Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File: wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier: oRVTqqjJA+W4D6+3DdmZE5rOvPuSAOixzLjpb//pvYI=
Subject key identifier: BC:3F:85:FA:55:1A:0A:5F:03:28:D8:01:3D:4D:21:A8:D2:C8:12:26
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial: 019CAFEC71059D86071373634697928CE9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 19:00:34 +0000
Manifest this update: Mon 02 Mar 2026 19:00:34 +0000
Manifest next update: Tue 03 Mar 2026 19:00:34 +0000
Files and hashes: 1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: AR8s0o4ZR+CEnF0mpNrSm3sOuylpohk55M/wvrI4jsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:71:05:9d:86:07:13:73:63:46:97:92:8c:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
Validity
Not Before: Mar 2 19:00:34 2026 GMT
Not After : Mar 3 19:00:34 2026 GMT
Subject: CN=bc3f85fa551a0a5f0328d8013d4d21a8d2c81226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:f2:a2:ea:33:e1:08:0d:50:64:1b:45:9e:
4e:bd:20:0c:0f:28:15:5f:16:a9:fa:a4:77:06:4c:
6e:e5:54:f7:f1:34:77:0e:7d:fc:e9:8d:87:96:53:
25:95:d7:fd:14:7b:fc:f4:92:90:43:22:b4:03:ee:
61:7a:b5:42:cf:62:c1:66:dd:5b:27:18:9c:a6:91:
ac:86:ee:8f:86:39:c2:e4:84:74:12:dd:d2:71:86:
5e:f0:8b:73:39:f6:b4:e2:65:53:c3:84:64:9c:af:
4e:c4:3b:06:07:ac:b2:64:13:5b:2c:e9:28:7a:ba:
cb:bd:73:f6:93:28:7f:01:6d:37:d5:81:01:37:6f:
cb:64:44:ab:61:2a:cc:f7:2c:b3:a4:04:a4:fc:ac:
e9:73:53:c4:f6:e8:24:98:96:29:e4:f1:9c:01:d9:
77:a7:f4:c2:c8:96:5b:79:42:8a:b6:b1:2d:f4:7a:
a0:83:b8:cd:56:23:99:45:ba:c8:b4:e8:a9:ea:f9:
5f:bf:9b:58:7f:39:e8:9d:f4:e6:88:ec:1c:b0:49:
63:64:cf:d8:63:d3:fa:96:e2:87:74:0b:bb:5b:f5:
18:3f:4d:0a:0d:e1:7c:e4:99:38:24:df:19:4a:bd:
1f:25:12:40:d1:ca:87:e2:09:70:f2:8c:9b:60:23:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3F:85:FA:55:1A:0A:5F:03:28:D8:01:3D:4D:21:A8:D2:C8:12:26
X509v3 Authority Key Identifier:
keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:26:25:f7:b8:4b:8e:cf:fd:87:45:fd:a2:cc:96:bd:30:10:
c5:28:86:4d:28:60:48:3e:a9:5b:31:d3:40:ea:c2:53:ac:7a:
b6:a1:02:ee:4f:a6:40:2a:7a:1f:24:35:ce:63:6f:56:ba:01:
0d:f8:a1:61:7d:87:f2:fb:9d:b9:ee:a0:37:77:b7:6b:6a:f7:
77:9c:e2:a5:ab:47:0d:38:c5:13:ca:72:a8:22:ea:08:6b:b4:
35:ae:ab:85:96:06:db:59:7b:d2:cb:8a:78:db:e9:68:75:0c:
b4:1c:ed:6f:ce:9f:89:ef:fa:f1:b2:fd:63:41:de:61:9f:ba:
fd:e5:e6:2e:e2:62:d1:25:a3:fc:11:d2:14:b0:4e:ef:c3:d7:
f8:6f:ed:ec:f9:a8:aa:ca:21:78:32:6e:5a:90:ec:e5:11:f2:
63:ee:97:7b:1c:03:c5:f1:81:9e:52:6a:65:79:f0:11:4e:0e:
19:cc:0a:fc:61:f4:ed:f8:cf:fa:1f:85:fb:80:34:ed:72:2c:
b6:9a:03:8c:92:7f:60:1a:29:fc:8e:58:b7:f7:b0:c7:d9:90:
60:84:7b:c1:21:24:20:38:2e:32:a3:ac:65:52:62:aa:68:7e:
a5:35:f0:5f:24:dd:ff:56:33:07:84:c6:c1:d9:36:38:b0:a8:
0c:da:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:56 2026 by rpki-client