Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier: +yGZdkMlrrsdJnYuiglck6X9X9ybMwxKZ4rXfB9Nknw=
Subject key identifier: BE:57:F1:21:28:1D:C8:11:0E:A0:63:0E:58:79:9D:38:13:90:3A:F8
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 019D37F76D7459153DF60E6CF08C4A95793F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: iBoAHfS4BZvaUqr3t62slrnAKc4.roa (hash: j3qBODNziooOMWyPw2hbhVtBrkM/eb4LDIHDcyPEIv8=)
2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: Ngzh1RpF2ecL3vmigdSFhsHV/GxNBwhzM5OhPkY+2JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6d:74:59:15:3d:f6:0e:6c:f0:8c:4a:95:79:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=be57f121281dc8110ea0630e58799d3813903af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:b8:24:c5:96:44:f3:e8:fa:6a:d4:23:fd:
a4:4b:c3:2f:78:fc:78:14:d6:c7:51:df:bc:81:21:
c3:4b:67:f1:6d:05:77:14:db:43:e0:a2:41:a1:6d:
0a:c3:00:3c:68:d1:bd:11:25:bd:dc:b8:29:99:1d:
4a:1a:27:2e:68:ff:ff:90:26:01:f6:e3:36:3c:8a:
bc:13:31:55:b6:aa:23:bd:7f:8b:5b:24:00:39:9f:
f6:7a:1c:23:8b:e9:17:2d:99:68:30:32:44:f8:99:
0d:9f:19:9a:7f:6e:4a:7c:b2:28:d6:4f:4e:58:b4:
e7:f9:fd:80:6a:67:62:a8:72:e7:b1:48:1e:94:67:
ce:dc:a2:b7:ec:5d:8a:66:b0:9c:8d:18:ba:b0:f2:
dc:df:f4:52:e7:72:4b:0c:0a:ab:80:50:b3:be:ca:
5a:75:99:c6:24:55:e6:a2:e1:6c:97:16:3c:05:f6:
d3:c7:6e:95:5d:88:6f:fe:26:1a:5c:8c:a3:5c:c9:
1d:df:a0:56:49:8a:4a:9a:f4:f0:71:97:90:55:92:
97:79:d4:b5:29:d8:a1:f9:2d:25:65:72:c0:6b:bb:
92:07:0f:12:1e:ee:1a:69:a7:fa:9f:4c:df:d7:33:
e4:f9:6a:b7:90:29:41:41:2a:54:97:35:9f:cb:0c:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:F1:21:28:1D:C8:11:0E:A0:63:0E:58:79:9D:38:13:90:3A:F8
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e6:4d:7c:f2:3f:6a:56:dd:6f:69:62:07:98:be:52:81:37:
3e:e3:87:3d:60:71:c8:83:83:81:0f:71:a2:11:01:7c:46:c6:
40:1a:2a:56:09:9f:04:4a:dd:9d:d9:f3:e5:e4:14:6a:39:b9:
4b:c9:1f:97:fb:fa:89:5d:b6:58:11:b2:5e:37:d3:8d:b9:b7:
72:0d:5a:6f:ec:fa:23:ce:03:8b:65:d9:d8:32:5d:09:f3:92:
05:16:a0:78:85:29:ac:77:ba:bb:b5:f3:18:3e:f5:01:ac:72:
dc:e9:83:f4:ff:b7:a6:49:06:d7:29:c6:c8:19:9d:d4:83:17:
8c:55:c0:b3:19:2c:e6:b3:21:4e:a5:e5:b8:5c:dc:a3:8e:a1:
f5:0b:ba:ff:b3:8a:22:2d:28:e0:23:13:28:d5:bd:91:38:ae:
e6:c2:9e:05:4d:b7:b0:84:55:fb:b7:35:a9:73:af:c6:db:77:
ca:23:f6:e6:74:95:13:82:9c:8f:d7:eb:7a:f1:7f:37:48:9d:
2b:40:07:7e:c5:b0:ae:44:aa:a9:5d:f9:73:c4:97:d3:70:19:
52:31:2c:e1:9c:a8:73:32:76:ab:46:b3:dd:e7:bf:1d:14:23:
82:c0:8b:7d:a8:50:44:cf:a2:70:f8:45:af:a1:96:a5:9a:b3:
dd:a5:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:31 2026 by rpki-client