Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: V7MeJL1g8uBn+Fly+a+AdzkxmZLkE87W/rLgYISXiwY=
Subject key identifier: 84:F3:16:D2:CF:D1:89:AE:6A:EB:D3:20:88:96:0F:BF:FE:40:88:36
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 019CAA585F914EA4354B68E11C475AA9FAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:00:44 +0000
Manifest this update: Sun 01 Mar 2026 17:00:44 +0000
Manifest next update: Mon 02 Mar 2026 17:00:44 +0000
Files and hashes: 1: Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa (hash: IFvAqWAV36VhOvXLelo0nvun/QoXpwk8T72OiDJu/UQ=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: G70VG81/RTDvGVRJm7RuYFpTNhHA6Og6mixxqE7dF1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5f:91:4e:a4:35:4b:68:e1:1c:47:5a:a9:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Mar 1 17:00:44 2026 GMT
Not After : Mar 2 17:00:44 2026 GMT
Subject: CN=84f316d2cfd189ae6aebd32088960fbffe408836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:f8:5c:71:e0:53:4a:30:0e:a6:b3:22:d7:
c2:2f:12:4c:e7:f1:47:5d:66:e9:3e:76:fa:c8:5e:
0a:a1:5e:7a:ec:f8:cf:1e:b6:ac:2f:f1:72:58:43:
aa:be:0e:53:90:2e:56:87:d5:36:51:91:38:b0:83:
55:d4:79:8b:14:62:cf:98:7f:45:e1:14:c9:86:d9:
1c:79:d0:24:80:28:92:e8:89:cb:43:76:9d:f7:0f:
0f:ab:76:be:c8:96:ea:e7:76:d7:5d:60:ca:0f:45:
9e:6c:79:b3:8e:b4:4c:71:0f:8b:64:1a:99:61:b8:
2c:18:de:a3:a9:a3:0a:ed:73:c1:30:73:41:81:d5:
ed:e3:31:d1:43:25:7f:2f:5a:65:b4:fe:05:3d:89:
6c:26:6b:40:ad:62:8e:66:82:68:24:70:62:5f:0d:
1e:1d:1a:8a:5c:ce:75:65:f6:f8:a0:de:f6:97:70:
b0:ec:ed:5b:8c:ff:9b:ea:4a:c7:a6:51:59:36:fe:
76:3c:58:be:84:c7:aa:77:48:0c:16:65:ce:6f:65:
55:44:18:49:8b:c2:31:d4:31:35:33:39:cd:b8:f1:
86:4a:da:e9:6e:d0:67:ae:59:14:e8:8b:45:13:da:
9b:65:7c:c7:8b:1b:ef:a4:52:48:e0:be:44:51:3e:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F3:16:D2:CF:D1:89:AE:6A:EB:D3:20:88:96:0F:BF:FE:40:88:36
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b1:7d:54:b8:ad:92:b3:b6:42:75:a9:12:bc:fe:02:01:f7:
e8:9f:32:1e:83:b5:81:5a:23:e6:b5:cc:b1:dc:39:d7:df:a3:
c2:c5:73:f7:99:2b:91:96:4c:78:42:7d:e2:4a:2f:84:15:01:
15:f6:7b:93:15:e2:a5:88:ab:83:e6:54:fa:10:4a:29:38:d1:
c9:91:84:47:89:bb:1c:87:48:dc:4b:a6:24:63:f2:b0:d7:22:
13:bd:cf:5c:37:05:a1:43:a0:ee:aa:ff:29:20:23:8a:1e:b4:
7d:7b:c5:79:29:c4:23:d4:35:08:5f:07:c1:d3:52:6c:4a:2b:
9e:06:c7:6a:a8:42:10:6d:36:2e:34:e2:07:38:d7:03:7c:c4:
2b:a8:b2:31:19:c9:28:27:1f:04:a5:b2:d5:33:23:cf:6f:60:
a6:1d:9d:3e:93:17:93:13:c5:6a:ca:92:4e:50:a4:97:9b:39:
6c:a8:67:a3:a5:5e:c2:35:dc:cd:51:7a:48:b4:ad:70:6c:fb:
97:a5:81:30:2c:f8:1c:bb:c5:8a:42:38:c0:69:d3:ac:93:05:
89:71:a0:4e:7d:ed:db:18:da:af:d5:a3:02:06:6f:a9:e5:7e:
31:3c:70:9b:97:8a:7c:b4:94:d2:56:ab:e4:94:1c:7a:fe:76:
1f:0c:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:27 2026 by rpki-client