Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier: 3A3cqBOwFZDkwqb7mjvtKAegQ8nP1kJx3HEQbRSuIw8=
Subject key identifier: F0:38:03:41:60:EE:AF:CE:F0:76:77:8A:3C:79:18:12:3C:A0:B1:94
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 019CAC7E5118F131E995CC19EED5A008A4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number: 1603
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: 1upib3w4dNwpLOBhgbemzuWJEnk.roa (hash: GhXcTauSsjZxaizJzGN0VZhjaJZ3SZLeg6vkoxXN+YY=)
2: 5dCmEdDrjOnlZMp81Q2uR_wbzFI.roa (hash: lxe58PQH7VpXxHz7k/J8LJcmNsZLy0kcv52Otk3eQ+U=)
3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: DzGqvjWCqS9//kbjaM4wXEFCJMfV7Mj5dYOdfNMsYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:51:18:f1:31:e9:95:cc:19:ee:d5:a0:08:a4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=f038034160eeafcef076778a3c7918123ca0b194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:b3:51:71:29:18:e2:c9:b8:64:a3:3d:97:
70:81:29:71:b5:9a:bf:13:48:8f:c3:8d:19:00:de:
aa:5c:75:ad:d8:73:19:02:58:98:d5:40:aa:a9:11:
f4:7f:2b:7d:af:71:fb:b6:ad:17:18:d2:48:c1:6b:
c9:45:ec:cc:3c:85:b0:8c:e8:bf:bf:74:40:86:39:
d3:38:74:1a:fd:ce:2d:41:7b:7e:9f:e0:ef:b3:af:
d5:b1:7c:d7:96:3f:bc:e0:87:50:bb:f0:ed:49:bd:
7b:5c:c0:5f:ba:7b:b1:ce:e8:e1:3c:74:75:6f:f4:
c3:03:6d:6f:33:55:55:d2:72:ac:c5:d0:14:ff:d0:
c2:98:f5:dc:05:77:db:ce:f4:a6:34:c8:40:a7:0c:
e3:69:40:1e:9f:e9:7a:35:46:60:bb:42:86:b0:61:
de:6f:cf:8e:77:11:11:be:b6:0a:64:99:ae:ae:14:
2f:10:bb:50:37:2c:6b:b9:b7:38:45:e9:1e:fa:97:
78:6a:fc:62:20:76:b2:5d:a1:73:bb:91:80:0a:56:
13:24:df:c9:b5:ce:7c:bc:e9:1f:0f:95:a9:03:25:
5c:c3:b1:3d:70:b4:95:21:cf:21:74:b7:09:36:e6:
c5:54:df:87:5a:90:53:50:2f:8c:de:49:48:2c:8e:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:03:41:60:EE:AF:CE:F0:76:77:8A:3C:79:18:12:3C:A0:B1:94
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:09:bb:3e:13:a0:25:86:1a:e4:f2:6a:ea:a8:42:1b:b1:15:
96:36:b4:e9:48:af:51:07:c3:eb:fd:b5:6f:d8:46:f3:c9:bd:
9e:a2:31:88:cd:00:7b:0d:1a:f7:e4:52:3c:d4:7e:5a:d6:e9:
75:28:60:7d:8e:15:79:cf:34:d8:34:38:f8:a4:4c:79:fa:42:
13:98:46:01:25:c4:15:7a:64:d5:38:09:31:a2:b4:da:50:b8:
aa:ef:6e:d2:5f:60:1e:8f:ec:9e:ad:47:2a:99:82:8a:f6:d9:
00:59:11:17:c2:b6:37:c4:ab:51:a8:34:59:17:cc:ef:a6:89:
4a:74:ec:9e:36:94:ce:22:c4:97:4d:65:39:db:bd:d1:d4:e3:
34:6b:9e:54:ac:56:bf:4a:d1:04:10:52:1f:90:d9:9d:4e:21:
85:e3:f3:69:ea:31:18:26:cf:21:a7:5c:1b:5c:3f:d3:7c:f2:
e5:80:8f:d1:66:fd:ce:a9:b2:2f:33:5e:84:f5:e0:52:60:31:
0a:27:67:4c:fb:8e:5a:8c:a2:df:2e:93:8b:31:25:13:51:c5:
3f:c1:8c:be:07:95:3f:9c:92:57:03:83:fb:24:94:40:15:77:
04:c7:ff:8a:42:5a:d2:d8:ff:57:75:9b:54:28:ec:24:41:58:
35:58:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:05 2026 by rpki-client