Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: pqgADs7sFWCecClE0f4Ehh8QKsQkfSp6+VOXKhYu22Y=
Subject key identifier: C0:F5:A7:DD:95:28:54:E7:6B:DE:B7:9E:F6:39:1C:85:B8:72:C1:7A
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019CAEDA22F2E173C88EA82AADDDCE77A5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 12A7
Signing time: Mon 02 Mar 2026 14:00:57 +0000
Manifest this update: Mon 02 Mar 2026 14:00:57 +0000
Manifest next update: Tue 03 Mar 2026 14:00:57 +0000
Files and hashes: 1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: 8fG/DBV6R6LksSMaI5Ck1hcTTAfYSHYmSj+8T/0119I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:22:f2:e1:73:c8:8e:a8:2a:ad:dd:ce:77:a5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Mar 2 14:00:57 2026 GMT
Not After : Mar 3 14:00:57 2026 GMT
Subject: CN=c0f5a7dd952854e76bdeb79ef6391c85b872c17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:25:48:da:7a:02:4a:86:f6:3b:39:66:80:
0a:5b:7e:42:26:78:44:8c:47:a5:17:c2:9b:1c:11:
e6:0e:c8:e1:81:e6:c2:82:b6:71:dc:c5:a3:fc:b7:
8c:54:5b:88:41:0e:be:81:fa:09:c6:b1:5a:47:ad:
91:06:ad:5b:75:6c:27:a8:e7:c9:b8:25:d8:f6:50:
99:ec:df:ac:9e:56:74:05:cc:29:c8:2b:f8:9a:0d:
c2:ff:2e:1f:d9:af:95:e1:a5:1c:a1:2d:30:4f:3b:
0e:d0:bb:d9:bf:b7:26:a9:a8:9f:91:70:41:16:9a:
60:c2:50:3b:55:a2:4c:e3:fa:6b:49:01:3a:31:a6:
41:7c:64:78:b6:82:f5:0e:6a:79:4e:98:85:4f:11:
2c:64:b3:8d:bd:7e:47:58:68:a0:e5:14:ee:54:a7:
23:91:a6:24:d9:13:f9:ca:2b:8a:56:a9:e5:08:fc:
4a:e7:76:62:b5:06:22:43:6f:e2:80:dd:f3:5e:ab:
87:77:b2:22:ad:ce:ab:29:fb:82:45:93:ac:89:c4:
26:6c:7b:8d:a2:48:00:a6:d1:1b:61:6c:49:c0:e5:
9f:e4:d7:47:7e:84:6b:4f:49:4a:99:46:3e:d6:3b:
42:03:26:b3:a8:7b:44:34:ab:1e:10:a6:4c:be:61:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:A7:DD:95:28:54:E7:6B:DE:B7:9E:F6:39:1C:85:B8:72:C1:7A
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:16:dc:64:60:22:26:5a:ee:00:0c:c7:5e:c6:77:23:bf:42:
77:8c:41:69:35:bc:a4:b9:21:18:57:56:1e:6a:8e:3f:d5:8a:
71:c4:1c:21:7b:ba:87:56:12:16:b2:1b:84:f3:73:fc:04:7b:
75:4e:58:8e:22:cd:3b:26:c0:2c:6e:67:54:5f:15:37:52:90:
9a:ba:3b:11:23:a5:31:da:47:6d:0e:ce:8a:5d:12:50:98:af:
ed:32:28:7d:26:0f:54:68:8b:ce:87:90:28:ca:09:15:97:b2:
c2:d4:ad:8a:71:e8:3e:ac:06:8e:4f:63:5c:cc:56:85:be:78:
6e:ec:30:d9:eb:97:24:bc:d3:df:48:24:0f:42:dc:74:3e:dd:
07:43:55:82:e5:8b:25:96:6f:a7:ca:31:62:98:c9:b9:c4:54:
84:4e:bc:11:e3:95:9c:01:e7:b5:3b:50:5b:f9:ee:f0:97:5a:
55:47:d8:39:77:47:c4:2f:c4:f9:56:8f:a4:19:97:6c:28:7f:
53:71:99:c1:de:e3:a5:26:84:a6:c0:b5:92:69:26:1a:65:b0:
47:1d:7c:d9:8f:84:2c:e6:88:d1:92:e3:4e:e7:5f:38:27:13:
b3:a1:3f:44:63:61:fa:07:0c:2f:f5:4c:77:1e:64:37:34:ad:
7f:d0:ab:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:37 2026 by rpki-client