Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: OM2YuJIgTRv/0NkmxYtfJxL7HvKKyXA1c13tEJKYnv0=
Subject key identifier: 36:32:B0:4C:5F:24:4B:F4:93:D2:33:44:E0:3D:C6:2F:A6:2B:CB:8E
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 019D37C051567C671903B08112BC9A09F487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa (hash: iWxHjwfuXSnOXM+4EBopGhWz6sGJ/Fj0z8QWrUeSyfM=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: x4FjsZM7GI4xWMHGkuRku+3rm9u9N3uiD2xEy+qrdXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:56:7c:67:19:03:b0:81:12:bc:9a:09:f4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=3632b04c5f244bf493d23344e03dc62fa62bcb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:fc:24:39:df:b3:3d:65:11:b0:91:da:1e:
34:e3:23:af:a9:d5:47:da:82:ac:4e:b5:5a:8b:60:
9c:be:a8:0c:41:8c:4c:96:26:ec:74:7a:12:ed:e2:
46:85:38:38:d6:fb:1a:e3:ba:ca:82:52:22:89:29:
fe:39:82:84:bc:02:72:d8:cb:b4:17:4e:01:2e:73:
b5:cc:ca:07:ef:74:98:60:f4:e3:69:8e:94:6c:a3:
d8:2e:81:9c:14:1f:a6:24:aa:77:4e:0b:79:2d:12:
ce:1d:c4:ec:e2:32:21:b4:1d:82:3c:91:19:bc:a8:
f2:ed:db:ea:22:78:80:de:f8:eb:44:51:3b:3b:c6:
25:c6:c8:60:ef:8a:c2:99:8c:18:de:d3:31:90:24:
a6:93:7c:18:12:df:2c:fd:03:24:0d:21:47:61:bd:
47:86:6a:94:58:90:c7:0d:64:3a:b0:37:c5:dc:29:
6f:5a:83:7d:b1:96:63:72:c7:fe:c4:62:b9:f3:52:
34:ec:14:84:e2:d4:d7:5f:a6:3d:90:c5:41:a3:ac:
8f:b7:b5:ed:cf:e2:87:77:9b:89:d9:c3:fd:9c:81:
14:51:68:a8:2a:de:49:da:db:2d:40:48:3e:3e:82:
53:1d:f2:ec:b4:2f:9d:24:ea:bf:ab:f5:ac:e8:54:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:B0:4C:5F:24:4B:F4:93:D2:33:44:E0:3D:C6:2F:A6:2B:CB:8E
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7b:f6:19:3b:23:47:66:49:8c:bc:fa:57:e8:0b:b5:6a:82:
cc:a1:49:ab:75:bb:9b:f6:7a:2e:b8:ad:ce:24:3b:a6:d5:56:
af:06:b6:9c:d2:72:62:2f:ee:67:58:4b:d5:74:b1:62:3f:9e:
6f:86:7d:0c:61:0a:cb:41:4e:dc:2c:ee:34:5b:2d:0f:cd:6c:
fe:3b:26:a1:4a:f2:77:18:4e:8f:a2:be:a1:60:2d:a9:1e:25:
d2:04:52:0e:01:2f:00:fb:14:1a:c3:c5:cb:f6:c7:08:04:28:
96:eb:37:76:6f:ec:d7:3c:57:70:87:47:a5:bf:13:75:27:50:
77:85:39:49:a6:ed:f7:70:c3:ee:34:b9:f5:87:5b:94:2a:d8:
54:ae:ed:57:6d:32:98:e1:78:8f:eb:85:e7:82:db:af:dc:d9:
13:5e:0e:c4:64:64:26:0c:e4:42:a2:51:2a:ad:8d:2e:96:10:
5a:55:da:5b:a4:5e:aa:62:23:ea:d0:7d:56:e4:4d:b5:cf:90:
e3:29:f4:62:a9:c9:aa:df:03:db:18:66:b6:a4:35:c2:27:13:
7c:c3:f0:ef:dd:d9:05:ac:3a:47:04:54:2d:16:a9:fc:79:10:
0d:fc:dc:e8:ca:d4:48:6e:16:7b:48:e8:24:cf:e7:11:e1:e7:
e3:c7:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:10 2026 by rpki-client