Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: yM85sZf0Zi4oo7QkwdQj52ejWUWaNJ10SamLNdu8Rkg=
Subject key identifier: 06:03:F0:66:90:03:C9:AB:3D:38:3F:1D:8A:89:0C:82:B5:26:8E:13
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 019CAB344271393DF0CB02C50AF3EF5254B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 1334
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: nRmjyxWGF6a7tV1DmVfOj7lLijI.roa (hash: zc3Mo+okKisvH6UwCPx7tW7bSfZdDVD88nKDTYhyQDY=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: ilgrSpiS6+VgrV6sJ6jAKmWeKaas7H9LEtjsUB6ubOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:42:71:39:3d:f0:cb:02:c5:0a:f3:ef:52:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=0603f0669003c9ab3d383f1d8a890c82b5268e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:69:0f:27:08:de:a3:e5:5a:b5:40:3d:a0:
db:c8:7d:52:38:65:32:14:8d:a8:40:8a:cf:26:e7:
e2:2b:f4:2d:9b:2a:8d:35:ec:73:12:da:ae:56:5a:
7b:6b:bb:93:77:e3:51:fe:80:5e:84:91:b6:ba:c5:
bb:0f:a7:f9:f3:36:18:e4:14:34:0a:d9:13:ff:49:
d1:88:99:fc:9d:71:0f:b0:09:dc:99:65:fc:3f:67:
42:0b:e4:95:e2:d0:96:94:5f:76:5d:16:f4:b8:ad:
4f:b5:a8:4c:9f:77:82:cf:30:8d:d3:fa:60:42:da:
04:68:54:d4:e5:4f:7a:4c:fd:44:d9:b5:0d:a2:12:
96:4a:71:51:94:d3:18:cc:4a:b0:e9:ae:f9:a9:fe:
c6:b5:ed:5d:f6:5e:0a:83:1b:9c:74:b5:39:88:5c:
01:5c:f3:dc:1c:34:08:a4:26:5e:74:e3:3d:71:be:
3e:0d:dd:84:8b:7a:06:8c:e7:6c:8d:fc:5d:75:c5:
74:07:30:3d:7a:a8:6b:41:69:73:ca:11:f6:1c:01:
c9:77:59:fe:1b:45:f8:6e:58:09:3b:8f:d4:94:5e:
22:9c:58:76:38:35:80:97:f0:45:61:14:11:8a:a0:
6b:03:8d:79:9c:12:11:14:c7:5c:03:e8:ff:22:ff:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:03:F0:66:90:03:C9:AB:3D:38:3F:1D:8A:89:0C:82:B5:26:8E:13
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:51:f1:5c:5a:e2:e8:dc:34:0e:c8:9e:24:11:e9:76:62:
df:45:44:5c:5f:0a:a1:ca:50:52:e9:a9:86:14:2d:7d:00:f6:
7b:55:81:b2:a5:6f:6a:b9:b8:ee:9e:c9:ea:45:58:3e:0e:ec:
44:69:ec:c6:80:4e:67:41:cd:f5:be:3e:8f:b8:a8:4e:5e:71:
2b:14:ad:4a:c0:37:01:b5:3c:8a:c9:29:58:c5:0d:69:06:8f:
92:53:4e:4f:75:a3:af:ab:cd:5a:60:f1:14:2e:c4:c5:09:24:
1f:25:de:8a:0a:c2:e3:7d:08:73:e8:be:b1:37:f2:84:d9:39:
95:74:b4:3a:9c:8a:8c:d3:24:d8:fe:30:b6:55:6e:fd:eb:31:
a7:db:bb:60:3d:03:e8:96:42:7b:d8:b4:09:2a:df:39:41:db:
9f:b3:ae:7a:3f:b6:17:f8:d0:2c:97:23:d7:2c:6f:6f:f8:e7:
16:0b:4b:67:47:af:a5:5d:e2:44:cc:d0:d8:a7:3e:c3:83:0d:
84:0a:5c:02:00:5a:79:fd:ff:35:79:10:76:e1:54:e0:b1:dc:
82:6b:be:d0:13:84:d6:c6:29:d2:a6:33:36:82:f4:57:56:b0:
03:18:12:1a:ec:d3:a7:eb:17:d9:f0:87:11:03:e1:f3:58:00:
68:89:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:28 2026 by rpki-client