Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: maGD86UqaDl+N5aiTIQjKtD4qhmB7/CIUZ+BIYqLvC0=
Subject key identifier: EE:AB:27:AF:2E:8F:7B:2E:13:90:B4:D8:77:E9:03:15:F1:33:68:5A
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 019CAC46E7E63AD80816E10074311631FA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 074A
Signing time: Mon 02 Mar 2026 02:00:53 +0000
Manifest this update: Mon 02 Mar 2026 02:00:53 +0000
Manifest next update: Tue 03 Mar 2026 02:00:53 +0000
Files and hashes: 1: IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa (hash: N2VSLUJTgIas4vbaZK4n5fSPJQ+7roJjvsDns30p6Kc=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: G7Bdcj7hzIeslj4aWEckmj2mhr5nHEbk05mgwEPzSuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e7:e6:3a:d8:08:16:e1:00:74:31:16:31:fa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Mar 2 02:00:53 2026 GMT
Not After : Mar 3 02:00:53 2026 GMT
Subject: CN=eeab27af2e8f7b2e1390b4d877e90315f133685a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:e1:85:7b:f1:b7:f9:47:39:30:bc:d8:2d:
b3:c7:29:ce:cb:9e:f3:c3:2d:f9:d6:bf:eb:bf:84:
78:75:7f:bf:fc:6e:df:3a:77:8f:cd:e3:57:28:94:
52:52:6e:f3:d4:f2:da:2b:f8:dd:4f:7d:94:73:eb:
2d:88:eb:f1:5e:a0:7f:4e:ca:97:cc:55:8b:7e:18:
a9:9a:7c:ba:99:30:4a:f3:1e:84:a1:58:f1:f4:c2:
7a:37:60:b8:4b:83:f5:28:2f:41:76:c7:b8:36:19:
de:a0:78:19:78:ec:56:f2:d6:03:d7:4b:a7:aa:da:
6c:64:c4:93:22:1b:7c:ef:9e:35:a6:2d:f1:05:c2:
7b:68:d0:92:e4:65:6a:21:ec:8f:e0:65:9a:78:e5:
b1:21:91:d7:b7:45:a0:96:97:da:bc:48:4e:40:82:
8f:38:9d:8e:54:31:01:0c:0b:ed:9e:0c:23:d9:b9:
f9:fd:ba:c6:76:0c:41:48:d3:7f:e3:e7:55:4c:ff:
7f:bf:2f:ee:ae:8c:7e:34:d2:72:13:aa:2f:bb:8f:
58:b0:15:b2:a9:0a:f6:f6:a2:e0:d0:74:f9:56:c5:
32:55:68:a7:7d:2d:e0:c2:3c:fb:7c:bf:95:98:80:
32:27:f2:de:51:9e:1a:16:14:bb:8f:b1:98:f6:dd:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:27:AF:2E:8F:7B:2E:13:90:B4:D8:77:E9:03:15:F1:33:68:5A
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a0:ee:b2:4e:35:32:fc:62:52:02:4b:9f:39:97:c5:47:5b:
7a:5e:2c:05:d4:58:f6:18:0d:8e:93:a8:5a:c3:da:dc:28:d0:
61:67:df:77:3e:55:d1:6b:ca:31:d9:14:13:15:a6:9f:3e:a8:
cf:5d:c2:5c:5c:32:9e:62:31:3f:32:82:47:c2:4e:62:94:6c:
23:23:ce:b2:74:0d:55:28:3d:ca:34:37:a4:2f:5f:6d:f9:4f:
46:07:2e:80:40:c1:64:ff:5d:7b:dd:f8:21:67:5c:7a:5a:0d:
0f:be:9c:7f:fd:7c:ed:00:93:f2:dc:cc:4b:d6:b2:ac:33:ac:
68:61:eb:67:df:e9:5b:0f:04:56:ad:99:3b:e2:3a:1c:fa:f2:
58:6a:84:e4:ee:79:93:f5:6b:69:ef:42:c2:1d:d3:dd:2a:55:
89:1d:66:16:cd:1e:7b:10:47:b9:cc:ea:8f:9e:30:64:df:a3:
d4:46:50:84:87:6c:a9:2d:df:5d:82:7b:3b:cf:31:0a:13:fd:
de:73:d5:fe:c1:cc:06:3c:12:dd:5f:1f:10:ab:43:59:2c:39:
ba:ad:83:ca:f4:c1:a1:24:26:02:02:f3:a7:9f:e5:fc:7a:b8:
e2:1d:6b:a7:66:5f:87:62:e2:e2:aa:21:df:52:3e:6b:4c:34:
36:17:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:48 2026 by rpki-client