Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
File: wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft (raw, json)
Hash identifier: CxDDCmqWqEj9Xn77HDYJSRZz/g6pX9opUspuwiy9PpY=
Subject key identifier: 36:94:64:CB:EB:B9:73:32:4E:8B:2B:FB:A6:F0:F4:65:06:A6:19:64
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 019CAAFD373061F1C86C394D33095A03362C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
Manifest number: 100A
Signing time: Sun 01 Mar 2026 20:00:47 +0000
Manifest this update: Sun 01 Mar 2026 20:00:47 +0000
Manifest next update: Mon 02 Mar 2026 20:00:47 +0000
Files and hashes: 1: a2wJLV7P5DGWhusYzf4J4uUDAug.roa (hash: q6iaHsPiufcNlLRUKtOJ5vKMvHcKJCFipIPxXUmEW6U=)
2: hkDILjMkkdM5vhdicPcOC_rPPAk.roa (hash: 5pbYYSt+DRX/pDl00GSjYc7pEFz9SrosjpZf7GRqg18=)
3: wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl (hash: qx8DW3Mc9bnH2MwwffPxQNqQrswI4aYalILf9jHASlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:37:30:61:f1:c8:6c:39:4d:33:09:5a:03:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Mar 1 20:00:47 2026 GMT
Not After : Mar 2 20:00:47 2026 GMT
Subject: CN=369464cbebb973324e8b2bfba6f0f46506a61964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:c2:c4:76:05:69:da:22:eb:9e:b4:b6:70:
3e:e4:93:31:b8:36:6f:4d:fa:b4:15:00:96:f4:14:
56:1b:97:b9:72:33:5a:99:5f:ff:33:5f:67:c9:16:
07:ad:80:f8:99:d0:79:6c:63:6a:ef:28:73:90:98:
b4:1b:04:91:1e:ce:fd:b1:64:91:c5:f7:16:25:35:
c5:3c:8b:06:9b:5f:92:7f:1c:49:9b:90:04:25:9a:
42:86:5b:be:1b:4d:60:f7:10:6b:e1:b8:31:1f:9b:
3a:77:f2:81:fe:61:e8:22:a0:11:8a:1c:b6:84:0f:
52:7c:ba:ab:50:b5:a9:a1:20:4f:9e:f0:05:ff:19:
63:03:9e:48:60:fb:94:67:85:88:65:b3:0e:03:a1:
9d:3d:9b:3f:31:83:01:ce:97:c0:9f:0e:26:ac:05:
a3:b9:12:f9:0c:82:d8:8b:bc:04:41:60:bd:5d:49:
ea:5c:dd:fd:cd:f6:ba:5c:20:99:d2:32:cb:e8:59:
bc:a4:38:9c:c9:e2:f9:da:37:eb:91:3a:db:5e:97:
08:f0:37:2f:c7:c2:89:2d:64:98:d0:39:db:24:4c:
29:f8:b7:d2:06:2d:b8:6d:b5:9a:56:5f:0b:3a:48:
21:08:47:f4:87:04:16:d3:7b:f7:67:56:a6:70:d7:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:64:CB:EB:B9:73:32:4E:8B:2B:FB:A6:F0:F4:65:06:A6:19:64
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:45:3e:b4:79:19:99:db:b9:e8:98:18:84:63:61:c0:f4:b9:
53:65:a4:d4:9c:78:8c:b6:e0:0d:2f:8d:f9:81:79:c4:10:a9:
a5:73:aa:9a:12:8f:97:c6:31:c7:97:b0:e2:2e:15:55:1f:f1:
52:06:3f:a2:b0:2e:66:d2:86:95:f8:61:16:f0:34:f8:92:45:
02:0f:8a:df:61:2d:c0:cd:2f:65:2b:9e:f9:08:80:1d:04:92:
d5:c6:06:88:53:bc:4b:d5:c3:47:9f:42:ef:f3:69:0f:29:c5:
6b:fd:e2:ab:60:f6:74:28:5f:d4:f9:fb:27:dc:c9:ab:a7:89:
6c:e7:88:a1:9f:e9:5b:8a:37:5c:c9:43:32:62:71:8c:57:82:
9e:0a:c5:32:a8:1b:b1:7f:e4:b9:99:ba:e2:f8:34:56:a4:bc:
23:2f:aa:25:66:8d:c9:1a:96:a5:90:07:3e:bb:96:32:60:01:
0e:43:c2:d3:c2:d1:dc:fa:37:66:05:54:42:19:20:f2:a4:5a:
0c:49:ba:6d:80:0c:d2:06:4b:74:29:81:4e:45:01:d3:89:99:
4b:26:6a:43:13:2d:d5:48:ef:88:06:e6:c6:31:55:07:c1:bb:
07:3a:00:e1:8f:53:2e:cd:cc:02:a9:e0:72:44:f0:12:e2:a4:
04:9c:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:47 2026 by rpki-client