Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
File: wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json)
Hash identifier: EYPoBOINekXqIgWvoWadIPJByILFMWKRbmm0XwxAQuE=
Subject key identifier: 16:84:06:A0:B5:6A:59:94:40:FA:0A:30:2D:34:E2:6D:30:71:E7:7E
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial: 019D39AF532CF6516B4D66CBFFC022F6D301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
Manifest number: 03AE
Signing time: Sun 29 Mar 2026 13:01:24 +0000
Manifest this update: Sun 29 Mar 2026 13:01:24 +0000
Manifest next update: Mon 30 Mar 2026 13:01:24 +0000
Files and hashes: 1: 1-R7GhRXNiriw0Ks0AljMCxJFfvg.roa (hash: Ihiuc6Mf8e5SU/BW0lz5dqzcLRdt90132uDC4V5qk3w=)
2: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: nfXEiiCIo48jq+zq0MZivf6kAgNRa2Jsgz34CgVBRvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:53:2c:f6:51:6b:4d:66:cb:ff:c0:22:f6:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Validity
Not Before: Mar 29 13:01:24 2026 GMT
Not After : Mar 30 13:01:24 2026 GMT
Subject: CN=168406a0b56a599440fa0a302d34e26d3071e77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:fe:9b:a2:15:80:81:e1:fc:3a:6a:72:9a:
6b:64:86:20:f8:8f:b1:88:b0:3b:85:e2:b1:dc:40:
9c:48:c9:fb:1e:18:82:f3:d7:39:42:4c:ee:b1:5e:
80:cf:dc:03:f5:12:9a:d2:e3:35:f8:46:c2:36:dc:
53:18:fa:22:18:a0:c8:7d:1a:1d:79:88:e8:f9:02:
d8:3a:3a:4a:74:d8:c6:f6:42:82:62:ca:90:89:02:
78:09:3f:be:3a:be:84:e4:5f:45:e4:5a:f6:cb:cb:
3b:83:06:76:1e:fd:fd:cf:d4:cb:36:42:75:7d:75:
d7:c9:97:88:4e:74:f7:97:ff:a9:ef:3c:90:f5:e4:
c1:a0:1c:6c:82:65:6f:88:69:6a:b2:7a:67:03:02:
50:d3:1d:43:31:7f:7d:62:22:e2:1d:46:d2:66:7a:
da:c2:40:06:9c:a6:fe:88:a5:52:ea:30:63:e0:80:
4e:98:cd:e9:9b:67:cf:bb:37:f5:f9:94:a9:56:43:
0e:ea:42:47:40:17:92:07:a5:87:ee:09:33:95:36:
a6:83:fa:c6:8c:0e:f9:33:c7:40:a8:ff:66:38:a3:
82:58:38:ff:59:ec:25:98:79:1e:18:d2:dd:6c:c1:
6e:72:60:04:7e:b0:20:75:b7:8c:6a:07:2c:da:a5:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:06:A0:B5:6A:59:94:40:FA:0A:30:2D:34:E2:6D:30:71:E7:7E
X509v3 Authority Key Identifier:
keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:d4:c5:e8:7c:a5:df:3b:bc:1a:54:44:ea:9e:be:bb:82:
09:f1:14:d6:64:22:b1:a7:70:95:f9:3a:f0:b5:9d:b7:7c:e8:
53:c5:4e:07:37:7b:9f:de:42:37:c1:bf:3b:b4:39:62:b7:24:
0c:1f:99:04:39:01:5a:08:73:12:f1:7c:6f:14:67:1d:de:80:
fe:0a:ff:93:5d:dc:3e:56:ed:15:e6:e7:a3:04:6f:1e:e5:1a:
9f:55:da:72:c2:8d:7d:55:2d:8f:45:5a:00:4c:bd:b2:da:b1:
41:2b:96:bd:0c:57:98:9b:1d:0a:22:20:c7:77:37:97:6c:40:
ec:29:52:e7:67:dd:8d:de:69:ab:8c:0d:c2:01:41:7c:b2:6a:
57:f0:66:ed:4d:80:4b:18:cd:7e:81:51:97:e8:32:73:72:aa:
f4:95:b4:f0:6a:74:0e:3f:8b:cb:2b:d0:45:67:29:9a:41:0f:
f9:57:2f:69:be:19:57:3b:a8:cf:14:f3:b5:f5:d9:14:75:fd:
d4:54:1a:86:4d:45:d1:94:08:21:ef:8d:d1:d9:36:37:8d:ce:
3f:e4:23:5c:ca:2c:1a:13:d4:ff:76:49:80:79:1c:36:53:71:
e2:a7:d0:00:11:da:8a:3c:a9:f5:70:71:3e:36:a0:b2:bc:06:
fd:a3:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:12:57 2026 by rpki-client