Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File: wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier: 90uUINz7eddVLg6Q5t1cOMs1vnGC/PNFGcYR7qF4CMw=
Subject key identifier: BA:A0:20:A7:9B:A6:40:E1:78:88:23:A8:60:C8:E5:63:64:07:50:82
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial: 019CABA1FAFBA2C34E8B44DA03F55E34C6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: fkjKY1GubqopgVMFItI3Dks0F0s.roa (hash: XHHriZ3RedEv637kMieJw9uopGlbC5EMU7/X4VulIbY=)
2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: 6slTD/25aJOUVYSFYohYAUDCVjBa0y565XFPCdOJM3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fa:fb:a2:c3:4e:8b:44:da:03:f5:5e:34:c6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=baa020a79ba640e1788823a860c8e56364075082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:f8:b6:85:dd:3a:bf:f7:02:c2:4b:bc:4c:
02:1a:85:9b:88:30:6e:f6:ba:fc:03:6b:40:6a:4a:
c6:60:43:29:7f:1a:b8:84:41:eb:4a:11:0b:3c:04:
20:8a:f1:38:80:57:af:5e:3c:7a:ee:33:d4:64:13:
5c:84:20:3a:03:49:13:00:d2:50:85:33:99:22:36:
66:fb:20:a7:46:e9:b0:88:5f:b9:45:87:cb:a1:b8:
9e:05:9a:5b:8d:1d:31:bb:64:b6:8b:99:88:a9:35:
c6:46:79:ec:88:59:3e:ea:47:47:a4:33:6c:e1:58:
8a:9e:64:f9:ae:0d:86:f8:c0:6f:1d:b3:e8:49:05:
e3:34:87:9d:1b:cf:4a:4a:24:32:0e:d3:22:ea:f1:
61:eb:67:e5:53:02:a2:33:67:09:c6:20:fe:bf:2b:
b5:e6:d5:2b:e2:c5:1b:56:61:b9:86:ac:52:ba:13:
18:a1:8b:b6:55:15:c2:ab:cc:64:34:a3:b5:e8:c9:
b2:73:14:94:cd:6a:96:3c:e1:58:b1:0d:3f:f6:5a:
72:87:4f:7b:07:73:e7:a8:ad:eb:2b:d9:ed:e9:b6:
2d:f3:41:7a:65:53:31:da:69:ec:94:e9:17:88:36:
46:84:c1:34:b1:81:5a:77:1f:9e:9a:9f:a7:7b:d0:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:20:A7:9B:A6:40:E1:78:88:23:A8:60:C8:E5:63:64:07:50:82
X509v3 Authority Key Identifier:
keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0c:eb:b5:b0:23:51:87:5c:66:c5:89:85:1a:6c:00:e5:98:
be:08:c0:22:0c:77:2d:c5:eb:fc:b3:aa:66:ae:3f:14:42:71:
03:2b:73:98:29:18:0c:b8:7d:e0:e2:2b:9f:1d:1a:3a:3f:38:
90:ba:9d:42:be:0c:25:f3:e8:df:f0:79:74:ca:92:b2:ac:48:
61:2e:f6:1d:0b:b3:7d:ee:b6:3e:e4:29:be:19:92:1c:95:1f:
c4:e5:6d:1e:ab:dc:47:96:ac:49:b2:d2:cf:26:f4:89:ee:0c:
07:a5:86:6f:bb:49:97:27:29:40:fa:46:f1:55:eb:36:1a:ad:
2b:b3:f4:1c:5c:96:56:cb:ea:85:3e:1c:94:66:68:0b:6c:38:
14:81:1f:14:ea:e2:4b:be:07:82:0d:64:7b:c2:d5:94:fa:ff:
02:c3:63:27:6e:ad:20:6a:0f:16:4c:ba:5c:85:b0:a3:79:32:
3b:c5:7f:10:ea:aa:d4:3e:6d:ec:5d:64:b7:99:26:e9:14:fc:
02:7d:6e:9e:c8:26:9e:92:6a:fe:2b:3a:01:d6:77:15:b6:ea:
0d:45:e7:ee:db:31:c3:fd:59:4c:5c:b8:6b:31:34:30:0c:50:
96:ba:2a:b2:11:0b:a2:03:a0:7b:14:ef:cd:7e:14:cf:f7:ed:
c0:19:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:41 2026 by rpki-client