Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
File: wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json)
Hash identifier: jP8YEXxm/YSut/KRmbB17XR/addbVu7zL7ZCxWTaKsk=
Subject key identifier: A6:37:BF:BC:AE:FA:B8:E7:2A:DC:F8:4B:FB:43:CF:56:FA:54:FA:C3
Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Certificate serial: 019CAE6C799B0F90BC68CA8F018DB8748952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
Manifest number: CD
Signing time: Mon 02 Mar 2026 12:01:10 +0000
Manifest this update: Mon 02 Mar 2026 12:01:10 +0000
Manifest next update: Tue 03 Mar 2026 12:01:10 +0000
Files and hashes: 1: pwR2uuhLQb704CaTl-JhUr6tQUw.roa (hash: WST6jplxdqOcMqOOJtSBgG40d9NpmMZJxxHB0hC7zBU=)
2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: nSsi5Tl/cHiS1NzrKBSvM5MBnm+OQWa8VT0xCKaH2IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:79:9b:0f:90:bc:68:ca:8f:01:8d:b8:74:89:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Validity
Not Before: Mar 2 12:01:10 2026 GMT
Not After : Mar 3 12:01:10 2026 GMT
Subject: CN=a637bfbcaefab8e72adcf84bfb43cf56fa54fac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:c4:04:ac:44:ab:9d:1d:a5:31:2c:e8:a5:
31:71:fa:59:96:84:a6:6a:80:af:f6:57:e1:0a:e8:
1d:6e:cf:70:a5:0e:1d:8d:8f:a6:e1:24:44:c2:e6:
ad:7b:1c:44:3c:2b:d5:2b:b3:2c:6a:cb:f8:21:18:
df:a1:20:14:96:79:d9:33:4b:a8:0c:64:30:a1:b7:
67:e4:93:7f:a9:31:7f:66:23:f3:ea:b8:29:3d:e9:
21:5e:f8:92:bd:a2:f8:ae:84:a6:11:13:f3:39:36:
d1:47:09:06:da:81:83:c3:ad:cf:a8:8d:44:24:58:
4f:f8:02:e3:9e:fc:da:c5:90:80:17:75:b8:2f:92:
32:91:13:26:5c:9b:34:74:58:ee:97:ff:bd:1d:02:
5a:80:a6:2d:fe:ce:f5:be:db:74:77:4b:36:3f:c7:
c9:aa:76:36:60:39:8e:b4:69:92:a3:51:b6:7f:16:
89:2c:7e:dc:5d:60:71:49:ad:a6:cb:1e:2e:d2:68:
a5:d0:0c:2c:be:91:a5:9e:19:2f:b0:88:3d:91:60:
25:5f:33:49:b2:68:b4:07:17:8d:d6:73:3c:d3:e7:
34:12:f0:70:4d:e9:22:4b:a2:0d:7a:23:6a:ea:44:
2e:18:55:d4:72:1e:eb:8a:10:a0:f8:4e:f7:20:f5:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:37:BF:BC:AE:FA:B8:E7:2A:DC:F8:4B:FB:43:CF:56:FA:54:FA:C3
X509v3 Authority Key Identifier:
keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:07:9e:3d:7c:01:85:31:92:ca:99:8b:c8:d0:58:9a:19:
e2:ee:da:24:28:a0:0c:a9:68:b9:db:58:98:14:78:a4:bd:0e:
02:58:01:67:7b:ec:ef:28:3d:52:76:81:71:35:34:e0:95:7a:
ea:48:0c:bc:34:02:1d:5e:7e:90:af:aa:e7:3b:97:57:51:61:
32:df:ce:6d:0a:01:0d:a9:5e:7f:2e:8e:a9:b7:ec:3c:25:20:
c3:99:b6:bb:67:5f:b7:05:bb:14:db:0f:63:8f:af:e2:55:bf:
83:33:9d:e7:50:9d:8d:54:be:45:11:f4:dd:ca:3f:2a:fe:cb:
6a:17:e7:4c:65:e8:74:8f:46:ee:73:b7:02:c4:e5:b3:99:b9:
92:0c:9f:4b:25:82:66:ce:22:bf:5f:54:8a:13:d0:43:9a:03:
f1:96:17:96:ba:e7:5e:e6:24:9d:ba:0f:1f:fd:ad:3b:0d:69:
f2:aa:a1:b0:13:d5:bb:08:9d:30:f7:a9:22:dd:81:4a:90:82:
55:3a:1b:63:16:ee:57:37:df:45:8e:ec:7d:bf:cc:62:23:02:
e5:62:16:ba:c4:d8:47:90:e5:e3:2a:cd:b1:26:7f:da:0e:c6:
a7:f1:52:2a:1e:ac:ea:0c:81:94:30:ed:ee:a2:6f:a3:60:0d:
34:71:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:40 2026 by rpki-client