:15:53:d2:ef:8b:30:
b0:49:29:78:bb:6e:f4:54:d4:16:95:da:02:a4:92:
29:ad:51:fd:11:1c:68:17:3c:78:58:c8:45:18:ae:
b2:10:4d:49:77:f6:54:ea:b1:3c:ac:6d:a2:20:63:
e6:e9:64:fc:ae:55:a8:a7:86:ff:ca:6e:e9:d9:6b:
95:e5:ff:99:40:8c:b5:3c:6f:21:eb:7f:22:9c:96:
0b:e9:7f:ba:b6:cb:79:60:e6:ee:eb:ff:25:6b:5c:
85:bd:fa:50:c1:59:ae:09:6e:e6:91:ce:6b:fe:fd:
87:95:b4:8d:e7:43:06:ba:5b:4a:87:a3:31:3f:b6:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:40:31:F2:FB:4F:39:6B:39:F6:54:DD:43:33:8B:F7:25:9E:E4
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:61:a8:36:5c:39:f0:0c:19:39:98:70:35:74:d6:21:46:3b:
a5:a6:ea:c1:cd:ef:2a:1b:22:07:9c:21:e1:4c:63:2d:a7:8c:
1f:f9:a6:bb:72:d9:d1:3d:52:e8:2e:c9:fe:7c:8c:7f:34:79:
ee:f7:c3:8a:1b:b7:02:57:85:57:be:f4:6e:78:cf:e4:c3:6b:
3e:e3:ad:5f:8f:ae:41:64:c9:8e:68:5d:8d:b1:82:00:a4:6c:
b7:8d:20:42:f7:f4:a2:f2:b0:80:90:a9:39:22:07:82:f2:b9:
49:07:e1:78:68:d4:b1:b8:18:cc:45:d9:e8:b8:0b:97:92:7f:
33:65:ac:7c:64:bb:f8:a3:66:d1:38:6a:bb:8a:f3:e3:60:4d:
d0:88:d1:3f:23:5e:9d:09:61:14:86:a8:93:38:0b:71:2b:27:
2e:df:7a:c9:84:84:69:ad:71:77:a5:63:24:ec:58:d4:6a:ee:
35:4c:0e:87:ed:85:d1:00:18:fd:bc:ad:99:c4:4e:83:8b:3d:
e0:8b:05:6f:51:4b:4e:03:be:7c:09:fc:11:59:53:b6:5a:ea:
48:d4:55:02:49:11:b8:da:07:e1:90:c7:0a:d2:ec:f9:6c:19:
e8:fd:cd:ed:df:9d:b2:3c:d4:f6:c3:e5:8b:06:03:fc:4a:30:
70:d1:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:15 2026 by rpki-client