Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: oF/vZ+NvQRlFWOjLswbbnchybyvtMgEEBJlHQCoAXFA=
Subject key identifier: 11:12:1C:FE:AA:A6:3D:FA:08:78:58:46:98:6B:BB:87:35:3B:36:81
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019D3940D3A2D843C32B8778CC6B7A806F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0EF1
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: RlOFMbXLknFF4MFtTP90iggw6Z1i9lSw5ng1l2OPJy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d3:a2:d8:43:c3:2b:87:78:cc:6b:7a:80:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=11121cfeaaa63dfa08785846986bbb87353b3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:66:89:99:bb:82:7f:83:d7:55:7d:e0:35:
86:b7:60:05:00:15:5e:aa:b7:b8:bf:03:dc:9e:27:
54:65:3c:0c:e4:84:23:ad:a0:00:39:79:ad:42:ce:
9a:e5:79:f6:9e:05:57:e5:7f:16:15:15:48:cd:70:
62:d0:f2:fe:fc:f9:8e:62:e0:23:b0:11:20:e4:53:
42:e3:c1:cd:47:21:82:21:90:c5:c8:81:f4:bd:b5:
5e:d7:f3:9d:0f:0a:41:19:84:20:45:0f:b7:cf:d9:
92:de:63:51:d4:8a:ef:54:46:19:bb:98:90:e9:c0:
ed:bc:dc:d9:5d:58:9b:10:fd:de:eb:bc:57:a4:5f:
6e:73:3c:e7:1f:bc:26:ac:c5:7e:7d:3c:b8:64:37:
13:b9:57:fb:8f:e5:2d:db:0f:a2:a0:82:fc:50:38:
77:88:7f:0d:1c:38:e6:94:73:d0:93:cd:51:a6:fa:
e3:0a:ac:8d:91:b1:ae:97:3c:a9:04:95:8b:5e:c7:
ab:b6:95:65:15:7e:00:3f:c4:3c:ae:08:1a:9a:d7:
02:51:eb:b5:15:43:d0:fe:e8:c8:60:06:6d:27:5d:
c6:d0:20:65:37:e1:18:e3:df:35:88:96:96:8e:16:
28:be:59:f6:93:cf:eb:5f:72:56:e0:b8:00:ad:98:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:1C:FE:AA:A6:3D:FA:08:78:58:46:98:6B:BB:87:35:3B:36:81
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:eb:90:cf:7a:b1:58:02:12:71:e5:d5:1c:af:e7:7c:16:54:
50:29:3e:58:96:d4:f0:31:71:ac:90:04:85:d5:30:52:7e:8a:
53:43:bb:11:eb:56:8f:8c:2f:5c:c1:9b:13:95:4a:ca:2e:f9:
6c:65:ab:f3:1b:8e:9e:52:bd:96:18:f1:2a:ea:fe:4f:e2:28:
e8:82:d3:1d:c8:e8:43:d0:fb:5b:b8:02:81:4e:4c:4c:13:90:
63:1e:cd:33:8b:6c:37:b9:a2:81:3c:53:c3:7e:5e:a8:dd:a8:
0e:c1:18:f7:53:7b:ff:fd:75:e4:91:6a:b9:ad:d0:29:46:0c:
c4:bc:48:89:27:04:4a:04:b4:53:8e:39:2f:13:6a:e8:be:4a:
9a:cf:07:19:94:d4:97:03:bb:90:2e:b8:c7:58:9e:79:04:71:
b7:9d:07:16:c6:29:83:36:66:56:b8:66:6b:97:67:11:b1:4b:
26:d5:e8:1b:e0:ba:bb:2f:6d:c6:46:99:6f:20:fd:e1:80:8b:
c3:df:62:97:33:a5:ce:92:83:c6:46:31:dd:37:e7:c3:3f:86:
90:25:c3:dd:b9:44:7e:ad:e5:52:a4:c7:4c:0b:cc:3e:8d:5c:
14:10:53:ab:c2:d0:4b:94:d9:48:2b:3c:0d:73:f5:9f:9a:6c:
6e:d5:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:51 2026 by rpki-client