Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File: WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier: 7dGgjtEJlR4PoilqPrVGJgnW4bwn9CcZzxttMPMKL2Y=
Subject key identifier: BC:8B:F2:B4:2C:65:C4:40:3D:16:F5:F2:61:87:DE:75:7E:AD:7C:5E
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 019CAC102455666357722536BCE3CBCEACC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: 1-orLpEPEs0pgT7FpYR_WYjCKwWs.roa (hash: n5Ym14rFpr095FaL9IAhfRYei5cEd9AMJCR8kIq3vSc=)
2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: 9B7VkNOKfUYx2z+oYuCUeGFC1K2ESGJsG/ERtjkCk78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:24:55:66:63:57:72:25:36:bc:e3:cb:ce:ac:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=bc8bf2b42c65c4403d16f5f26187de757ead7c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:36:f7:09:cf:c3:77:df:d4:ea:7b:1f:ef:
aa:b4:a7:d1:87:00:90:2d:5e:66:49:a6:23:0a:fe:
30:b9:8e:28:d6:b8:15:0b:cb:e1:7b:aa:64:41:f1:
15:08:a0:3e:aa:e2:ab:46:d6:6a:1e:7c:1a:8e:59:
ed:04:39:09:b6:d5:c9:66:9c:76:52:4b:53:f4:1b:
b4:49:9e:ba:e0:6a:15:97:38:03:0b:3e:56:04:66:
d7:4c:fa:92:6d:d6:0c:0a:3e:11:58:17:df:41:01:
46:2f:5d:20:0f:74:6c:0b:17:b6:44:fb:59:3f:b0:
53:25:9b:a6:bc:38:07:45:61:ff:4b:d0:dd:2c:a6:
b0:e0:d4:aa:14:f6:b6:78:ed:5f:84:d3:db:25:67:
f2:05:ee:4c:0e:b8:95:19:4c:e8:a2:45:e2:26:05:
d0:ef:40:1e:6f:3a:4d:c2:f6:8d:9d:9d:70:8d:b7:
59:bf:92:d1:74:57:e5:7e:83:34:95:67:4e:aa:4f:
b3:ab:38:cc:0d:b1:4c:a2:f4:7b:07:d7:06:a4:31:
0a:04:d1:38:88:07:6d:e5:c6:12:e8:e4:ff:b9:96:
6c:dc:f9:f6:4e:83:f7:89:2c:3e:66:58:79:fd:93:
53:31:f8:06:12:2c:ba:11:ed:a1:43:6c:23:20:1b:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:F2:B4:2C:65:C4:40:3D:16:F5:F2:61:87:DE:75:7E:AD:7C:5E
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:26:bb:be:c5:49:54:f7:76:e0:56:0a:6e:85:a0:e4:98:
36:24:b3:71:6e:d2:54:59:72:d9:b1:8d:be:fe:20:2e:58:4c:
2b:48:2a:69:65:eb:dd:b7:69:ed:4a:93:0e:16:e9:22:c0:cb:
e4:50:2f:80:e5:26:cd:40:e6:91:13:92:49:7b:5e:66:c1:d7:
e4:e0:88:4e:4f:22:3d:f3:80:7b:97:c2:45:5e:60:9a:1f:3f:
99:a1:d3:e2:a3:ef:a5:cb:48:5e:fa:70:cc:c7:8d:3d:b3:22:
85:19:0a:c6:08:1a:27:49:cf:21:46:04:d5:96:63:36:bd:b0:
4f:e2:17:05:46:1f:e8:ba:a8:cc:c3:36:67:6f:19:b7:20:d0:
33:12:42:71:ee:bb:0a:cf:0e:71:a6:74:2e:38:ef:4d:28:14:
26:92:09:25:e8:8b:47:e4:5a:67:4c:c0:1d:fc:25:1b:83:14:
4e:ee:f5:44:48:3e:7e:6a:ca:ce:0b:7c:02:69:7a:f8:29:08:
ce:f6:8b:de:59:09:01:08:76:f5:f7:01:01:0a:ee:97:25:4f:
3e:53:cc:3d:32:1e:17:0c:05:2a:8f:f8:6e:df:fd:51:83:f2:
21:3a:cf:48:f8:23:c6:18:d9:1f:78:28:40:8c:de:17:45:d4:
59:99:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:27 2026 by rpki-client