Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: 93J3lhgU0A9X/fTByicTXBYiXlDk+G9mNUTHtluZn4M=
Subject key identifier: C8:CD:78:10:2D:30:3A:9E:D0:C0:00:31:5F:05:7C:3D:30:6A:D8:F6
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 019CAD902FEC09C6BF82219779E65C1DEAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 17B6
Signing time: Mon 02 Mar 2026 08:00:33 +0000
Manifest this update: Mon 02 Mar 2026 08:00:33 +0000
Manifest next update: Tue 03 Mar 2026 08:00:33 +0000
Files and hashes: 1: Jzo0bz9GpdF-EVQqtofEC4giH00.roa (hash: l6YPgC2yacKAlMOSWCV7HMeqcfgyqHxPQcRlIAV/XdE=)
2: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: nZqWjHkk9M5hV0JpeiGMZIlITyi14iHLM7ZYvNM7u3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:2f:ec:09:c6:bf:82:21:97:79:e6:5c:1d:ea:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Mar 2 08:00:33 2026 GMT
Not After : Mar 3 08:00:33 2026 GMT
Subject: CN=c8cd78102d303a9ed0c000315f057c3d306ad8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:67:56:2a:c6:f4:b5:5d:7b:35:20:a4:e0:
2f:54:9e:32:26:60:81:16:44:d6:e3:21:7b:4b:bb:
a3:6f:12:69:17:fb:82:88:e1:4f:48:d7:15:39:dd:
ca:9f:c9:79:ad:69:92:9a:9f:7f:cc:58:8e:76:14:
3c:ba:42:f0:84:25:29:3b:6b:47:cf:0c:86:66:0b:
4c:35:77:be:be:95:ca:58:62:40:2d:2f:16:97:b2:
47:81:f0:1a:4c:7b:b3:47:df:46:f3:2b:c3:8e:a1:
ef:af:24:96:a2:44:8c:04:51:1a:6c:c9:3b:f1:3c:
64:b8:1f:c5:9c:6b:93:e0:de:bb:ec:ec:26:b6:fb:
55:58:2b:45:8b:6e:a4:16:1f:cf:47:12:6f:08:f9:
6e:d5:6e:5c:e8:bf:9a:67:96:29:84:6a:55:8c:f8:
ce:78:7b:9e:fe:98:d2:2a:96:12:79:17:68:ed:4c:
de:ef:f7:ec:dc:03:43:ef:f6:c6:a3:c4:e3:01:23:
c3:a3:70:b4:d5:b3:17:97:46:8c:07:04:8f:e9:34:
a0:fa:d1:59:2a:ae:95:14:40:58:20:17:be:96:e3:
90:41:dd:82:40:29:f2:c8:1d:8f:7f:5e:49:15:d8:
6a:8b:14:2e:c4:2d:b3:26:b1:c2:a0:29:81:d1:1e:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:78:10:2D:30:3A:9E:D0:C0:00:31:5F:05:7C:3D:30:6A:D8:F6
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:35:f0:bc:f2:78:ff:99:b5:36:39:ea:d1:26:64:db:04:35:
f0:a0:72:97:65:dc:c3:79:50:ea:9e:d6:7c:97:d6:73:fc:b4:
dc:2a:9f:5c:4d:8f:89:70:00:f3:2d:02:bc:8e:5d:a9:7d:54:
0d:ab:2f:3d:f5:a3:cf:98:5f:13:4b:ad:4f:2d:f9:54:ec:db:
0b:29:0f:a9:18:34:4b:9f:57:e0:bb:9f:67:c5:89:ba:4a:e2:
1d:0e:b1:5d:6d:9a:fb:84:32:81:ae:64:b4:8e:d0:d5:b6:b0:
8f:32:73:11:f1:3b:94:1e:bf:53:d2:ef:c3:d5:6a:e9:5f:a5:
32:30:27:14:61:eb:e9:96:a9:5c:9e:2e:a1:59:22:c4:2b:36:
da:e7:e2:3d:ef:bb:66:50:55:5b:a2:20:37:a1:1e:15:fd:7e:
ff:f4:3a:56:56:d6:ce:26:21:63:e3:49:d1:47:96:90:b9:6b:
5f:d0:c2:bb:21:cb:96:d4:2d:6e:49:91:64:2c:02:e3:9c:25:
81:21:d8:1c:ff:0b:4c:48:a8:3d:be:20:b6:81:01:8a:76:e3:
da:6d:f5:6b:76:7f:e4:8f:9a:98:07:0d:c2:06:5d:b4:97:a0:
75:00:56:66:05:05:bb:74:3e:e9:d8:22:3b:32:1f:64:99:f6:
fb:0c:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:02 2026 by rpki-client