Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: ortkdAesQ6gJmco8+Zz8JGVUqC9xBaBrj1LlkUYw8LY=
Subject key identifier: 15:DE:15:6F:42:6B:23:4A:09:A1:ED:E6:75:A6:17:91:D0:7E:D5:52
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019CAAC6221F09AF568E5565001A3F052D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: RAiUuWAS6kcQ-QJt6I-SFZa80cQ.roa (hash: ttJu1TEjHl6NqHl89N7ouZ4TGNYPAl0suf8bz/Ts/Kg=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: DaKqYD1SvdqjO93RP6q8ZwWMDsdUCoeV8gCVRuOEBIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:22:1f:09:af:56:8e:55:65:00:1a:3f:05:2d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=15de156f426b234a09a1ede675a61791d07ed552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:59:1b:48:92:3f:ab:9d:7f:15:88:0f:4c:
89:5e:28:5d:6d:04:69:ba:ce:86:e2:99:1a:9f:99:
ef:1f:a9:59:3c:52:6c:1e:ff:f9:59:04:f1:6a:af:
16:3b:9a:0b:ae:92:92:1a:ab:a6:8c:41:07:8c:91:
35:44:e4:a8:e8:93:df:e3:9f:1c:2f:53:60:43:e4:
1c:7b:8e:f9:43:e6:43:06:8c:e5:28:f3:ac:87:cc:
95:c0:4f:68:f4:e5:52:80:b7:06:17:43:36:6d:03:
d7:f5:7e:14:df:c9:cd:06:68:f1:b2:90:86:2c:76:
43:5d:c0:40:09:d3:c6:8e:0e:45:1e:f2:76:4f:bb:
58:16:96:7e:90:45:32:58:34:83:72:2e:e6:83:59:
be:03:9a:36:36:0c:dc:c4:16:ad:5d:a2:8f:34:24:
67:fc:b7:2c:24:7d:48:e5:dd:b0:37:73:3d:15:bc:
9f:96:9a:88:17:c5:ff:dc:e3:59:c9:fa:f8:36:38:
62:4d:0c:48:5c:b9:e8:c7:59:4e:d3:6a:c2:a5:80:
33:6b:25:b1:d3:2f:e6:3d:78:22:2d:2d:5a:bf:ca:
8f:66:20:f8:48:67:d4:bc:d6:93:5a:6a:05:ff:5b:
8e:93:44:6e:30:1f:b0:46:36:bf:1b:9e:70:82:56:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:15:6F:42:6B:23:4A:09:A1:ED:E6:75:A6:17:91:D0:7E:D5:52
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:26:b0:b2:43:a6:be:f3:15:66:07:d3:f3:5a:05:7e:ca:3c:
f9:cb:d6:93:55:3a:6f:29:f2:82:ce:67:71:f6:60:88:5d:40:
15:47:3d:79:b2:d6:d6:c8:ee:25:40:28:ee:4b:5c:ce:75:8e:
c7:9f:95:eb:3e:48:c9:78:7e:f5:c1:0b:52:8f:43:60:3a:6f:
cf:e6:ca:6a:aa:33:29:53:24:75:5d:7a:dc:4d:1e:b5:9e:8d:
ff:26:5d:54:0c:28:05:e7:9a:c6:03:8f:48:63:b0:10:0a:22:
3c:46:41:0a:69:9b:75:a4:27:c7:07:37:a8:a7:cf:8a:57:1a:
2e:de:a8:c4:55:6e:73:e5:2a:78:bb:a4:c5:5a:28:d3:0e:cb:
5a:90:c1:b4:bc:2b:dc:06:f0:e4:5e:39:f4:24:1e:0e:23:60:
bd:cb:60:99:48:c8:42:24:3f:e7:7d:61:29:fc:8a:6d:b8:ef:
9b:b3:72:4e:02:10:06:87:2e:05:4d:43:88:35:4a:62:8e:30:
1f:1c:5d:eb:66:cf:5d:fc:49:29:0c:b9:49:1e:ad:c7:88:ce:
2f:18:a5:bc:df:93:dd:5b:7c:d2:fe:d7:45:1e:4a:17:28:2d:
11:03:84:ed:56:1c:ca:bb:f2:ca:28:8b:1d:6a:2c:71:d4:2f:
37:c5:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:01 2026 by rpki-client