Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: 9ESscHdNpmk2pC7XG6TAReqNzjJgqNo7dkXzObNnM+c=
Subject key identifier: 5E:90:D7:20:15:25:1C:51:18:8F:76:72:02:69:5B:F4:B6:0C:7F:FE
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 019D3865CB9C8F940C9A5486F5A0C1F665C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 1528
Signing time: Sun 29 Mar 2026 07:01:28 +0000
Manifest this update: Sun 29 Mar 2026 07:01:28 +0000
Manifest next update: Mon 30 Mar 2026 07:01:28 +0000
Files and hashes: 1: 8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa (hash: /ZabFzyJivcnbLtz1Of+Qh0KFPOxtwgBRMKumxY4Dq4=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: oq5P7HfMr13TOQPMvFY+erQx74lNm3aXXGlxc0hIdEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cb:9c:8f:94:0c:9a:54:86:f5:a0:c1:f6:65:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Mar 29 07:01:28 2026 GMT
Not After : Mar 30 07:01:28 2026 GMT
Subject: CN=5e90d72015251c51188f767202695bf4b60c7ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:aa:6a:d3:0c:56:24:c0:fc:c0:02:e1:03:
d4:5f:f1:9d:a5:95:f4:97:20:84:75:5b:5f:42:1c:
35:22:85:8f:95:80:85:77:4e:2f:e9:6c:ed:0b:99:
17:fe:76:ae:2b:f4:e1:e7:53:eb:30:aa:0f:a3:22:
87:55:bd:28:2e:7e:76:b5:32:83:71:b2:68:7e:a2:
47:f2:30:99:e3:07:80:fd:0c:f6:b6:87:ff:18:e4:
43:ed:e1:69:67:54:f3:a2:95:e8:38:8c:bb:14:9a:
94:5e:19:5a:68:47:0e:67:a5:20:76:82:7c:e0:06:
b2:79:db:52:9e:63:e5:82:0f:6c:b3:60:5a:48:7c:
63:33:97:a3:09:e1:0b:8a:40:c5:ec:30:dc:06:4d:
17:8c:9c:1b:9f:25:8f:ae:88:b6:e2:d4:cb:a1:69:
22:75:c3:51:c1:0c:20:05:15:d1:95:be:3e:00:6a:
8c:71:52:e7:17:c5:a4:6b:1f:c5:31:2c:87:71:9b:
98:30:12:6c:6c:64:77:12:79:be:dc:c1:f1:3c:72:
30:65:5d:b5:4f:f7:fa:85:d9:56:0a:18:98:a0:69:
7d:c0:b8:9e:b9:6f:c8:d5:8e:f9:c6:03:68:aa:36:
8a:d1:af:4c:11:d2:96:d5:15:5b:23:d5:63:24:f1:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:D7:20:15:25:1C:51:18:8F:76:72:02:69:5B:F4:B6:0C:7F:FE
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bd:fa:a0:1a:26:13:3c:bb:f8:e8:f8:4b:fe:f8:f9:7a:62:
56:10:92:fe:81:99:93:2b:19:32:62:d9:29:bc:a6:f7:d5:ac:
9d:91:de:b4:d5:19:0e:d9:26:25:ad:7f:f5:ce:14:49:82:7a:
6a:cc:8d:ee:12:78:11:23:16:6f:2f:8a:b7:88:44:6b:08:dd:
08:74:5d:5b:52:ae:9c:28:8d:d0:26:72:4f:73:85:76:8b:f8:
46:3d:ae:24:85:5b:8e:b3:5e:86:c8:2d:dd:94:1b:1e:9b:5b:
bf:6e:e1:e9:f1:a1:97:b8:47:50:45:89:84:a6:83:c9:0c:55:
ca:7e:a6:a0:54:e9:e0:f5:15:b8:4c:8e:8a:26:81:fd:77:30:
ef:4a:52:d8:9e:a5:48:89:b7:f3:06:50:67:23:fb:70:9a:b2:
68:d1:ed:1e:eb:d0:b6:ea:19:23:ee:9c:57:bd:17:36:40:6c:
94:b0:fd:04:ea:8f:3c:3f:9b:8d:07:9b:6d:36:9e:e7:f9:d6:
b8:12:86:1b:60:13:f1:0d:67:db:32:0e:9a:b0:a5:4a:52:03:
e3:c8:05:d4:34:f6:40:ef:f0:da:45:fc:58:a7:8a:a4:40:34:
7c:c5:e0:4e:cd:d4:e6:3b:1b:9f:d6:f9:51:ca:c8:3f:7a:db:
9e:11:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:07 2026 by rpki-client