Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier: 96VLLUQOpA98EBjLMRZa1LnoIt9sm7T/JnGX+0mnHHM=
Subject key identifier: 9F:CB:3C:4D:2C:98:14:FC:B6:09:21:EF:96:5D:DD:7E:E4:30:05:B9
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 019CAD90CB278EE4D78A281FD8B39E37AEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number: 10B6
Signing time: Mon 02 Mar 2026 08:01:13 +0000
Manifest this update: Mon 02 Mar 2026 08:01:13 +0000
Manifest next update: Tue 03 Mar 2026 08:01:13 +0000
Files and hashes: 1: U838CZ3tP-SqpmS_2UEPBZ3tGac.roa (hash: 0MbyurR/tw2t4cWUzKHipnxJH0cpvpDBnD2yvgzDDAc=)
2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: BiIdZTmxfVbwsCG4tpfHN3BK1vGhby4JqnaAJE9b310=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:cb:27:8e:e4:d7:8a:28:1f:d8:b3:9e:37:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: Mar 2 08:01:13 2026 GMT
Not After : Mar 3 08:01:13 2026 GMT
Subject: CN=9fcb3c4d2c9814fcb60921ef965ddd7ee43005b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:de:3c:4d:82:45:95:b6:16:39:b9:25:d2:
b0:cd:e5:be:ed:eb:4d:e9:08:e8:93:d0:b9:5b:fe:
21:01:28:1d:a5:8c:8d:97:c0:76:c9:8e:40:da:63:
3b:21:ee:c3:e2:fd:ac:fb:31:b3:b8:4b:b0:57:84:
03:dc:32:cf:70:02:f6:63:8f:db:5b:32:42:31:14:
cd:e9:e8:df:cd:33:d7:e7:b1:a5:24:4e:91:b5:db:
7a:b0:ad:70:fb:3a:44:44:c0:f0:d0:2f:19:19:7c:
2c:db:98:f2:4e:8f:b7:e1:1a:64:18:d1:fb:ca:8d:
b4:60:d5:5a:35:73:85:70:7f:37:0a:d8:a8:f3:31:
b6:e0:0f:f8:a0:92:cb:15:5c:71:ec:7c:94:a5:c6:
35:47:f6:75:6a:66:10:6b:d1:fb:b8:b4:0d:65:b6:
d9:c0:af:e1:36:46:a7:5e:ce:ea:84:3d:a3:4e:39:
f4:3a:05:7d:3e:4d:bc:a4:9e:4c:01:80:69:fd:64:
70:d9:8f:58:a4:15:62:9f:24:69:02:ff:c9:77:7e:
9f:98:64:f7:f3:b7:0a:09:9c:41:24:f1:d5:18:58:
df:99:12:ce:0f:01:66:9a:58:51:dc:e0:8f:69:3b:
1d:94:ba:03:7e:cc:a5:ad:fa:b9:b2:64:93:8e:5c:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:3C:4D:2C:98:14:FC:B6:09:21:EF:96:5D:DD:7E:E4:30:05:B9
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c8:10:d2:1f:df:ba:fd:2b:0e:8d:46:e2:28:cc:36:f8:16:
e4:64:7d:66:9c:bd:c2:0f:54:b7:f4:b3:8f:c3:b7:b7:45:36:
8f:b4:8e:c1:2f:d1:dd:6b:c5:3f:b6:02:36:7a:60:c4:fe:89:
44:88:92:83:61:7a:ec:bf:11:69:1a:64:f7:e8:3f:70:f1:ca:
27:63:90:7f:9f:3d:fa:36:e3:70:51:90:2f:81:61:07:53:ce:
31:cd:7c:8e:9a:61:af:11:57:8e:42:41:8a:15:89:c0:67:ff:
c1:9c:3d:08:2c:7a:a2:cb:06:ae:bf:3e:ad:29:11:f8:1f:89:
4e:c5:1c:21:50:c1:cc:d1:f3:a4:ba:b9:dc:3d:38:c6:3d:4f:
e6:92:a1:9c:11:9f:1d:dd:e3:e0:f4:e0:2a:92:61:ee:02:fd:
7d:bd:7e:07:5b:7f:cc:e3:f6:ce:fa:bc:7b:e4:a7:6d:2a:1d:
47:c2:72:c7:6e:1b:c7:cd:8f:b3:05:c1:41:30:f0:76:93:30:
f1:0e:c5:1d:0f:45:54:da:90:49:cb:a8:e9:60:84:5b:70:fb:
d5:84:e0:38:c6:21:25:53:8e:a4:7e:d3:fb:93:5b:35:fb:ae:
05:f5:8d:d2:4e:41:b4:39:53:c4:00:71:85:36:dd:44:96:0a:
a4:40:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:43 2026 by rpki-client