Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: aqEMjagSy2uoZ8BRhOop1lgWxBky5u4DtZsVkNLLeso=
Subject key identifier: EF:48:26:D2:ED:0C:CE:BE:80:C2:61:94:40:64:88:8D:6A:8B:4D:E6
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 019CAB34A18944E0A25439651001BB0CED7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: 0gFi+WnJH2e3nYoXRa8ffL6K7NSVqEmI20T02V218u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a1:89:44:e0:a2:54:39:65:10:01:bb:0c:ed:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=ef4826d2ed0ccebe80c261944064888d6a8b4de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:0a:62:a7:d8:b6:b8:c7:fd:b8:a5:40:a3:
c6:77:0e:81:d8:ad:6b:76:6f:19:5b:c0:35:85:07:
c6:46:bb:aa:4f:d6:cd:04:b7:d0:b5:27:87:3b:82:
cf:c9:f8:35:3b:14:17:35:b2:4e:de:0d:03:43:37:
6b:11:ea:72:0e:36:39:32:02:8a:4b:b6:2a:c2:bc:
5d:81:81:ec:c3:eb:52:78:80:88:bb:14:89:04:0f:
b1:cb:67:8b:9c:54:f2:dd:1a:c3:57:43:9a:f6:b9:
b9:f9:09:0e:94:3e:53:19:2c:2d:30:df:8d:18:7d:
79:bc:b9:49:b5:54:50:d3:d1:bd:d3:c1:fe:45:a0:
05:8e:51:25:b4:10:31:8b:50:f2:67:14:89:96:b5:
93:35:7c:27:c2:31:43:8b:53:e6:aa:c4:a3:b5:53:
eb:ba:98:4d:a9:20:27:ac:11:40:c7:67:23:99:23:
f7:f2:ab:e4:6d:44:89:0f:b3:02:d8:7f:c9:ae:cb:
ba:5d:a1:bd:9f:42:93:97:4f:25:f3:0d:ed:0a:ce:
7d:6f:1b:76:42:fd:16:08:d5:c7:e5:47:f6:31:8d:
db:51:6b:f6:6d:ff:24:d0:db:6c:9c:82:2e:5d:d0:
68:24:ee:73:e2:30:73:20:2f:6d:43:b5:bd:c4:7a:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:48:26:D2:ED:0C:CE:BE:80:C2:61:94:40:64:88:8D:6A:8B:4D:E6
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:84:0a:0b:a0:8f:f7:c7:17:65:10:09:d2:66:06:55:31:cb:
e0:cd:4c:1e:de:d5:74:b4:e6:18:9f:83:c7:35:14:2a:53:06:
d1:f0:f8:04:91:97:d6:45:a6:da:51:41:f9:15:3d:15:25:67:
d7:a5:68:95:36:22:3e:33:3b:28:53:97:df:0b:bc:e5:e6:4a:
17:16:53:64:36:5c:f3:82:d2:8e:02:c4:23:e6:72:bd:3c:09:
aa:e2:00:fb:5c:59:0c:68:51:a8:76:96:42:6b:48:5a:a7:9a:
67:84:cc:1a:d5:b9:88:cf:a1:b9:5b:12:45:8f:28:b6:d6:8b:
14:7d:be:c1:62:6d:2f:84:73:d2:c1:b8:7d:44:d6:45:f5:85:
85:e8:3a:bc:65:50:b2:25:d3:22:75:24:2a:74:97:4e:0b:71:
5d:8c:89:ed:3c:bf:45:7c:fa:77:3b:da:e1:b5:90:77:5d:de:
98:d6:c7:f0:0c:a8:20:a1:98:12:c2:0b:12:b3:f3:5f:8b:aa:
ff:29:bf:e2:2f:81:c6:18:a7:96:21:76:5b:24:d9:dc:1c:1d:
10:06:f4:6c:18:51:7a:83:f8:1b:5e:e6:47:ee:9d:41:b4:53:
e0:c0:28:1d:4b:3e:33:7d:bb:2f:2e:8d:8a:4c:63:fb:3e:75:
84:07:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:02 2026 by rpki-client