Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File: wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier: h/ETMhyQ89tmJUVKtu8UZ5MuysaSjDl57Urr+NzVbms=
Subject key identifier: 95:E9:AB:53:68:7D:5C:54:2A:1C:37:AB:82:5B:05:05:16:4D:F4:EE
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer: /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial: 019CAA586C1604503CC8E5BE39509956ABF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number: 17D5
Signing time: Sun 01 Mar 2026 17:00:47 +0000
Manifest this update: Sun 01 Mar 2026 17:00:47 +0000
Manifest next update: Mon 02 Mar 2026 17:00:47 +0000
Files and hashes: 1: LJ5gZJSPzwjdTVggDFY4W_1l4w4.roa (hash: ik1OvlzeTsw4mzKCrPXBw8FurNhNyxucfV+IOGhqUhU=)
2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: vtmtvAAEQGEMHk3uUzK5HPEzlShSqNoe0aAC8yT4ITM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6c:16:04:50:3c:c8:e5:be:39:50:99:56:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Validity
Not Before: Mar 1 17:00:47 2026 GMT
Not After : Mar 2 17:00:47 2026 GMT
Subject: CN=95e9ab53687d5c542a1c37ab825b0505164df4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:d0:62:cf:f7:c0:f3:f0:4e:22:40:8e:06:
ee:57:2d:7e:4e:62:ea:16:6f:e7:76:5c:99:52:75:
45:8f:07:55:24:7d:d4:de:49:0f:d6:d6:18:2a:4b:
48:71:ed:95:f6:58:ce:ad:87:51:56:71:04:8e:8e:
45:3d:31:58:21:35:59:c2:c8:53:d9:9b:1e:1c:4d:
05:3c:1c:2b:e2:7f:88:b9:25:50:da:33:81:4e:21:
0b:13:a8:53:89:ac:6f:59:75:d0:c4:da:b2:b6:dd:
97:0a:15:5c:34:21:2c:8a:af:1a:fa:58:0d:8e:b4:
90:f8:fc:e7:09:f2:69:3f:27:8d:cc:bc:b3:6b:3d:
72:f7:1c:e1:6d:82:02:74:9f:f7:f5:69:2a:25:85:
df:95:42:5f:c2:13:77:e5:2e:2c:c5:f5:59:4f:ba:
b9:b5:1a:43:23:a5:70:a2:13:ba:42:2d:ba:af:93:
32:09:0e:e6:d5:ee:0e:cf:29:79:64:58:74:fb:eb:
ff:c5:ed:0a:23:d7:d1:0d:75:8e:f0:d5:51:5f:2f:
41:15:5f:12:f6:c1:9e:88:b8:0e:aa:cb:d0:45:9e:
07:89:58:fb:cb:66:52:9d:47:12:5b:45:c8:05:84:
ac:a5:ad:aa:82:4a:94:6b:20:c6:6e:32:4c:33:7f:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:AB:53:68:7D:5C:54:2A:1C:37:AB:82:5B:05:05:16:4D:F4:EE
X509v3 Authority Key Identifier:
keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:58:e8:31:38:8e:8f:e6:70:28:f9:6b:cb:9c:0e:c0:00:48:
c0:a8:64:14:eb:c2:44:d6:30:aa:2e:2b:6b:4e:46:47:08:5c:
c1:9a:b2:74:53:42:8f:12:c9:c3:29:81:62:d4:88:4b:35:93:
ee:a7:b7:d3:5c:78:80:fd:b4:33:bc:37:10:d7:ba:15:ba:63:
83:22:a7:40:5f:94:15:d6:c5:6c:0b:89:7d:80:b8:c5:32:54:
26:57:df:2e:5f:36:dc:50:8a:a9:98:d0:7e:52:98:92:0a:04:
eb:ec:4e:9f:6a:e4:c9:f2:f2:44:00:27:8f:e3:40:b7:67:86:
7a:2b:d7:52:82:c4:cd:95:7d:e0:8d:e1:c0:68:be:9f:15:f7:
6a:78:86:5d:b9:c4:a9:8b:a5:15:bf:35:fc:15:88:d3:26:0b:
2e:5a:a8:8f:ee:0e:b4:7f:a5:b7:07:4a:75:81:26:11:24:d3:
d2:25:65:d9:71:22:39:69:21:1f:ef:fb:de:db:30:47:be:eb:
5b:dc:ee:4f:01:1f:c8:9d:f8:e8:d4:02:d8:75:2f:1e:36:dc:
53:44:9e:02:0e:f6:84:37:25:a7:75:0f:24:9f:d5:00:61:35:
9b:13:c9:e1:5f:c2:3c:cf:1d:ff:dc:04:0b:2a:43:9e:0c:6a:
02:29:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:55 2026 by rpki-client