Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: f/DbQguKPIY/5uOME0DxJmM13OB/kz0c8etZwS1O35c=
Subject key identifier: 7B:E5:B1:F7:66:D4:44:7C:79:E8:C4:10:20:6E:CB:56:22:BE:0E:5C
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 019CAAC630AB6521B421A496DAD6C6D6B8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0ED2
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: 1mKr2BYewzXDecj0nNw7rfiYO80.roa (hash: 6ynFOsQcc4+COoSJWkYKLEzNdnYU6AWGSoX2YiGPF3I=)
2: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: 8WZ0elK8z9VCmSat/R1EPwn8LragOCq+9ukhPAw9GFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:30:ab:65:21:b4:21:a4:96:da:d6:c6:d6:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=7be5b1f766d4447c79e8c410206ecb5622be0e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:17:69:ce:f2:ac:d0:60:85:0d:50:46:d1:
77:2b:4e:d6:97:52:f5:22:b5:f3:54:69:0f:33:e3:
85:f4:6a:f2:a7:d1:58:06:63:7a:47:fe:8e:d2:9a:
7d:ef:a8:69:29:6a:0e:ff:fa:51:3a:66:00:f7:fe:
3c:4f:7e:43:a3:d0:85:e2:51:8d:af:e4:e0:52:e2:
c8:ca:12:a7:13:dc:b3:ac:12:6b:9a:e4:4f:97:ef:
b9:1f:cb:a8:bd:54:f7:93:da:98:1a:76:2a:aa:f4:
0a:15:80:91:fd:8f:f8:79:94:19:36:b8:82:28:22:
82:20:0c:ee:fb:11:dc:b8:41:5f:6c:27:04:1a:0d:
73:71:ee:84:37:5c:e1:81:88:5b:44:76:71:02:ab:
c3:87:8e:bc:4d:83:a5:bb:69:da:ea:98:b4:c7:8b:
47:eb:e7:08:ec:b1:48:ce:2e:f7:56:d4:f9:f1:6a:
c5:b7:c2:89:57:52:e0:d0:a1:cb:bf:39:99:4d:f4:
e9:c7:5b:bf:08:1c:49:1e:28:22:38:f5:18:02:06:
35:c8:17:ce:bd:57:68:8e:8f:57:9e:9e:a4:ba:d5:
96:7a:85:31:f3:4a:e3:50:cb:df:2f:84:1f:8f:e1:
ca:d3:63:f0:d4:4c:df:7c:61:cf:91:54:b1:4e:5f:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:B1:F7:66:D4:44:7C:79:E8:C4:10:20:6E:CB:56:22:BE:0E:5C
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7b:40:14:96:46:0d:33:4c:91:ac:33:f1:96:55:da:97:cd:
ef:4c:e2:10:1e:4b:64:c6:bd:7d:28:f3:0d:a0:71:74:35:ca:
c0:8a:98:72:40:36:52:fc:1a:f2:f6:36:e8:c8:26:56:96:83:
2d:d5:2e:21:0f:a0:4e:86:51:12:01:6b:08:69:68:f1:9f:59:
fb:7d:5a:4e:b5:68:07:cb:93:23:63:f8:b9:36:6c:5c:37:6b:
6d:ec:bf:65:30:26:99:67:35:9d:6f:c4:bf:4f:e6:a2:5a:16:
1d:7b:d4:ec:fd:0f:11:8b:06:bc:0d:d5:34:57:8f:ad:cf:fa:
61:e7:4c:30:10:56:10:f5:c5:a5:ef:d5:a2:a1:8c:ef:a7:b8:
df:6f:ac:b6:ff:26:0c:b2:da:68:16:49:2c:d4:e7:b1:ea:5d:
ab:8e:3e:84:74:89:a5:8f:92:ff:dc:c4:b3:cf:d0:01:16:2f:
7b:b8:d5:e7:ee:22:b1:0f:0f:0d:8b:72:c2:4a:0a:41:4e:08:
52:4e:e1:5e:2d:55:ac:da:e7:77:3d:30:c5:6b:81:3d:20:a4:
f4:d6:46:49:93:c1:ac:0c:5f:a7:bc:0a:1d:51:59:82:e7:bf:
49:5f:ba:45:f6:a9:75:82:16:70:0c:0b:b9:94:64:f1:4d:26:
ea:bf:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:57 2026 by rpki-client