Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: pwZuUK5dfnuynweElYx59InEhv5b2k3G8k8fYYC+8F8=
Subject key identifier: 58:1A:63:55:F0:DE:3E:04:B0:88:F6:3C:7C:5D:53:49:BD:DD:43:75
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019CAC7E336862C029F905C06627CE596C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 1661
Signing time: Mon 02 Mar 2026 03:01:17 +0000
Manifest this update: Mon 02 Mar 2026 03:01:17 +0000
Manifest next update: Tue 03 Mar 2026 03:01:17 +0000
Files and hashes: 1: 2fDUlbNk_TjJfNmL8k7Qpaq_A4k.roa (hash: AoEFyUvMFK7WBCJaTliv+GG29q2nziZw8E359o15zN8=)
2: gMvc_sE40m271NPynEOBrQzKYWQ.roa (hash: OeLSYnjbKMmBS4VGXJ744NmGmYrVy7bxB46xBnCaSmA=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: TPYQj+J9gT+YEGKwckWvCwP4d4Mwm2HD24hFtde33xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:33:68:62:c0:29:f9:05:c0:66:27:ce:59:6c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Mar 2 03:01:17 2026 GMT
Not After : Mar 3 03:01:17 2026 GMT
Subject: CN=581a6355f0de3e04b088f63c7c5d5349bddd4375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:2f:18:f2:2f:24:e3:25:f3:f7:3f:55:c5:
80:c6:ed:ac:00:74:f3:23:70:49:b3:de:78:c9:2b:
66:af:fd:29:8e:88:ac:d7:79:ac:af:a4:bc:e9:b5:
33:81:c9:fa:cd:90:32:e0:52:ca:39:c0:3d:a6:dd:
24:af:ee:6f:a2:5d:dd:87:13:bd:07:37:e5:d1:e2:
1f:b2:aa:bf:43:bf:bf:f6:35:ed:73:c3:f2:64:fe:
72:6f:ef:02:0d:ea:89:c9:a4:09:0b:30:d1:ed:3b:
d8:2d:0b:0d:c3:3e:4b:8b:69:9b:f3:28:59:18:1c:
da:93:45:f5:23:11:0f:7d:89:5f:db:95:a0:1e:5f:
e3:f3:7b:95:43:59:82:8f:fc:6e:1f:4d:d1:f8:a0:
61:06:99:ff:97:5d:b7:c6:8f:56:fc:ec:9e:d8:f2:
32:91:29:84:e1:5a:22:6e:e8:db:67:c9:fa:b9:7c:
e6:de:b4:f1:1d:ff:ae:1f:3e:6b:5a:fb:53:e1:13:
33:06:8c:eb:56:8e:e0:66:e4:e7:b7:22:70:85:08:
ac:13:f2:85:7a:06:09:5f:32:70:ba:93:d6:ce:58:
0b:96:ca:ea:0e:a0:df:dd:e8:2a:58:23:22:df:f9:
39:c0:03:7f:5a:e7:23:12:d1:f6:79:38:8a:29:4b:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1A:63:55:F0:DE:3E:04:B0:88:F6:3C:7C:5D:53:49:BD:DD:43:75
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:87:5a:59:8e:6b:de:dc:e5:df:14:00:3a:25:89:ae:a6:
3b:59:37:ff:f3:b3:6c:1b:76:68:26:09:89:c2:59:fb:5b:97:
83:20:cc:59:85:eb:4c:ae:dc:c2:17:66:11:6b:e8:aa:c0:88:
9c:3c:d3:78:19:33:15:45:8d:a5:e5:a8:0b:6b:c7:cb:89:fd:
fc:27:9a:f1:26:dc:e1:2d:89:c6:61:71:6a:c9:8c:4a:2c:7f:
89:b5:52:7e:21:7f:54:ab:93:61:ea:7a:be:0f:16:b5:4e:08:
54:e5:36:30:24:67:3b:94:fd:6f:3a:12:e8:9a:c4:97:08:6b:
bd:b8:ff:bd:c6:cb:c8:55:25:72:d5:ab:d1:92:a8:44:95:a9:
8a:b1:d6:94:cb:b7:cf:4e:c4:22:ad:5f:19:2c:52:c2:0d:e1:
a9:ef:35:89:4b:09:24:b6:de:13:01:66:65:78:e5:cd:cf:37:
26:64:dc:74:00:12:89:1d:73:b7:ca:81:07:f8:84:55:6a:c2:
38:16:45:98:bc:5e:44:04:39:c2:1a:e9:5b:f9:39:61:3d:13:
b2:3b:35:ef:97:fe:0d:0e:e0:b0:a5:f2:e0:b0:0c:73:9b:3f:
59:4d:b0:f0:25:2d:bc:de:90:06:83:20:8f:d4:8d:ce:50:68:
7a:d6:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:15 2026 by rpki-client