
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File: wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier: 97FF5cAx6iN0uCcKguC3g2UNg697Y5kDBrBBvUzI9qo=
Subject key identifier: 5D:3E:70:33:FC:65:03:3A:AA:F9:FA:A7:F8:58:D1:8F:0A:76:CE:FD
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 019CAD22887A3A9D7961759A3CF9EA9E7A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 06:00:47 +0000
Manifest this update: Mon 02 Mar 2026 06:00:47 +0000
Manifest next update: Tue 03 Mar 2026 06:00:47 +0000
Files and hashes: 1: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (hash: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA=)
2: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (hash: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw=)
3: nqeAxh-Zvj9N-HZ0Z_oqfMzPECY.roa (hash: EA0w8mnUHsfVGiJBXY9XWwK4qgczfc6YuAq1VlWZzqM=)
4: vpaPc9gcyQc1zzzbJkF9n75zDFw.roa (hash: 8O4KfD0Ddn9u3Kh4fXZU6pj1hG4jVkxChi5IINDrduI=)
5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: tVgpy+TjS7idtAscVQ46/6JsB8LSKDGLlYCFP4UmVqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:88:7a:3a:9d:79:61:75:9a:3c:f9:ea:9e:7a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Mar 2 06:00:47 2026 GMT
Not After : Mar 3 06:00:47 2026 GMT
Subject: CN=5d3e7033fc65033aaaf9faa7f858d18f0a76cefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:54:d5:e3:06:1b:b6:34:b2:dc:22:ec:56:
37:4c:72:aa:02:67:6b:74:3e:6b:0d:7e:06:6e:58:
93:ed:64:61:cb:d9:c9:1b:24:86:2b:e6:b4:6a:70:
0e:24:87:43:6b:2f:ce:fd:89:52:f7:6a:17:29:f8:
f4:1c:30:bb:9c:c7:55:a5:6f:d9:28:e1:3f:d9:42:
cb:0c:12:e3:0e:35:7a:21:14:65:96:1d:3f:df:13:
6d:43:b9:a5:aa:72:58:49:1a:f8:1e:0c:04:9b:e3:
e3:c9:c5:04:80:3d:6e:2d:e9:45:98:ec:62:09:aa:
c0:fa:5e:a9:a2:42:83:a1:04:78:e0:38:60:36:5e:
7a:9f:b8:3e:75:b7:f7:52:c9:b0:dd:74:e9:24:b4:
99:a4:a1:f6:f0:ca:96:57:c7:29:5f:ec:18:dc:0b:
22:4a:3d:35:c7:4f:38:09:da:d9:9c:f8:f4:95:2a:
1b:f5:ba:75:c4:f2:5f:e1:24:30:f8:02:a7:d4:2e:
bc:eb:99:ff:39:82:92:9b:94:d0:0c:6e:ed:22:ff:
95:f2:52:01:ee:a8:b5:f0:54:43:88:2f:5e:84:61:
7f:f7:0d:25:92:99:a1:09:b2:80:3c:eb:8b:f1:6d:
e2:99:26:ad:d1:ca:e8:55:b5:51:df:20:46:26:83:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3E:70:33:FC:65:03:3A:AA:F9:FA:A7:F8:58:D1:8F:0A:76:CE:FD
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:a5:36:01:d9:e1:e9:43:77:6c:cc:ab:01:29:14:a6:53:
91:36:34:67:10:2b:cd:eb:81:f2:b7:a8:d5:84:cc:72:a4:ce:
2d:30:b3:b0:3b:49:74:63:08:ff:fe:40:60:be:95:ff:0d:20:
d7:8f:a0:99:fa:0c:d6:b9:a9:31:eb:93:06:e4:f2:c1:3f:0b:
62:7e:72:b8:79:91:32:dc:98:ec:1b:9c:c7:5b:d6:97:a4:98:
b9:fb:87:7a:e2:f9:db:c2:00:01:fd:49:13:a0:f2:9a:15:81:
29:5b:35:ff:17:f8:5c:fe:f9:72:53:e7:2e:f8:4e:9e:0a:67:
43:e1:0d:12:e3:36:03:05:6b:7f:68:c4:ed:df:36:47:9b:62:
33:aa:7c:ec:9f:f1:a3:86:3f:1d:26:ce:2e:7c:54:dc:59:6a:
80:66:63:b2:0c:99:09:07:8d:cc:2b:d7:f4:6e:26:f2:29:16:
e6:b5:3f:7c:68:76:d1:b4:ad:d6:7e:60:90:d4:c6:7e:74:ed:
4f:c3:23:32:d9:8d:8d:59:cc:4e:2e:d7:80:75:5f:54:e4:e9:
17:7e:b0:cc:7e:2b:10:69:38:4f:5e:55:a2:a7:66:14:c6:92:
db:c8:44:47:bd:9f:69:9e:95:43:f6:1d:e6:08:2e:13:20:30:
c6:5b:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:10 2026 by rpki-client