Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: Z2kGGrEKDjy/+aPxPgsxVSG0qz++m9EqArA6sQVh9XA=
Subject key identifier: B2:01:09:38:89:15:84:D0:00:E7:39:26:52:A6:85:EA:E7:C4:D6:73
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019D9B5170E6A3DD3900657910DEDFD8C459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 0872
Signing time: Fri 17 Apr 2026 12:01:38 +0000
Manifest this update: Fri 17 Apr 2026 12:01:38 +0000
Manifest next update: Sat 18 Apr 2026 12:01:38 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: FK1bAG1tCSsvCgWlMs40dLa4VH7bbBi8mzRJmyJ7YwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:70:e6:a3:dd:39:00:65:79:10:de:df:d8:c4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Apr 17 12:01:38 2026 GMT
Not After : Apr 18 12:01:38 2026 GMT
Subject: CN=b2010938891584d000e7392652a685eae7c4d673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:45:0b:39:fa:46:f0:8f:9d:e2:f9:ad:f1:
77:d0:c6:97:4a:41:17:72:ce:52:bf:53:ac:bf:d4:
9a:94:38:ad:eb:2f:cb:fd:5e:9e:7b:b2:94:cb:8f:
25:2b:52:7c:61:59:86:83:ce:d9:e8:21:4e:3f:3e:
9c:e6:db:d6:88:8d:1b:a5:a6:3d:fe:c9:d0:0d:e4:
1a:14:fc:f9:5f:a7:5f:88:1b:b8:75:0a:2f:3f:39:
de:2e:0c:ee:6f:37:9a:5f:c8:f8:d3:83:36:2a:19:
0d:6c:df:cd:01:c9:ca:5d:17:bf:6b:b5:1e:8f:32:
89:07:db:6d:c6:90:f0:ec:4b:4b:3c:c9:72:29:c6:
d4:f3:23:74:44:a4:41:6d:bc:39:da:e9:fd:c5:ea:
22:ff:5e:d5:ab:ef:0c:c8:b9:7d:4b:72:2b:df:fc:
d4:99:f1:33:f1:cf:78:93:b0:51:9d:fe:7e:59:5b:
c6:d8:4e:b6:8c:4b:f3:6b:5f:26:67:c8:89:b9:1f:
3a:82:17:88:71:ad:a7:3a:74:d1:87:f0:87:8e:0b:
8b:22:f9:d8:aa:9c:21:56:52:ef:27:02:76:54:da:
3b:91:ea:d5:3c:97:a2:95:b3:a4:92:ed:48:33:52:
01:29:8d:ca:2b:1d:08:60:f4:f6:e2:05:ff:e0:d4:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:09:38:89:15:84:D0:00:E7:39:26:52:A6:85:EA:E7:C4:D6:73
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:32:50:92:a5:64:6b:cb:e5:9c:ef:e9:98:9d:95:50:3a:cf:
bf:89:3a:a3:da:3d:d9:d8:46:19:fe:26:99:a3:86:f5:89:93:
ea:c2:b1:fe:88:27:f5:68:ec:55:b6:50:d7:26:44:4e:c8:9e:
79:07:0a:55:b7:c1:ff:db:55:4f:3d:aa:5b:64:c9:f4:51:df:
b2:d0:3b:47:99:28:85:e4:9d:f1:8a:76:2e:5f:ad:d3:ad:0a:
e1:53:18:b3:27:fe:84:4b:5e:7d:93:6e:e0:39:28:f3:3c:e8:
60:0a:bb:42:c7:ed:7a:7a:a4:f4:ec:3d:84:92:28:e0:b9:c8:
b2:f8:4f:56:e0:8c:7a:a4:e8:89:ae:10:29:96:f3:92:e1:58:
05:e8:e3:91:3f:7e:71:3c:2c:93:62:bd:ba:37:5d:fa:4d:84:
99:ff:a2:8e:46:df:5d:94:d6:a1:85:48:46:03:a3:13:67:45:
91:77:d7:f4:d8:d6:7b:39:a6:18:32:cf:53:47:9d:af:98:de:
37:7f:63:62:47:c4:a6:f3:d2:75:73:21:d5:4d:b1:91:5c:dc:
11:48:19:a0:33:98:3e:f4:1e:a9:35:ba:ff:56:52:03:dc:40:
24:8d:d1:21:55:2c:2c:46:9d:7f:34:ee:48:62:0f:33:73:61:
29:03:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:08 2026 by rpki-client