Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: Tj2jfqpHhsGCZX9HIlkai4/iP1mKu1zV75Bmhy4ozyM=
Subject key identifier: 71:1F:B6:E1:41:3E:DE:26:1E:E0:B8:FF:69:C2:45:0C:13:F0:19:52
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019CAD225B01F7BC6361B0DF5740616EB2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:00:35 +0000
Manifest this update: Mon 02 Mar 2026 06:00:35 +0000
Manifest next update: Tue 03 Mar 2026 06:00:35 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: vw46P1fVYfr/p0ChaGnHTujQrGg6zYbuXebpeTNWcMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5b:01:f7:bc:63:61:b0:df:57:40:61:6e:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Mar 2 06:00:35 2026 GMT
Not After : Mar 3 06:00:35 2026 GMT
Subject: CN=711fb6e1413ede261ee0b8ff69c2450c13f01952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:7f:e5:e5:7e:31:16:05:7c:b7:4b:2f:4f:
42:e8:1e:3a:c8:cf:09:4a:52:c1:dd:38:62:a4:62:
f5:11:fd:96:51:51:87:b8:33:94:93:c2:b8:3b:ef:
58:5c:41:70:79:82:00:c4:2a:9c:aa:6c:26:e3:df:
13:08:d5:97:9c:17:21:ab:17:ee:77:5c:85:63:19:
9c:36:6e:8a:5a:5e:43:5c:5c:5b:70:1d:e8:a1:c8:
bd:83:a1:f2:a8:e4:3c:c1:94:dc:dd:34:91:5d:1c:
53:3d:b0:c3:5b:89:8f:64:cf:6c:cb:93:8d:d0:e4:
64:2a:9a:0b:ab:d4:0f:3d:e6:67:f7:5f:42:23:3e:
e0:40:d5:0c:be:57:9b:87:d7:48:d4:a0:78:49:cd:
04:a9:94:52:b2:e3:8a:58:95:14:b4:ab:cd:6f:e1:
ac:71:f7:ba:3a:50:9f:c4:32:53:83:b4:62:e9:05:
26:33:b3:76:a8:85:c0:46:ea:fc:04:ac:9e:94:9d:
35:01:fb:83:c4:0f:54:14:77:2f:36:01:49:e5:f7:
6d:f6:bd:de:34:95:e4:73:51:d4:be:0c:3a:86:22:
13:56:7e:ec:fb:bd:34:bd:00:99:4e:35:fc:8b:99:
33:99:48:ae:59:0a:3f:ef:5c:58:f2:e7:a5:fe:84:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:B6:E1:41:3E:DE:26:1E:E0:B8:FF:69:C2:45:0C:13:F0:19:52
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:88:79:19:60:a5:64:e6:80:4d:75:7c:4f:c4:96:f9:38:10:
11:f4:5b:07:a9:ec:15:3b:71:95:d3:9a:ec:57:4a:17:75:5a:
4a:74:bf:8e:bb:09:6e:35:af:7d:01:72:0b:89:2c:89:f8:aa:
49:67:43:b8:bc:6e:06:dc:3a:f9:13:7b:c3:f1:d5:08:d1:e2:
1e:12:4f:2e:69:fc:ab:94:f5:50:8d:1c:52:67:d7:bc:aa:9a:
18:9b:34:8b:71:bf:5b:8e:99:ac:64:6c:04:2c:43:4d:35:07:
73:86:6e:a6:45:18:e4:43:11:93:45:6d:17:8c:56:53:28:71:
fa:a5:44:3f:b6:04:06:10:9a:62:91:bc:13:76:89:80:34:5a:
f3:15:eb:e2:0b:e6:16:e4:7b:7e:96:13:7f:d7:03:7f:07:67:
6d:15:c7:6d:b9:f8:fd:eb:dc:b6:28:38:1c:6f:5c:26:27:14:
b3:8a:9a:b9:fb:8f:ad:da:4f:af:73:8c:e0:d4:4e:bf:98:31:
dd:a4:c9:cb:25:3e:79:c6:8a:eb:72:f6:4a:3a:4c:13:57:43:
46:ec:60:9c:f3:f1:17:b1:8e:e2:62:b5:78:e2:73:9b:10:fe:
64:3a:1c:67:21:0a:b9:3b:47:05:3f:c7:a1:a8:56:1c:10:47:
9d:f1:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:23 2026 by rpki-client