Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: GxVEC9eDFs6Lt0ZEPeDCZ/XmAptPXcLgsDtraf4OsRk=
Subject key identifier: 87:46:DB:CA:A4:BF:93:7A:18:51:AD:4C:75:D4:16:E1:52:77:89:72
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019CAA8FC8996BC5F7CCD5CC4AB56273E7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0A54
Signing time: Sun 01 Mar 2026 18:01:15 +0000
Manifest this update: Sun 01 Mar 2026 18:01:15 +0000
Manifest next update: Mon 02 Mar 2026 18:01:15 +0000
Files and hashes: 1: J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa (hash: jjyUi8oIJbqLLegunqtnt7RNSdcYKaaZ3m2h96zldCM=)
2: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: +l6qPHi+L/3v+1cxZHTTPQ+avz8sABkZEPmHe7JSXyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c8:99:6b:c5:f7:cc:d5:cc:4a:b5:62:73:e7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Mar 1 18:01:15 2026 GMT
Not After : Mar 2 18:01:15 2026 GMT
Subject: CN=8746dbcaa4bf937a1851ad4c75d416e152778972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:ac:ba:8a:55:6e:dc:46:23:50:3f:16:7a:
9c:77:84:29:a2:96:49:3d:9e:7e:67:28:30:54:d2:
26:18:5e:c3:20:10:a6:59:c0:10:1f:6e:9a:32:d8:
7c:18:aa:5f:08:9c:70:63:ba:4f:e2:4e:50:f3:74:
ca:05:19:43:90:87:7e:99:05:11:32:91:dd:23:03:
5e:0d:58:59:2b:fd:47:67:8c:f3:93:b5:f3:9e:58:
6e:ae:56:43:c7:ac:9a:c8:c8:6c:5e:cd:27:73:9a:
06:29:29:05:95:13:77:bd:bd:c9:d5:a1:d0:44:59:
f6:60:3f:c7:1f:1d:a0:3c:f3:1a:fb:2f:12:25:60:
62:60:c1:ed:04:b7:10:fd:c3:5c:0c:60:a7:19:16:
ec:d6:c0:af:7c:63:9c:57:bf:b2:50:fb:0f:1b:99:
06:70:f8:0e:d5:8b:c3:f9:90:30:cc:c1:80:84:b4:
a4:a7:88:77:18:98:28:4d:54:4c:a2:c8:1e:0a:e1:
c8:5b:08:29:a6:d2:e1:c7:96:65:7d:bd:d6:17:61:
13:82:9b:d5:0f:1c:e7:0a:81:ca:50:3a:89:db:f1:
ab:94:87:ae:8f:38:ad:1c:de:b8:ee:f4:45:91:50:
be:9f:ca:33:ad:be:65:60:7e:f9:dd:7f:37:b6:f2:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:DB:CA:A4:BF:93:7A:18:51:AD:4C:75:D4:16:E1:52:77:89:72
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e8:b3:8b:cc:ea:18:11:f2:5a:b9:95:55:40:c7:d4:4a:e6:
a5:e7:e9:85:6d:f9:cc:5b:e7:0e:6a:78:63:bb:11:79:3a:1c:
5c:de:6f:55:94:37:01:95:70:f7:65:ee:d9:ea:7d:f6:f1:f8:
cf:93:09:16:24:cc:6d:82:26:bc:b4:c2:38:a7:28:3f:e0:b0:
70:bb:ac:4f:20:5c:06:56:27:bb:d9:41:8b:9e:48:2c:72:f5:
83:5c:c9:56:be:f7:a4:59:95:63:4c:d5:2f:17:09:01:45:f2:
1f:1f:27:21:ee:2c:8d:7f:76:21:39:b8:cd:f5:84:e4:af:9d:
63:82:fd:30:b1:4c:d4:44:5a:5f:4d:cc:10:ca:69:6a:39:c7:
86:2e:35:92:7c:07:6f:32:1e:cb:1c:c1:ba:7a:a0:40:69:8e:
98:2d:04:67:a0:16:00:d0:dc:af:24:7c:84:ba:dd:6a:05:48:
15:8a:e7:3f:4b:37:de:1f:0b:13:8e:65:f3:db:c7:31:31:b5:
62:09:eb:4c:4b:9c:af:0b:6a:07:0c:6e:19:ae:af:6f:a9:58:
2c:aa:4b:3b:fc:bd:a2:95:0f:79:d8:c9:6e:60:27:80:52:5e:
4d:f1:04:a1:ab:ea:15:e4:5c:57:7e:46:08:1a:c0:2d:3c:86:
9c:7d:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:02 2026 by rpki-client