Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: WJGxTJoThAXSkaP0yQ0a+0LNhTrjwW+scYLx1noLdxk=
Subject key identifier: 88:EA:FE:B6:40:90:CF:3A:2B:15:3A:2D:4E:57:B9:F1:F4:A0:A3:CB
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 019CA97D3079F95FB43FE796A96D18E1735C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 1896
Signing time: Sun 01 Mar 2026 13:01:19 +0000
Manifest this update: Sun 01 Mar 2026 13:01:19 +0000
Manifest next update: Mon 02 Mar 2026 13:01:19 +0000
Files and hashes: 1: BUkLbJymwTyiP7I3JBXsx3s4NL4.roa (hash: S+u04ktm3wvbogL9zzmkeSkoPC/t6RrVsW1QDJ8a+R8=)
2: VKi_eELpmYrDDbDrF0VVkkCBTvA.roa (hash: x+LzLGitMTJHgFBC68KihyTc7sPTjjdr4ISMkWQ+OXA=)
3: ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa (hash: 7Noxt8qVLB+fyFIGQYg4LilEwKTB1zOCXiJLI8oHZSo=)
4: gdh12HnOMOEqYVtaca7KAq1urKE.roa (hash: xH1nYkWxaZr276GAcCdV3VvkfxZ8MURBbGI3J9HTllU=)
5: k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa (hash: mFXBGS6DaTNeb9V9IYIi7IizihWo5PDlGr82oMDsEnk=)
6: kjiD6TFqmxMVqOnqt0_0GLgSRcU.roa (hash: AZdOF+iEUNNu4fK6OeoAbtGKKK0ZCVUm4ff6O264PE4=)
7: vuYx__ePQYmBnErIjuxPmyS72UE.roa (hash: RG1Iph+v2YrWVe+WGtDI4g5ptYW+7Uz8lQw8iy5rb4g=)
8: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: BygklszlEHkG4nB5jRteAN58Xw2iDGMA36uOWcIhQ2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:30:79:f9:5f:b4:3f:e7:96:a9:6d:18:e1:73:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Mar 1 13:01:19 2026 GMT
Not After : Mar 2 13:01:19 2026 GMT
Subject: CN=88eafeb64090cf3a2b153a2d4e57b9f1f4a0a3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:5a:ea:90:f2:29:90:a4:c1:d7:68:1c:66:
5c:6a:31:95:ce:72:2b:02:bb:ec:31:9a:76:53:1c:
9d:f1:9c:0f:35:ac:8d:63:d3:09:da:25:6b:4d:34:
cd:4b:e9:0a:17:e3:24:64:e5:f7:e0:de:a5:c7:98:
fc:69:1e:b9:f5:90:c2:fd:96:b1:6b:fb:98:8b:a7:
cf:3a:6c:f6:ce:2b:5b:d5:f4:9a:ff:26:fa:0e:a8:
b4:32:5c:94:24:11:07:f6:b1:3c:67:98:b6:cb:d4:
a0:65:08:57:5e:cf:49:f5:8b:be:27:b6:5d:76:37:
64:49:a7:cb:80:06:19:1f:88:50:f7:9d:a6:bd:8d:
b2:37:11:21:c8:29:5e:5c:7e:ba:ae:b2:c8:73:34:
5a:32:e4:a1:66:1e:b5:f8:b6:6d:fd:b6:91:35:ba:
f9:9c:b2:60:98:bf:1c:99:a2:3b:2e:08:c6:ce:08:
a8:f9:5c:57:cc:a7:e3:6a:f3:8f:4d:86:3e:7a:c7:
4e:9a:d5:17:46:a3:10:45:a4:90:ee:aa:11:cd:16:
7c:3f:f5:70:88:bb:a7:f7:79:97:af:5d:0a:98:5e:
5e:cd:63:2a:19:82:a9:51:f7:06:27:01:1f:69:5a:
a1:0f:0a:b4:5a:2d:10:9c:31:b0:1d:74:6d:67:15:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:FE:B6:40:90:CF:3A:2B:15:3A:2D:4E:57:B9:F1:F4:A0:A3:CB
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c0:b7:b8:d2:04:b5:ad:51:76:49:31:d9:96:ef:73:5e:ef:
e7:36:e7:1a:8c:d0:3b:a3:e8:39:82:c8:a8:1a:c0:89:97:b7:
03:23:c4:8d:aa:be:e3:94:84:cd:22:e8:5d:9e:b4:44:76:05:
a4:bf:1a:05:30:12:47:ac:58:13:ad:3b:1e:10:32:9e:38:81:
9a:71:96:71:3b:23:79:af:15:21:cb:3d:95:f9:03:92:0b:ae:
a0:b7:9d:54:77:2f:91:57:3b:75:06:67:47:c1:fa:fc:9c:a6:
c4:c7:2c:ea:56:87:10:3a:3e:c4:d2:8f:3a:31:4e:da:ba:f3:
67:1a:96:84:06:bb:96:f0:f6:29:58:56:6a:6c:c2:49:72:54:
18:bd:be:fd:de:7b:2d:73:02:5e:14:f4:c7:21:dc:e4:b3:95:
b4:dd:85:91:5b:0d:65:00:61:a5:30:25:78:94:75:bd:f4:6f:
ef:13:c2:3e:99:04:8a:80:76:3b:71:2e:31:64:1c:43:ec:26:
dd:a7:1a:90:49:03:d3:ad:82:cd:64:6c:f4:1d:a6:0a:85:b5:
fb:db:35:9c:31:54:1e:aa:3b:7c:a8:e9:44:7a:50:bf:ec:2c:
02:e7:10:8c:58:5c:f9:d1:74:a4:7c:76:79:c2:e3:2f:e9:6e:
81:b0:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client