Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: 4YkjemA8zXehmLjdxjgWO/KSsb+OM+/dvz+kClliCO0=
Subject key identifier: 05:64:0B:FD:5F:65:11:66:05:98:EC:53:B1:48:3F:60:30:AB:3E:57
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 019CA9462D9C4E3CA0B60997EA5272F333BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 0B61
Signing time: Sun 01 Mar 2026 12:01:14 +0000
Manifest this update: Sun 01 Mar 2026 12:01:14 +0000
Manifest next update: Mon 02 Mar 2026 12:01:14 +0000
Files and hashes: 1: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (hash: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: oJEKohoIGG8rbYLxna/ytaqGeCdh/zttCLiCYS7XEak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:2d:9c:4e:3c:a0:b6:09:97:ea:52:72:f3:33:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Mar 1 12:01:14 2026 GMT
Not After : Mar 2 12:01:14 2026 GMT
Subject: CN=05640bfd5f6511660598ec53b1483f6030ab3e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:3b:ce:ad:82:ff:09:69:b2:27:84:74:fa:
82:40:5a:46:ed:ca:3c:e9:d1:dc:ac:8a:7f:15:93:
5b:3e:3b:84:df:71:f5:97:72:75:84:8a:0c:a1:d5:
8d:80:ac:20:93:62:8d:e6:d4:b7:93:be:3e:e0:09:
ab:2c:4f:de:f1:00:a7:4d:16:f9:1e:79:c7:4f:a8:
7c:35:4c:68:7d:2b:ca:2d:43:df:18:49:7e:af:f1:
d5:11:19:b0:b8:cb:51:a7:bf:53:6e:c1:79:e4:28:
e1:8e:18:fc:45:a4:64:5c:80:5a:a0:f4:1f:b8:9b:
84:2e:03:9a:67:bf:16:0e:d2:da:a1:02:b6:36:63:
b9:df:83:b8:30:3b:dc:e6:1d:43:70:9f:2e:66:8a:
e1:c5:19:38:93:3c:b3:32:d3:f9:45:86:d2:33:70:
74:b3:1c:5b:04:65:d1:53:84:de:b7:13:c6:cc:4d:
ef:08:18:10:4c:ae:9d:c3:bf:23:8b:73:c8:db:ff:
73:ed:3c:4f:f9:69:65:6d:cc:08:f5:46:1a:b6:20:
43:26:d0:ec:f8:f0:9c:c4:7b:81:ab:60:c7:96:4c:
94:fa:15:2d:48:b7:c1:8d:ee:23:52:bb:6b:8b:ba:
9f:e7:54:30:cf:ec:78:80:44:b7:ea:69:66:0c:d1:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:0B:FD:5F:65:11:66:05:98:EC:53:B1:48:3F:60:30:AB:3E:57
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:6f:3a:19:d7:15:9e:e7:ef:8a:1b:cc:3f:27:62:e6:00:
f2:7a:6f:7c:0d:f3:d6:3f:50:18:40:67:4c:29:39:76:f1:4d:
3d:99:93:1e:7d:50:28:79:dc:75:27:a1:91:63:a5:c3:92:8a:
4f:5c:8b:3e:34:4e:c4:f3:6c:5a:e5:12:0d:c8:71:92:28:2c:
6a:44:a7:11:20:f6:a6:7d:9d:b9:c4:42:b9:a7:b8:64:c9:2a:
40:9c:95:80:f0:ed:30:22:51:1a:55:7f:7c:d0:f4:f7:fa:54:
49:d6:5f:9d:46:e8:4a:d5:bd:b0:0b:52:53:66:d0:29:9f:80:
dd:cc:07:16:bf:12:30:e2:29:28:e0:d5:9f:79:0f:c9:f7:03:
46:60:e0:6b:4f:1b:f1:81:68:10:45:03:64:a9:77:5d:7a:94:
58:08:68:0b:b2:53:20:20:da:37:67:4a:23:56:5d:9a:95:ff:
64:06:62:7b:c3:f6:44:19:19:81:9b:e1:2e:3c:a8:aa:4b:43:
79:7e:f5:37:df:56:d7:ff:d5:8d:72:8e:68:9f:97:d6:3a:b2:
ca:f0:3c:d5:d7:a9:d5:4c:97:ef:9e:ad:8a:7e:5f:87:87:3b:
e9:d9:f3:04:d2:27:54:98:5e:cc:1b:b2:96:04:3a:16:6c:7c:
60:8c:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:56 2026 by rpki-client