Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: Z/vti3sxkn71funNARBoSGimgNwzcJpupcTeCgMuFoQ=
Subject key identifier: 20:77:3E:2E:88:A2:EB:82:29:FF:CC:45:98:C8:2B:B5:F5:E0:6E:B9
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 019CAC7E0F830452C0CA86A6212AA1A38734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 098B
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: arSnrh2cIQFXU6r5xBLOkYg5TMWBzmqr8QcpnHrdSpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0f:83:04:52:c0:ca:86:a6:21:2a:a1:a3:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=20773e2e88a2eb8229ffcc4598c82bb5f5e06eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:4d:a2:18:be:a3:13:49:2c:e6:62:52:cb:
9d:e7:df:7a:08:77:07:2d:e9:0d:78:18:50:cc:43:
ce:d7:4a:e8:c0:54:7d:56:19:ba:16:a2:78:79:4f:
34:cd:c9:51:f2:04:4c:78:65:c5:25:e9:46:04:7e:
cf:68:04:08:78:ae:6e:62:1e:50:76:16:18:bc:d7:
46:f2:26:f8:50:c1:b7:99:50:48:d1:74:8c:81:80:
b7:b7:21:5f:ae:ab:83:76:29:02:a4:98:a1:10:61:
b7:e0:0f:bc:81:44:b0:54:4a:c3:a3:35:1b:1d:92:
32:93:0a:c8:d9:d8:7a:4a:11:1f:f0:82:c1:a9:68:
b0:41:7e:ee:d7:eb:12:a3:d9:9b:54:89:d2:18:39:
de:ef:2a:d1:a1:fa:43:79:64:cb:68:7a:6c:f9:06:
c7:c5:5c:5e:9d:9e:76:5a:9b:b3:8e:dc:b8:8e:3c:
c1:2d:a2:bf:5a:47:8f:4b:f6:28:2d:8f:b0:00:df:
9e:64:fb:5d:9a:bb:a2:d3:db:24:f5:7c:ed:b3:44:
5c:e1:91:47:92:c1:83:a9:82:9c:b7:28:55:8d:26:
99:94:58:24:91:c7:a0:d3:92:36:0d:de:17:fd:07:
39:36:48:0a:ff:15:cd:92:03:e3:8d:c2:a0:f9:d3:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:3E:2E:88:A2:EB:82:29:FF:CC:45:98:C8:2B:B5:F5:E0:6E:B9
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ea:aa:46:fa:23:f5:36:a4:83:f6:8a:a3:d6:2e:6d:16:6d:
e5:7d:05:be:23:29:0b:30:6e:ec:db:fa:fd:79:ae:be:56:0b:
97:ea:6b:3f:8d:d9:b8:a3:2a:e3:ad:90:f8:75:b7:ff:a1:8b:
5d:a7:fe:71:eb:f4:39:05:80:8b:70:bd:ed:bc:e9:ba:db:8b:
00:dc:d9:8c:64:4f:45:45:90:ec:82:76:be:da:7e:3d:d9:c4:
db:89:9b:88:38:ea:69:5a:cb:dd:28:02:16:4f:66:9c:e2:0d:
86:3d:a7:ac:07:e5:7e:50:08:ea:b1:03:44:09:a4:77:46:1d:
2f:ea:41:cd:43:ff:c1:3a:b8:3d:06:ed:55:fb:f1:0c:98:d0:
1b:c7:4f:c3:05:76:ce:d9:2c:7e:12:83:c8:83:d6:14:a3:52:
69:f9:c6:2e:e5:ee:29:e0:b5:6b:75:55:3d:b9:ad:af:53:15:
30:4a:f6:64:8d:78:a7:cf:03:44:65:25:13:6c:e9:a7:8a:0a:
94:cd:a8:69:c2:a9:ee:3f:4b:67:dc:0e:4b:95:61:48:17:6d:
55:c9:8f:bf:8c:a2:96:68:a9:2c:b3:e0:c4:5f:90:8d:ce:34:
a8:97:7c:bc:22:3e:92:7f:8b:bd:cd:ef:f5:f5:63:b7:c8:f5:
f5:b9:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:45 2026 by rpki-client