Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File: wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier: k78h5Fb+dXh5xMf+T1swCbQfxAOMg6LHyb5YaJ2j0EU=
Subject key identifier: A9:02:0B:60:45:30:F0:A6:95:3F:CB:2B:6E:8E:3D:53:AA:A0:93:BF
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial: 019CAE6BEAFE85B8A7AC05523968FC5A59FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number: 09E1
Signing time: Mon 02 Mar 2026 12:00:33 +0000
Manifest this update: Mon 02 Mar 2026 12:00:33 +0000
Manifest next update: Tue 03 Mar 2026 12:00:33 +0000
Files and hashes: 1: B0Uzs5RoulMpxtKQXud6u4TA0PM.roa (hash: mR2i4aLtlRQUg0BXj5ANdcDouKnEouJa0KGOvU/8HYM=)
2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: CzuphXi7fHE6dUZaDe5/MHWyMKlpWF2uRgjjfd7RJI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:ea:fe:85:b8:a7:ac:05:52:39:68:fc:5a:59:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Validity
Not Before: Mar 2 12:00:33 2026 GMT
Not After : Mar 3 12:00:33 2026 GMT
Subject: CN=a9020b604530f0a6953fcb2b6e8e3d53aaa093bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:19:cf:1a:bc:9d:74:da:fd:c8:14:cf:1b:
84:6d:4a:35:f8:83:20:99:ae:1a:65:01:1a:9f:aa:
14:4c:8e:31:eb:78:6c:7f:a2:9d:5a:71:09:27:c6:
68:64:e2:9f:80:3a:c9:22:3c:a3:ee:da:a0:37:78:
52:4a:99:df:48:92:06:08:ee:f6:f8:25:83:e1:c1:
6a:0e:22:94:e4:76:c8:ea:37:70:bc:3d:1c:65:df:
05:ec:07:2c:cf:92:5d:c7:12:6c:7c:15:31:7a:00:
41:41:8a:a7:2d:57:7f:b8:ad:b1:ba:25:52:19:33:
41:39:a7:08:fd:c6:82:08:5b:c5:93:95:c9:fe:31:
71:ce:af:6f:7e:3e:55:08:fe:ff:97:b8:6d:60:17:
e4:aa:cb:30:ed:f8:c3:4c:05:e8:2b:86:18:48:9f:
ba:81:f6:72:94:84:f3:ca:4d:a3:0b:db:1e:a3:66:
21:38:70:dc:ec:fd:32:fb:31:94:e0:cd:ff:95:ae:
17:4d:cc:d0:14:da:19:ba:fb:8f:74:32:ca:71:5b:
39:24:38:71:68:42:22:e7:da:f6:bc:7e:7c:ff:6a:
64:1f:6d:ed:0d:5d:40:c9:85:7a:fd:1a:6c:42:6e:
06:89:a3:3f:4f:30:50:3c:be:f1:3c:37:34:57:f4:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:0B:60:45:30:F0:A6:95:3F:CB:2B:6E:8E:3D:53:AA:A0:93:BF
X509v3 Authority Key Identifier:
keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:da:de:5c:88:0d:a9:70:b1:75:d7:9a:4e:4c:d9:6c:27:
eb:26:25:e7:90:45:a5:0b:05:13:e0:a3:a5:4d:9e:fd:1f:9f:
5f:55:32:4c:07:7b:e0:ef:e6:ff:c1:4d:fd:21:a4:53:91:35:
38:83:03:63:2c:e9:72:fc:cc:2d:dc:3c:1f:e6:bc:a5:03:88:
eb:06:15:45:97:c5:2e:4a:9a:3b:16:0a:25:f8:9f:71:ed:03:
d5:c4:e4:bf:8d:f2:31:40:d7:a3:73:db:5b:f7:2a:0d:31:32:
c7:1b:98:f5:c1:a9:41:a4:5f:36:14:89:8d:f4:82:04:ba:f9:
aa:29:00:b6:27:eb:27:05:0e:e2:41:1b:4f:4c:eb:8b:78:dc:
bd:3d:34:f3:3a:5a:4d:66:aa:12:d6:5a:7e:cc:a6:6d:01:d1:
88:23:9c:d4:30:a5:68:bc:39:fc:98:af:f6:53:29:e1:1b:55:
ad:d2:bd:65:7b:6d:11:f8:ef:9d:5a:81:fc:b0:54:89:32:9b:
ba:73:ec:40:59:7f:a8:5d:60:8e:30:62:99:d2:31:8b:98:fa:
a2:64:bc:57:f0:aa:0b:04:4a:63:22:ab:35:d3:9c:5f:2c:2a:
cf:53:b4:77:6c:22:77:3a:75:14:f4:81:46:38:81:99:d8:09:
a2:32:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:54 2026 by rpki-client