Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: jVOC1pp6aWtlG6VBUhb7XeSujNPlghcJ++EQLrya278=
Subject key identifier: 7B:EE:58:28:F6:05:00:A6:C1:FA:38:DC:16:7A:93:8E:F7:03:DD:C3
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 019CAA8FA8EA0DC2BA6E64247FDEA7B03659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 06D1
Signing time: Sun 01 Mar 2026 18:01:07 +0000
Manifest this update: Sun 01 Mar 2026 18:01:07 +0000
Manifest next update: Mon 02 Mar 2026 18:01:07 +0000
Files and hashes: 1: lV9CMhz_3PFwnZdWl_EZLvM-2A4.roa (hash: Db/0BlhSAHqLGE4mtBqvJ8NyCXiNUptWO0NntS5+WMw=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: iQkpHz7o+dmJzaM1C+C/+ZqGjWtYt8q1dRLVvxHI9+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a8:ea:0d:c2:ba:6e:64:24:7f:de:a7:b0:36:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Mar 1 18:01:07 2026 GMT
Not After : Mar 2 18:01:07 2026 GMT
Subject: CN=7bee5828f60500a6c1fa38dc167a938ef703ddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:4e:ae:ae:16:15:f5:24:44:68:b0:47:30:
37:82:77:67:da:97:ec:cd:32:18:24:e0:61:38:b8:
d7:9c:24:ef:71:3b:1d:23:78:2b:8e:e9:13:31:3d:
5c:9f:cc:2a:da:a5:3b:a5:fb:87:94:d0:72:ef:27:
cd:15:21:6c:17:09:00:59:2f:c7:8c:4c:c6:2e:f8:
4f:41:5a:b3:75:44:9f:03:82:3e:cd:2d:ef:dc:47:
5c:84:94:5d:dd:9b:7e:11:3e:c8:a3:33:36:2f:a4:
4f:24:c5:ca:c6:43:bc:63:d6:19:e9:93:c4:a0:dc:
ea:ea:cd:93:1d:ff:f5:90:bb:71:08:07:a2:e3:25:
42:1f:3f:60:6c:df:34:e1:f2:20:60:44:91:f1:e5:
f0:ff:05:ca:de:89:66:05:15:cb:7d:bb:c7:8d:9b:
e9:db:78:9a:30:e8:69:e7:18:d2:8c:32:5e:b4:79:
1c:15:69:50:43:b7:d9:c0:3b:f3:76:f3:35:36:c0:
c9:e9:d4:96:ff:59:91:b5:cf:5f:88:89:d3:20:68:
ac:de:e3:71:61:ad:bc:94:a0:34:ed:8b:1a:13:c3:
d4:d7:e7:2b:3b:1e:45:6e:82:74:a4:da:ec:e2:05:
03:f2:42:17:f9:20:ea:ab:dc:4e:1f:d2:14:16:99:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:58:28:F6:05:00:A6:C1:FA:38:DC:16:7A:93:8E:F7:03:DD:C3
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:7b:4b:dc:48:2f:94:b9:87:e0:75:8f:c3:3d:8b:58:b8:
0d:8f:5d:82:76:7b:42:8b:da:3a:69:44:4c:c1:58:3b:39:73:
c4:b6:66:eb:59:12:c3:23:cb:9b:13:4c:60:01:66:00:7a:c6:
b2:2a:87:0d:fe:72:a9:b6:3e:16:32:01:21:5b:c8:ae:71:e2:
b2:b0:03:e9:a9:47:d6:61:92:02:c8:1a:c2:02:64:0e:56:c2:
2e:2e:56:ec:40:a6:c2:11:ce:1c:84:59:a3:82:b7:22:60:24:
50:a3:ac:a6:1f:22:a0:f4:95:ce:96:c2:e8:fd:25:37:48:6b:
81:7a:0a:9b:f8:58:2e:4a:f9:e8:b1:9c:e4:d6:98:af:39:65:
78:0c:b9:72:cc:a6:fd:cb:6a:ff:ab:4f:ff:13:99:ea:0e:5c:
12:d6:86:c3:ac:44:db:7a:cf:8d:30:be:69:5c:a8:1b:33:f5:
06:0d:f7:34:8c:01:e7:21:9c:80:d9:32:00:9e:bc:0d:17:22:
09:cd:97:73:55:6c:0a:24:25:34:e4:bd:69:2e:4c:cb:75:65:
5f:f0:9d:57:c8:a2:42:67:cc:b0:6a:37:45:39:16:5d:9c:dd:
43:d2:aa:ad:e2:44:f7:11:b7:b3:83:5d:cd:7e:59:8f:0a:9b:
62:8d:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:15 2026 by rpki-client