Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: Cy2xnX9cWGDqp5SEfbOWtOb5cfroSzY9fSErTZYGuL0=
Subject key identifier: 74:EF:4B:2F:3C:2C:DA:E1:47:97:D4:4C:46:F9:C2:A0:9D:E4:40:24
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019D38D3370B0E69AFB8E66FB2E485551F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 02A0
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: 79Z1nHqbARMp7ErXfmw21mGj+rYcbwS2Hvakw1T59SM=)
2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:37:0b:0e:69:af:b8:e6:6f:b2:e4:85:55:1f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=74ef4b2f3c2cdae14797d44c46f9c2a09de44024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:80:d2:60:f7:a0:03:a9:a1:8c:43:96:2e:
7e:9e:e0:5f:16:64:a5:17:86:03:f6:3d:21:62:45:
61:10:e1:63:8e:c0:ac:50:5c:6e:bd:0a:4d:20:c2:
b9:44:8d:f5:8f:80:65:2f:a7:1a:5f:78:f4:e9:1d:
a1:0f:aa:0f:c6:87:32:98:4b:4e:10:8b:10:8e:35:
ef:ae:b0:4c:e6:d3:dc:ac:e0:62:4c:30:93:b5:e1:
f1:29:ba:52:c0:93:8d:f7:2f:03:e6:88:7c:19:3a:
70:68:52:ee:5b:f9:a9:cd:9c:97:0f:25:b4:df:97:
ad:63:92:cc:82:d5:0c:30:8f:f9:1b:42:29:96:c0:
bb:b3:04:70:44:47:a0:eb:02:39:cd:09:ac:4d:bd:
6c:94:a8:69:3c:42:c6:4f:10:a1:bd:13:c6:d6:1e:
56:96:be:0d:06:91:51:b8:7d:8a:b1:83:7a:24:66:
cf:35:0f:f1:16:8b:c9:cd:4c:3b:c9:7e:19:cf:05:
a0:b2:cf:7e:4e:25:c7:65:ee:86:da:8a:78:da:33:
c2:a7:30:5b:4c:53:97:0b:d9:3c:7c:7e:10:60:39:
84:89:e7:da:df:c1:3c:46:9e:bc:81:6d:7f:3a:7f:
9c:eb:05:83:be:3f:db:f4:07:04:e1:d9:6e:54:b0:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EF:4B:2F:3C:2C:DA:E1:47:97:D4:4C:46:F9:C2:A0:9D:E4:40:24
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:00:ce:e2:f9:28:14:17:1f:a7:df:8d:d5:af:c5:73:68:0f:
83:d9:9f:a6:1c:63:4c:d4:91:a9:09:6f:56:f4:fc:72:4e:c7:
11:26:e2:3a:be:4a:9f:fd:32:81:b3:38:55:58:0f:2d:3f:03:
2a:32:a3:06:2a:56:a6:a0:33:bb:f1:a7:eb:4d:5d:a9:48:f8:
e3:e6:9d:84:80:85:30:6e:5f:cf:7b:f4:af:ae:f7:16:2a:31:
1f:76:08:6e:cd:8b:8a:59:13:13:18:dd:c7:8d:17:6a:b1:90:
ed:04:4c:f1:52:a2:7a:d8:0f:c2:b6:bc:d6:e6:a8:42:61:a0:
e4:34:87:45:26:d5:0b:de:e3:89:7b:30:9d:f2:b9:1c:0b:e9:
0f:c9:9f:0d:52:7f:5e:fb:8e:4b:3b:f4:78:57:44:1f:2b:fd:
16:fc:fa:4b:50:29:24:03:0c:6b:71:fe:f1:0b:08:91:d9:ea:
af:a5:a8:d5:67:50:2f:7b:91:aa:79:e9:47:b1:c7:2d:4d:88:
32:40:8b:2d:50:92:74:84:b3:d4:61:0d:d8:3b:af:bd:4b:ab:
20:46:2f:18:52:00:53:53:a1:52:f8:95:c0:7a:6d:7b:33:ba:
de:a3:71:90:04:82:bf:fe:70:43:e3:a2:55:06:fa:41:80:03:
e5:6c:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:04 2026 by rpki-client