Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: h0or75cWEn8i2tFJNuoI/l0EekxLfa+BWMv/mZ4Ac6M=
Subject key identifier: 3A:11:18:BE:21:3D:35:36:12:C3:7A:90:8C:C4:C6:5A:1A:9F:DA:A4
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 019CABD9FE8F25E71706C39EDBF7B9A498DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 16AF
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: +FoEaLnIIwvM7H6BD3/zdpv4F4e1L+8h0Ms3ZkrLrcc=)
2: deK62GymHjI7pPHou_DnpOMbHoY.roa (hash: Z9L1mrfYyQRlpKO8mVrybo46X8ByziZzKGq7WcbtlNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fe:8f:25:e7:17:06:c3:9e:db:f7:b9:a4:98:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=3a1118be213d353612c37a908cc4c65a1a9fdaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:1b:c7:0e:a0:d6:b9:5e:0c:a1:89:7f:db:
5b:51:f5:c5:c8:b3:5e:e7:5a:35:25:75:de:c8:35:
2f:38:7c:6e:da:0e:d1:53:23:ad:76:db:78:da:99:
42:4b:cc:e7:50:63:37:4b:80:41:5f:79:09:c9:41:
89:b6:1c:4d:13:90:2b:90:45:13:05:52:e9:c7:5a:
29:d4:91:ff:84:05:31:21:7f:25:22:6c:07:ce:fd:
1c:6c:b2:12:44:32:5a:36:6a:ed:da:c2:95:61:53:
29:4b:29:6e:e4:37:40:85:9f:4b:81:4c:65:64:4b:
ff:6b:3f:26:b0:02:b2:ab:13:37:45:dd:67:9a:57:
3f:eb:e7:2c:3a:be:57:11:fb:a2:00:e2:68:43:24:
23:b7:0f:a6:fc:b8:56:13:28:65:29:69:4d:c5:fb:
db:24:a1:88:23:01:3e:60:e2:15:e9:92:52:fd:7d:
e4:87:41:15:98:ff:ef:32:a3:fa:4e:e0:3b:70:81:
56:19:14:3d:ea:9e:f9:09:8d:83:29:0c:e4:33:61:
ce:a2:21:80:ca:c0:78:7a:aa:38:61:47:69:f7:5e:
7a:7a:a0:b6:1b:15:ad:67:40:86:ef:52:53:a2:ca:
9e:8b:ee:c6:7b:2f:21:88:cd:8c:25:c0:58:4e:e3:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:18:BE:21:3D:35:36:12:C3:7A:90:8C:C4:C6:5A:1A:9F:DA:A4
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:51:77:75:12:85:7d:8c:bb:bc:47:5e:14:23:ba:b9:6e:75:
71:6c:7c:13:f0:d9:bd:c7:c4:be:04:7b:5e:75:47:c1:95:ee:
f9:d5:ae:04:00:23:47:0d:48:2b:30:0b:cc:53:80:37:3f:f2:
de:7d:d5:18:1e:a5:85:3f:e7:dd:00:e0:6f:ca:75:ff:aa:bb:
51:a3:43:0f:5c:5e:d7:10:2c:7f:98:68:b7:6d:c1:42:5a:f2:
aa:d7:fd:92:e0:22:3c:f4:aa:66:67:e6:2b:80:c1:61:22:9f:
14:03:e9:04:9b:e1:3e:32:1f:77:96:a6:b6:4b:2d:29:b5:4a:
b8:6b:e4:e2:ec:ac:25:8d:6f:c7:f0:53:f4:41:10:a7:ca:76:
d5:13:1a:35:e6:7e:23:a2:17:da:0a:9e:42:fa:23:6e:0f:76:
95:41:f5:26:cb:17:d1:59:54:a6:d1:31:60:a2:ce:09:fb:e3:
d8:08:98:59:00:75:c5:e4:38:6f:a0:41:15:aa:d4:98:3a:31:
ef:60:e1:97:f9:f2:34:7e:b7:c2:c3:03:28:6f:4e:33:de:80:
cf:82:12:32:6e:df:ed:27:1c:a4:0d:cc:db:d1:3d:7c:67:9c:
0a:50:79:f1:b7:a1:c8:61:86:01:47:65:44:8b:94:40:36:7d:
0c:8f:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:50 2026 by rpki-client