Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: Q0m/PrZUZGUPC28n6hEmsV+am/mtBCotN6O/I7Fg8Ag=
Subject key identifier: 5C:85:F1:6C:64:A9:87:A0:DA:44:FC:57:42:2F:47:02:8E:73:79:04
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 019CADFE4793803919F818126C23A8F29CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0E8D
Signing time: Mon 02 Mar 2026 10:00:48 +0000
Manifest this update: Mon 02 Mar 2026 10:00:48 +0000
Manifest next update: Tue 03 Mar 2026 10:00:48 +0000
Files and hashes: 1: JuDeFJbO_wXZjBIE6eYSc7boKCs.roa (hash: MAfICq2fQmDbk85foSo683rw0p189TufeECHZ/PelUo=)
2: nPEounEr9Dlrb0BmzADGVTeSqtg.roa (hash: WNJB2u1ILoanF+nGeSCzXfM+9cLuf8G8/18OGH9ztZ8=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: E/b29F2cf6s0/kyVHHxIaSFedKMIGV5eSeK0orpojkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:47:93:80:39:19:f8:18:12:6c:23:a8:f2:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Mar 2 10:00:48 2026 GMT
Not After : Mar 3 10:00:48 2026 GMT
Subject: CN=5c85f16c64a987a0da44fc57422f47028e737904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:d2:60:4d:78:d5:2f:47:8e:ff:6f:6a:af:
1a:2f:fa:b6:00:18:0b:aa:16:1d:48:c4:9d:94:47:
30:1a:5b:55:c5:0a:22:da:32:bf:89:b9:5b:1f:16:
5f:54:d2:f8:79:b6:3c:04:5d:80:94:37:4a:c2:81:
41:89:6e:1f:a7:5e:20:ac:b3:0f:de:19:96:aa:8e:
5c:d6:8d:3b:56:8f:c0:0d:28:82:45:4f:cc:2f:f1:
64:76:d3:a6:97:49:15:3c:79:13:42:d4:2f:c3:d4:
48:1c:6f:c4:9c:f7:16:1b:91:4e:a3:78:b6:21:05:
99:fb:c5:0f:25:44:31:36:ca:ad:67:f5:c4:a6:e7:
fa:6c:f2:fe:90:0a:d5:fa:c1:5b:c2:c5:b6:88:a8:
29:6b:d1:22:2e:0d:a8:59:9a:62:d8:68:54:34:df:
5a:31:57:7e:8f:c1:be:ab:53:c4:00:cb:8a:67:7d:
a3:b0:be:8e:65:ab:26:ef:25:84:b6:4b:e2:df:08:
1e:b7:9d:3a:52:93:aa:dd:1c:66:6f:44:0f:bf:5b:
c6:24:bd:6f:d8:13:ea:b4:4f:45:c5:f4:81:28:43:
1f:42:3c:aa:89:3c:7f:8b:a1:f3:93:95:57:03:03:
96:f9:d5:7b:6e:19:6d:98:c8:66:df:e5:f0:87:27:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:F1:6C:64:A9:87:A0:DA:44:FC:57:42:2F:47:02:8E:73:79:04
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:66:4c:09:ce:b6:e2:01:83:b5:13:ed:f2:73:1e:0d:59:75:
f8:4a:d8:2a:82:bf:34:f1:35:d3:93:d9:15:36:54:38:ca:87:
46:bf:31:9f:79:2b:a6:53:bc:f0:97:bd:b8:ba:72:f5:a2:71:
bc:c0:65:76:27:9b:9f:b4:73:6f:71:48:6f:6d:31:8f:c9:41:
0f:88:56:e6:83:b3:f4:8b:bb:5f:49:87:54:ca:d3:f0:f2:3b:
7d:36:e5:8c:84:74:65:b4:82:8a:8e:0d:67:07:a9:bd:2a:d6:
0a:fe:c5:fd:7f:79:65:9d:6b:22:ec:04:aa:8c:33:c7:fc:19:
2b:10:e4:de:24:c1:4d:f7:de:21:72:51:99:43:10:fa:d6:ec:
43:04:5c:ad:bd:9f:87:e9:ba:a2:cb:03:72:17:46:88:57:ce:
27:b8:89:f0:75:51:b3:8b:53:d9:9b:30:53:6f:e4:e8:8a:96:
a1:d1:45:6a:e4:d5:ab:57:92:7b:40:44:f8:bc:cc:be:31:2a:
5c:d9:c1:2a:f9:60:9e:d8:14:39:3e:ff:44:3d:f8:42:be:2b:
9a:b7:fa:3c:09:9a:5d:aa:ad:99:3d:52:5b:97:a7:51:b9:4d:
2a:14:c1:7a:6c:e8:33:5a:f0:c9:d9:10:79:60:78:25:eb:70:
c7:99:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:15 2026 by rpki-client