Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: 1xmVbNAHHNPKeFo3qk0ViicCudVtcREbAoJ0kNzX3a8=
Subject key identifier: B3:B8:F3:43:1D:02:B8:17:DC:AD:AC:42:4B:C2:4C:C8:49:F6:07:FA
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 019CABD94BE35E31A1D846A08769148D0C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 179D
Signing time: Mon 02 Mar 2026 00:01:10 +0000
Manifest this update: Mon 02 Mar 2026 00:01:10 +0000
Manifest next update: Tue 03 Mar 2026 00:01:10 +0000
Files and hashes: 1: 8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa (hash: t4kbmcJ+5L6lxyTeqkC36Es5ovqBT600hloF270F10g=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: jlb0e3mR4zfFlw0inW/2A5Zw9ic2/6kEaCgk/L4nEsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4b:e3:5e:31:a1:d8:46:a0:87:69:14:8d:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Mar 2 00:01:10 2026 GMT
Not After : Mar 3 00:01:10 2026 GMT
Subject: CN=b3b8f3431d02b817dcadac424bc24cc849f607fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:97:07:52:4d:2f:c5:d3:d1:24:3c:b5:13:
a0:b8:76:4c:ef:45:2c:ed:29:20:30:e4:ac:2f:1f:
f5:ea:d6:3e:da:aa:ed:65:52:09:0b:61:8d:3c:f9:
ec:56:32:1a:ba:16:77:f9:38:1e:79:bb:39:46:1e:
f1:a7:11:f5:07:e1:bb:6d:54:09:5a:b2:1e:96:9a:
69:f7:7e:f0:60:88:c6:54:3c:f4:bf:5c:05:f8:46:
3a:7f:8d:4d:c9:9d:dc:0a:90:ba:8d:3d:7e:22:6d:
f4:92:57:83:1f:e7:8b:cd:ff:7f:93:dd:e9:d6:06:
30:37:34:9c:57:3c:e9:c8:fc:c5:42:5e:09:bb:db:
37:f8:1e:45:3e:e6:48:f2:de:23:87:f0:3b:e0:3d:
61:76:3f:3d:2b:fe:15:86:ff:76:83:3e:39:a8:26:
02:ed:07:a7:b8:65:29:b3:e9:69:3e:fd:d4:44:01:
45:7a:ae:4b:f0:8a:8f:b4:03:ac:d2:75:5a:b7:57:
fd:41:c5:68:8b:95:6d:c6:24:42:b3:a3:3a:f9:4e:
a8:b3:4f:36:7d:0d:a4:24:44:7d:85:00:18:09:4c:
eb:b9:a9:1c:2e:84:cd:95:9d:ca:e7:ad:f1:03:eb:
5a:2a:68:b7:98:46:fc:27:c9:bf:9d:10:6a:3b:f9:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:F3:43:1D:02:B8:17:DC:AD:AC:42:4B:C2:4C:C8:49:F6:07:FA
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d6:ee:0b:b1:4d:05:ab:25:cd:fd:ca:38:29:65:c6:8f:ea:
1c:e6:6c:76:e7:37:8c:38:31:05:6b:a4:40:8f:83:9b:89:35:
dd:11:03:60:cf:56:f7:73:5f:7b:41:fd:6f:a2:d9:a4:03:76:
e9:4b:6d:a6:b3:62:67:5f:66:71:8a:17:88:1c:8f:a4:6f:9d:
8f:69:1f:af:32:48:92:f2:33:52:70:2b:33:9f:b6:3f:28:d0:
62:9c:d5:ca:a9:99:f1:ad:00:ed:de:a7:12:59:b1:ad:f1:1a:
ce:45:9b:e5:69:f5:94:b4:a6:01:11:82:ac:c8:59:f3:15:63:
f4:ce:5e:d3:c0:5d:5d:9f:53:e2:2e:a1:1d:d0:ec:6a:9a:94:
ff:b7:79:76:84:f4:46:ba:84:a1:d2:75:14:e4:ba:c9:c1:3d:
ef:00:66:f5:6a:81:a5:c6:7b:d3:67:4b:69:1c:49:a9:8c:7f:
ee:65:7d:af:39:08:13:81:09:5d:42:a4:59:5d:c2:69:83:38:
6b:1c:66:e2:90:04:26:f3:39:a8:ae:29:6d:16:1a:5f:a0:e1:
16:e9:b6:15:3a:7b:ae:51:a7:21:72:ce:f4:64:42:44:c7:f8:
45:6f:06:84:25:5e:d3:81:a1:09:ce:6b:8f:1f:af:5b:a2:96:
62:09:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:50 2026 by rpki-client