Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: c3NJqKTUWQLWWm8GQn9Occ493UZ+N4clMmbEK3MXeHA=
Subject key identifier: F8:55:52:BD:A3:D5:2D:54:5E:32:09:DF:BE:7B:62:46:8E:4F:9E:89
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019CAAFD682EBA67E27FA4279BA7E11B0059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0CC7
Signing time: Sun 01 Mar 2026 20:00:59 +0000
Manifest this update: Sun 01 Mar 2026 20:00:59 +0000
Manifest next update: Mon 02 Mar 2026 20:00:59 +0000
Files and hashes: 1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: IuTLqlAJitnvP//n0wihM70HEPIzwG+FHbggMvCBx/Y=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:68:2e:ba:67:e2:7f:a4:27:9b:a7:e1:1b:00:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Mar 1 20:00:59 2026 GMT
Not After : Mar 2 20:00:59 2026 GMT
Subject: CN=f85552bda3d52d545e3209dfbe7b62468e4f9e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:09:4f:4e:ae:93:03:60:3d:02:b0:5f:6a:
a9:89:f5:0c:6d:87:4b:e0:80:83:05:74:12:ec:19:
3c:cc:7b:12:d5:52:9e:aa:62:ed:01:dd:58:ea:ac:
ef:3c:1d:95:8a:54:c8:7d:3f:8e:ab:34:18:de:ea:
1a:46:47:db:a1:b9:7f:4b:e1:db:15:b2:87:70:54:
f0:40:43:1f:2f:80:d3:b9:9c:42:f9:06:b2:9f:6f:
ab:4b:f9:bb:98:fc:80:92:82:f3:2d:e4:8d:ce:c3:
18:1c:f9:60:2f:9c:b8:8b:0f:99:b2:d9:a4:64:06:
79:b6:1f:90:3d:48:d9:a2:24:fe:d2:d1:f9:6f:fc:
80:54:3b:ce:a4:fa:c8:da:42:e3:85:5d:38:d9:3e:
da:6c:26:dc:e0:ed:2e:39:50:0c:a8:a2:46:7a:97:
9d:52:5a:7f:7c:03:c4:41:54:c3:d0:e4:29:41:5d:
c1:e5:f1:a9:46:c5:59:d6:3b:81:a4:00:a3:2d:e1:
38:1a:50:df:a8:12:b1:97:d6:67:f7:e5:83:23:b8:
dc:3a:fe:23:b3:8c:9b:bb:cf:63:dd:9c:53:fa:da:
a9:6b:14:d1:bc:fe:07:f0:ac:7f:60:e0:79:24:d3:
97:ff:b3:91:c2:28:50:5e:d3:53:a4:66:aa:44:e1:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:52:BD:A3:D5:2D:54:5E:32:09:DF:BE:7B:62:46:8E:4F:9E:89
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:50:fe:05:ea:70:6a:a7:97:e0:2b:eb:c7:92:83:65:d7:
0e:bb:79:06:67:11:47:1c:b4:45:19:53:5c:58:4b:e3:c7:4e:
b4:57:26:be:82:d0:6a:a8:79:a0:6e:ed:d7:33:7d:e5:58:21:
ae:93:63:90:d4:76:3b:7f:c5:0a:2c:a3:9b:ef:40:03:44:12:
2d:85:c2:42:08:82:2d:88:64:41:56:0f:46:5f:e6:d2:ff:b1:
9d:15:fb:c2:d4:2d:05:b8:85:1e:1b:c6:1b:eb:a8:49:05:7b:
b2:ff:15:55:8e:f3:f1:e0:cb:4d:21:35:26:cf:26:5d:6e:94:
03:6a:a8:74:f3:be:89:0e:9e:25:a0:d1:75:0e:59:74:0c:7d:
0e:c1:65:ad:0c:35:ad:52:63:b1:8b:d5:bd:38:1e:98:99:1e:
9f:14:69:e4:00:8f:96:76:c2:de:27:55:31:8a:fc:e6:a6:62:
d9:47:af:10:e8:28:31:68:ee:c3:2d:93:b2:e4:15:fb:d8:18:
5b:95:30:99:81:3e:f6:a9:e0:0d:d7:f0:3c:30:ab:0a:dd:65:
49:14:00:90:43:dd:18:0f:d0:01:56:6a:2b:f0:fc:10:89:03:
90:40:a7:4b:7e:18:67:1a:35:8f:a6:0b:3b:72:71:31:47:b3:
2f:c7:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:28 2026 by rpki-client