Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier: RsQ1J43X8uUynjmNww36H0yVXPt/2ZxTBW38siFA8PY=
Subject key identifier: AF:41:6D:AC:11:1B:F9:FF:26:42:D4:C4:05:64:7E:AF:99:C4:9A:EF
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial: 019CADC80DE7712657077FA04EF7502D0BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number: 05EA
Signing time: Mon 02 Mar 2026 09:01:34 +0000
Manifest this update: Mon 02 Mar 2026 09:01:34 +0000
Manifest next update: Tue 03 Mar 2026 09:01:34 +0000
Files and hashes: 1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=)
2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: lIhgf0POcdEOTyNDOq7Z0xOZy6bqoAYfl8pmEIEvupk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0d:e7:71:26:57:07:7f:a0:4e:f7:50:2d:0b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Validity
Not Before: Mar 2 09:01:34 2026 GMT
Not After : Mar 3 09:01:34 2026 GMT
Subject: CN=af416dac111bf9ff2642d4c405647eaf99c49aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:26:a0:e3:22:27:d6:ab:f6:eb:82:b3:c5:
ed:1d:d1:1e:c0:f0:ee:18:86:56:a9:8f:44:19:ae:
38:1a:e4:66:2e:b5:1e:d6:10:67:45:37:61:98:77:
8a:01:4d:5f:39:cb:75:01:c9:56:33:48:1e:3f:31:
3b:4f:c3:f2:8f:79:f8:cc:a7:eb:67:de:a4:7d:48:
42:79:fc:28:1a:ba:96:4c:c8:7e:1d:72:e0:bf:86:
d4:c5:04:b9:6a:9d:ed:c6:04:44:99:b4:a3:e0:19:
19:53:6a:97:44:e5:0b:1c:d0:7c:8f:6a:cc:e0:c0:
8b:5d:8e:46:19:3a:c5:c5:72:c0:46:e0:27:9c:11:
29:90:61:50:26:bb:75:bc:5d:27:3b:89:db:a8:d0:
3b:5b:92:77:9f:9b:55:07:a9:6c:a7:3c:1c:61:de:
b7:67:e9:76:02:b6:fb:c8:c0:7d:7e:74:77:b9:91:
13:ee:32:0b:34:04:f9:d7:76:db:91:57:06:3a:ee:
18:3b:4d:0c:74:c6:04:0f:56:4e:67:a7:a8:7d:3b:
38:29:ac:87:d0:13:ad:8a:4c:20:22:be:00:ac:bf:
cd:29:a5:70:87:46:13:bf:f0:c6:6a:18:81:7b:21:
96:d2:86:15:61:bc:e8:fa:d1:47:50:2d:f5:c0:ad:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:6D:AC:11:1B:F9:FF:26:42:D4:C4:05:64:7E:AF:99:C4:9A:EF
X509v3 Authority Key Identifier:
keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:f8:ba:46:07:5a:59:ae:a9:77:d8:97:90:06:50:89:01:
98:7f:4f:0e:d6:c5:2d:4b:a2:d8:1b:e2:ca:e6:80:ed:4d:09:
ae:f0:ce:f7:82:b6:8c:c1:2e:2e:71:97:68:66:50:0a:7a:24:
3c:a2:7a:d3:31:47:ef:68:97:07:6d:89:cf:ca:3a:bd:3f:58:
14:53:81:80:67:de:6d:f2:61:35:9e:8e:fc:61:a0:bb:47:74:
07:3f:d0:9f:86:06:d2:82:6a:39:68:fb:5f:3b:66:7b:2b:ae:
47:e2:07:e2:29:99:2d:32:04:db:80:c2:de:59:ad:95:f5:97:
29:3b:0a:89:fd:10:72:8f:1f:e5:92:73:06:c3:00:e5:49:cb:
62:87:2d:33:54:32:e1:a7:4e:2f:ff:3f:8e:e7:a5:42:69:c9:
95:15:fd:14:d0:e9:e7:54:40:88:54:ba:16:28:fa:b9:eb:a7:
f5:33:5c:08:e3:df:a8:ea:89:89:3f:a5:2e:87:56:8e:23:c5:
9d:03:4c:f4:3e:19:fe:91:31:29:f6:11:3b:99:b4:8b:bd:06:
ea:f2:e8:98:1c:d5:56:ac:c8:b5:cd:43:af:8a:f3:d4:33:4a:
db:b9:3e:1d:ec:97:9f:49:fa:85:64:c9:e1:6f:58:92:21:32:
44:96:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:22 2026 by rpki-client