Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File: wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier: 1weI68lHaSwJRd7NcB5/vLZER0kP4AUkyTxN/TfBb1o=
Subject key identifier: DF:FB:4F:D1:0B:EE:54:33:D6:E1:4B:9A:E8:4A:E0:7E:8B:EC:E1:F4
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer: /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial: 019CA9B3C0E6BE5C0F58D4181EFA5E0FAE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:55 +0000
Manifest this update: Sun 01 Mar 2026 14:00:55 +0000
Manifest next update: Mon 02 Mar 2026 14:00:55 +0000
Files and hashes: 1: qfLg6_O2M8WS1thcqc7yvX4X2YA.roa (hash: QWR0hHgaSdM86S0MEOSeh4BxClfakxPYih9gZR0Zp3g=)
2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: /nuaXHXI+0KWUoWQzZ6uXpXFg6Pna3cxG0Py5SDq9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c0:e6:be:5c:0f:58:d4:18:1e:fa:5e:0f:ae:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Validity
Not Before: Mar 1 14:00:55 2026 GMT
Not After : Mar 2 14:00:55 2026 GMT
Subject: CN=dffb4fd10bee5433d6e14b9ae84ae07e8bece1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:b3:ee:d9:d4:b7:26:84:8c:91:0f:14:de:
3a:fa:dc:1f:a5:21:25:ea:ea:c3:c8:5c:9a:b3:48:
36:31:39:d1:48:40:f4:85:20:97:25:e4:f0:b7:ec:
c4:b8:19:24:4a:c3:61:ed:ea:52:5b:67:59:5b:60:
20:ac:db:6e:3d:af:11:73:86:53:94:91:be:7d:09:
64:86:bf:b2:58:54:f0:c0:4e:7c:dc:9f:79:4f:97:
46:54:ee:2a:02:d2:66:59:f3:7c:27:47:25:2e:fb:
47:2b:5d:17:df:64:7f:23:de:84:d2:b9:45:70:a2:
ef:09:c4:24:ba:06:0a:31:00:cc:cf:8b:83:3f:65:
40:34:d5:b2:49:73:cc:09:4f:a1:db:0e:28:13:88:
4c:9d:8e:5c:b1:b6:af:90:40:32:d0:e7:6e:4f:02:
74:70:9f:0c:fb:3e:df:6b:22:62:88:9b:f9:f2:8d:
81:97:be:ec:bc:33:d8:1d:e5:e7:dc:25:9a:bd:65:
47:00:32:d5:4f:b8:94:fb:39:7a:84:40:bf:0e:41:
6e:fe:51:7d:36:6d:f5:c5:6e:41:80:b4:a7:a1:55:
b5:c5:7e:2e:0b:d3:0b:b7:da:fe:9b:40:1d:6b:e0:
99:d1:40:8e:6c:ab:a3:f0:01:c6:8a:6e:32:11:f9:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:4F:D1:0B:EE:54:33:D6:E1:4B:9A:E8:4A:E0:7E:8B:EC:E1:F4
X509v3 Authority Key Identifier:
keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2c:81:2f:f3:e8:ef:23:1f:60:d3:25:11:59:0b:06:f9:0c:
d4:2a:aa:a8:42:6d:f8:03:64:64:60:bc:4c:d2:b9:27:40:fd:
96:fc:4e:6c:69:c7:2f:bd:d5:37:d3:8f:37:3e:ce:50:0b:e0:
45:02:5c:4b:76:00:bb:82:43:9a:43:90:eb:3a:50:52:89:b0:
ea:a1:ae:58:18:60:4f:7e:2f:57:b3:60:55:bc:8a:0f:64:9b:
3a:3d:7a:b9:4a:fc:77:47:e8:0f:c8:10:75:20:9d:99:ed:09:
1c:11:3a:df:40:1a:1d:b2:44:25:74:ff:19:14:5f:79:8d:a4:
cd:5b:34:4c:95:3c:f0:71:98:d5:4f:26:d8:c3:15:a4:0b:b6:
3b:9a:3d:7c:29:7f:28:a8:82:da:2c:67:fb:60:d9:9d:b6:4f:
49:ae:cf:11:a7:1d:7d:68:6f:b6:f2:e0:7d:f3:3e:c5:06:d1:
e5:62:cc:aa:b0:8e:8c:41:c9:0b:f7:80:44:87:28:4b:9a:8e:
44:31:fd:70:a5:1a:e1:a2:07:df:8a:03:0d:68:69:52:9a:d8:
14:8d:81:1a:14:80:f5:fe:93:84:0f:62:9e:5b:30:49:0e:91:
57:96:72:a8:19:99:f6:82:11:8f:d5:fc:e5:e2:25:0a:e3:d0:
b3:a0:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:32 2026 by rpki-client