Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: Ak3FXUDaCr24Jt5NN4bEkENQUX8AwIhhG5aWanAD3No=
Subject key identifier: 38:4E:68:11:36:9E:8F:D3:56:65:F1:FF:48:28:13:0E:85:F5:C2:85
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 019CABD940E619C25B3BC274009AF8F2583D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 04A2
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: NpGUmqE9n-wLzkQYMJgktAVQDec.roa (hash: jKDsKPpujuY8oxz+Om3wlzTAhMZxAodY1X1VfsB0nws=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: O038xpouEnN5ISkkKBw1EhgSIYOU8Uha4u1vaPeM+5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:40:e6:19:c2:5b:3b:c2:74:00:9a:f8:f2:58:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=384e6811369e8fd35665f1ff4828130e85f5c285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:d4:d9:94:79:52:d4:54:8e:20:81:2e:61:
4a:04:e0:20:c5:86:93:eb:d1:5e:43:eb:cf:18:f4:
17:10:a0:39:e2:83:c5:54:52:56:b0:6e:ec:55:7e:
99:a9:b4:6d:b9:a2:13:db:67:84:e3:59:b9:ec:c3:
39:40:73:a4:a9:6e:01:3a:fb:84:9f:0b:02:85:97:
ac:fa:83:99:09:14:28:a7:17:85:ff:b7:8f:76:5a:
34:9f:46:9b:af:e9:d6:5a:a7:ac:b6:b7:b8:e0:b9:
95:60:78:ca:71:f3:fe:28:21:fb:0d:4e:3d:ec:77:
f4:42:e3:01:0e:da:7f:67:4c:fa:c5:a0:8c:8d:2d:
02:41:f4:09:cf:45:b1:90:58:f6:71:80:ae:09:59:
bc:78:52:67:5d:6c:e7:d4:1c:42:e5:3f:f1:5c:4d:
15:64:bd:19:12:63:48:21:21:8e:3a:bd:7d:c9:a0:
a6:c0:43:fa:34:04:17:e7:f2:e9:92:24:f5:7a:6b:
a9:af:9f:40:7a:c9:e9:01:73:ef:7a:89:b9:47:1f:
8b:ed:ba:3c:f6:5b:d6:b6:ad:1d:76:ad:23:21:7f:
7a:76:74:77:1a:27:5f:d3:12:4c:ab:67:80:c9:1a:
9d:ee:36:c1:9f:9c:4c:13:36:e4:c3:78:ac:03:ea:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:68:11:36:9E:8F:D3:56:65:F1:FF:48:28:13:0E:85:F5:C2:85
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:78:45:d2:91:e7:d5:ac:30:44:38:28:02:37:56:07:f1:8c:
28:d3:58:11:5e:5c:22:e5:dc:61:60:6a:74:e8:51:64:08:7a:
e8:01:a5:9a:82:99:a3:36:3f:85:74:6b:45:23:29:a7:87:9c:
d7:e1:1e:10:2f:41:7a:30:3d:dc:e8:11:3c:72:2b:49:ea:10:
c2:d5:ae:f9:b5:68:f7:4e:3f:93:5a:83:46:73:70:b0:93:f0:
aa:14:f6:56:b5:5a:b4:27:55:49:dd:28:68:9e:e3:70:c0:70:
46:2a:35:52:cd:e9:88:8d:0c:45:ef:22:cb:fe:ac:14:6e:77:
e9:55:dd:ba:3e:7b:f2:2d:81:9b:ca:26:39:70:15:ef:77:72:
5e:ea:9a:38:26:fa:5d:01:d6:3b:6d:7b:a7:7f:34:0f:93:1a:
ad:3b:b4:d6:08:d7:cb:cd:67:23:8d:5c:d8:60:24:89:c9:27:
94:3a:d0:db:57:e9:64:17:50:b7:a7:d7:7f:07:6a:17:20:08:
1c:22:78:68:e7:d2:ea:0a:86:91:9e:33:f9:2c:88:86:8c:81:
b7:a3:42:59:e2:93:ad:83:eb:3b:a2:2a:15:4d:ff:40:66:09:
5f:8c:f9:95:47:3b:6b:17:29:ef:26:dc:be:1f:6d:c8:23:d9:
25:64:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:38 2026 by rpki-client