
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: Y8oKEcJ2lKXMO/11fsTY/Zhhx8uzzG4WVQK1vszEbHE=
Subject key identifier: 00:CF:69:87:94:4C:0A:01:DA:4E:26:CA:B8:AC:3F:9D:CD:C1:73:E9
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 019CA9EB07FD80808E1A1F45025FB2419536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 0B4B
Signing time: Sun 01 Mar 2026 15:01:18 +0000
Manifest this update: Sun 01 Mar 2026 15:01:18 +0000
Manifest next update: Mon 02 Mar 2026 15:01:18 +0000
Files and hashes: 1: aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa (hash: YgDV6lSWXJsx/Tra+FgUOmYQqBP8G4F9S/WJqO8pRPM=)
2: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: NIYSuQjXbUAce4DRekZPrFkjhK/jJPhS11WhzQ7CnY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:07:fd:80:80:8e:1a:1f:45:02:5f:b2:41:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: Mar 1 15:01:18 2026 GMT
Not After : Mar 2 15:01:18 2026 GMT
Subject: CN=00cf6987944c0a01da4e26cab8ac3f9dcdc173e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:63:81:1f:ce:bc:c6:51:ea:9e:ff:fe:5a:
d0:cc:94:66:7b:c4:53:8d:5c:e3:a1:c2:50:46:0f:
95:21:23:71:51:b9:e3:56:ba:b9:0e:fd:55:0a:a3:
d3:9a:2f:a2:c3:85:84:83:5e:a2:5e:38:14:0a:e7:
db:a5:9d:a5:9f:a8:eb:79:67:cc:dd:7d:88:f5:7c:
8f:2a:a2:37:94:af:19:de:fa:6a:58:37:b2:73:78:
9e:9a:8d:85:03:6d:a4:49:35:0f:b7:2d:68:bf:d8:
f5:de:1a:3e:e0:b4:d6:55:37:03:24:1f:b2:f5:54:
17:5c:4e:a9:b3:fd:f7:03:34:93:14:ce:0e:59:cd:
52:69:71:fa:33:00:a1:79:16:15:95:66:7d:e0:21:
07:9c:3b:3d:a3:0c:45:96:f5:1f:69:a4:77:f2:83:
81:18:ec:34:a2:8b:5a:f4:f9:37:8d:39:ae:c7:20:
bb:41:d1:3d:ca:2c:04:a5:c8:2d:cc:3e:cb:53:c1:
eb:b6:fa:08:8c:da:1c:23:84:b0:1f:dc:7a:31:70:
3d:e1:6b:e2:46:5f:e6:2e:bf:bb:78:86:40:be:8d:
99:2a:bd:59:b5:e2:21:11:d1:1e:72:b7:ea:f1:11:
1a:b7:67:f5:75:8b:40:14:69:0d:9d:0c:03:17:74:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:69:87:94:4C:0A:01:DA:4E:26:CA:B8:AC:3F:9D:CD:C1:73:E9
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:97:f1:36:3e:24:c4:ff:27:a3:40:f8:ae:43:77:09:9d:
9e:25:78:9e:74:14:b7:aa:88:6f:c3:fc:f9:a4:cc:9a:7a:1a:
3b:6b:b2:a7:ab:d3:d3:c6:44:29:7f:40:55:ef:c3:ee:59:63:
4f:d5:cc:d5:fc:32:27:f6:f9:69:f2:7a:ed:6c:da:54:1e:c3:
d0:8a:80:bc:b3:30:6f:d0:fe:b0:da:94:f3:8c:fc:91:3c:65:
d5:c6:29:e1:96:86:e6:f2:d3:25:0c:e8:8f:b6:7f:7a:02:d5:
56:88:70:c8:1b:15:97:aa:54:51:e6:43:39:49:34:f1:1f:d6:
61:29:49:8f:be:c7:66:10:74:0b:f5:f6:cf:cc:6d:c9:5f:40:
d3:38:34:bb:14:9e:f1:a7:43:f7:70:c6:c1:3c:81:4a:af:84:
53:69:8f:58:04:d2:2f:95:04:b7:c4:c7:45:d1:f6:87:ed:27:
65:b7:83:44:7a:9e:91:08:d0:2f:a8:7f:29:ef:69:0f:18:c5:
40:e4:ff:66:80:f6:35:11:c5:fb:fc:bf:59:3a:7a:f8:65:39:
53:e7:7a:e4:e0:89:26:6f:92:39:23:23:7e:a4:a9:39:ce:b7:
f0:44:d1:5e:38:9d:ba:e8:23:00:ed:31:91:fa:37:a8:cc:6b:
98:67:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:22:05 2026 by rpki-client