Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: fAvFkgIc1neaPAaSuv7y6Ce3g9Q6XEUrN5ULpAuRIxg=
Subject key identifier: F9:DF:6E:DC:07:8E:40:D0:BE:1E:90:66:A6:79:52:C3:80:F9:B0:62
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 019CAC7E29034ACACA755611AE7CBAE4A050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 052D
Signing time: Mon 02 Mar 2026 03:01:15 +0000
Manifest this update: Mon 02 Mar 2026 03:01:15 +0000
Manifest next update: Tue 03 Mar 2026 03:01:15 +0000
Files and hashes: 1: 5RryIGVI4D8yV9FJRN0qOChCYEE.roa (hash: ZXZohq24aG1ejohkX4O2iDPWcy5mbU13m+Vqo0/udR8=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: pegtmB9yKJaf/dStxjegmuxEVN4XtsLATmVdFhWJwCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:29:03:4a:ca:ca:75:56:11:ae:7c:ba:e4:a0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Mar 2 03:01:15 2026 GMT
Not After : Mar 3 03:01:15 2026 GMT
Subject: CN=f9df6edc078e40d0be1e9066a67952c380f9b062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:44:8b:49:03:c8:7d:54:d5:24:28:10:1b:
9c:36:98:31:c7:15:a6:bd:ae:38:3b:c8:f5:0f:8d:
fb:fd:ef:d8:09:24:a1:5f:ed:6a:a1:08:fd:27:10:
26:b1:3b:99:f6:6a:22:9a:da:c1:b9:1b:73:6c:85:
a7:43:d9:17:f1:4f:c0:e1:3e:c5:38:38:4c:2a:4e:
8e:d8:f3:d1:7f:94:cf:37:c3:6e:eb:9b:c9:67:86:
c6:94:45:a0:12:c3:06:7a:5b:b8:b2:b4:37:d7:cb:
78:40:4a:bf:8c:c1:ef:b1:44:85:63:49:7d:ad:8f:
f8:c7:d8:b6:dd:35:2a:99:78:a5:6b:bf:d5:6f:ce:
41:83:83:00:f1:9c:cd:bb:4b:dc:17:1c:09:72:f6:
07:c7:a7:de:da:71:af:cc:b9:e4:ee:8b:83:0b:a1:
66:ec:04:43:6e:25:45:01:00:21:20:1d:8c:f4:da:
55:d8:56:33:4d:10:a7:1b:d5:46:5d:88:85:1e:bb:
0f:d1:1c:af:5b:b9:59:0d:11:46:e5:27:36:f0:5a:
c0:35:87:9b:89:b3:ba:04:f1:cc:ed:c4:0a:52:3d:
de:dc:d0:48:32:33:f5:74:12:93:55:7b:bd:e5:e5:
2d:5b:a8:01:d0:aa:b1:57:d9:af:ad:04:05:4a:76:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:6E:DC:07:8E:40:D0:BE:1E:90:66:A6:79:52:C3:80:F9:B0:62
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9c:2c:99:da:c3:d5:0b:a7:4c:96:5b:0c:8a:39:d3:28:df:
86:f0:4a:67:03:e1:92:66:68:20:09:96:b7:c5:d4:6c:5e:b7:
2d:11:e4:71:b2:b3:72:94:6a:e3:0d:66:81:85:07:c9:66:f6:
dd:35:04:42:66:f0:ba:3b:81:ca:7c:b2:19:03:1b:50:71:0c:
1a:8d:ad:9c:88:87:1f:71:5f:3b:22:b8:1c:a2:0f:6a:5d:aa:
a4:17:c4:fa:37:f3:50:1e:c8:59:aa:73:53:00:9d:d4:87:58:
22:0a:0a:aa:18:e1:cd:08:97:4e:2b:22:9b:3a:8d:c0:04:56:
6f:c5:ab:3d:4b:db:81:c7:c4:41:66:4f:a6:03:d4:c7:88:a2:
25:1b:2e:fa:33:08:99:d8:6b:fa:65:d3:f4:71:71:10:83:f2:
87:29:16:0c:a6:67:57:e8:5d:4c:c2:dd:75:7b:24:b8:be:34:
65:10:2a:1c:6c:59:e7:75:34:eb:c6:e2:08:80:c2:be:73:36:
83:be:d3:c9:0a:72:2b:f6:c1:a2:d5:f5:89:e3:46:94:9e:20:
f9:c7:30:7e:aa:d2:52:08:34:19:ce:1c:ac:17:9a:12:08:27:
25:f1:c5:60:50:5e:fc:dd:31:ee:45:a9:7a:e8:11:0f:c4:27:
04:97:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:58 2026 by rpki-client