Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: Ahgg66jndZKOcOeV55tjcIglOEUXXHRN8S6NYhhLxzA=
Subject key identifier: 5A:1B:72:5C:85:C1:C0:A2:9F:7C:7F:E5:63:E1:40:B7:A8:53:36:A7
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 019CACB4C978A02A261F73E2FE22A6F28247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 062D
Signing time: Mon 02 Mar 2026 04:00:54 +0000
Manifest this update: Mon 02 Mar 2026 04:00:54 +0000
Manifest next update: Tue 03 Mar 2026 04:00:54 +0000
Files and hashes: 1: ra29butMifiezKtKfx76h0-beS4.roa (hash: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: y7rFkRAnvu1dmrhom3lcdLJnLqGMTVIKHR2o4NT/B2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c9:78:a0:2a:26:1f:73:e2:fe:22:a6:f2:82:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Mar 2 04:00:54 2026 GMT
Not After : Mar 3 04:00:54 2026 GMT
Subject: CN=5a1b725c85c1c0a29f7c7fe563e140b7a85336a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:8d:6e:bf:64:dc:a6:08:7f:5b:d6:b0:f4:
03:c8:0f:6a:83:5f:ca:72:63:58:a7:d4:77:3d:53:
d1:18:85:fc:26:ec:54:7b:98:5f:5e:0b:d1:1a:1d:
b8:75:f6:72:5e:d2:15:e2:e8:8f:62:02:3c:30:32:
af:99:6d:a9:35:ab:cf:90:58:ef:a1:02:da:8f:8a:
cd:fc:18:b4:06:c9:2b:90:c0:95:97:30:f0:dc:11:
46:d6:e8:53:b8:e2:49:e3:73:27:2d:ba:f8:15:a3:
2d:e2:56:49:97:dc:ec:6e:13:f2:97:c7:0e:15:e6:
38:c3:7b:43:69:2c:5b:95:54:1e:81:38:58:a2:da:
cd:d9:55:9b:b4:4d:96:91:d4:7e:e1:6d:e6:7e:84:
82:b5:96:8b:1f:7a:de:5d:b5:d4:af:af:2f:6c:5f:
a4:c4:03:d6:3b:91:5d:6f:f1:56:77:25:27:51:a2:
ab:98:2b:eb:60:d0:cc:fd:05:4e:58:dd:b7:79:d1:
38:df:28:f7:d9:a5:82:ae:60:05:20:e8:d8:9c:c5:
0e:66:80:db:80:e9:fc:5f:d5:29:ca:f5:40:97:90:
95:09:69:21:cd:ee:ea:15:f4:3e:6d:64:82:0e:b9:
68:a4:0f:31:9b:27:6b:71:9a:f5:79:3f:bc:96:ef:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:72:5C:85:C1:C0:A2:9F:7C:7F:E5:63:E1:40:B7:A8:53:36:A7
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6c:b7:96:2c:08:d9:f7:db:ed:14:0b:2f:83:d2:1c:75:0e:
c5:10:0c:d1:1e:fe:65:63:42:c3:74:25:ca:31:8a:b1:e9:82:
49:0c:3e:8d:ee:0d:44:55:ef:41:ef:23:49:2c:38:3d:35:72:
e6:be:76:b3:11:9d:ae:23:c7:94:08:75:93:fd:d5:17:eb:ab:
8c:80:19:b5:00:3b:55:a6:49:4d:40:9d:a6:55:e5:1d:f9:14:
05:2b:38:07:09:d8:d1:00:75:0f:c4:fc:57:b6:e6:44:ab:52:
ee:12:d9:f8:37:66:6d:95:d3:cd:df:32:cd:cb:55:ec:e3:f7:
3a:60:1e:2f:3b:e8:89:cc:43:b9:bf:7c:3a:e9:69:56:a2:47:
2e:ff:66:34:6c:b0:a4:6f:91:5c:0e:ae:85:fe:bc:e0:70:b7:
79:8a:a9:64:8e:bc:d7:7e:74:4c:b5:e1:1a:b6:0f:69:8f:84:
1d:1b:74:75:dc:d8:a3:cf:1e:71:33:9e:b2:6b:e0:48:78:c7:
8d:01:05:e2:65:f6:4c:11:c9:8f:e1:87:8d:9f:c1:b6:0d:8a:
23:e0:9b:42:b0:ef:57:e1:3d:76:56:36:6b:5a:01:8d:06:f0:
a1:b5:25:79:15:a1:10:28:1d:66:bd:4d:54:36:43:44:39:42:
8d:83:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:06 2026 by rpki-client