Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: Lmg1JYGwdRgSsP4WVngJew7zngIDswJ6kQ7DVdLHUHE=
Subject key identifier: EF:3C:EE:06:78:DC:3E:75:4B:42:6D:CC:F1:C1:45:0C:B7:C0:40:C0
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 019D33E3AAF75B0A36C9F7E24CF213037229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 1602
Signing time: Sat 28 Mar 2026 10:00:51 +0000
Manifest this update: Sat 28 Mar 2026 10:00:51 +0000
Manifest next update: Sun 29 Mar 2026 10:00:51 +0000
Files and hashes: 1: 6WdR5ALUcJI-sJuaADDlA6E9Y0A.asa (hash: VJWjlwq1JUBaxiGK+9yYjlSpnVeoc6WMAIqDzfDLC38=)
2: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: yCCoozm3nqOnPab00lmlFZtL18bC7PDy5/O64MNmlJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:aa:f7:5b:0a:36:c9:f7:e2:4c:f2:13:03:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Mar 28 10:00:51 2026 GMT
Not After : Mar 29 10:00:51 2026 GMT
Subject: CN=ef3cee0678dc3e754b426dccf1c1450cb7c040c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:a8:72:ab:a5:bb:d4:ea:48:19:1d:55:13:
9d:08:95:04:f0:38:b4:19:91:88:49:da:17:bc:4d:
dd:75:87:79:67:47:88:d8:ff:48:22:1b:e8:24:57:
34:55:63:8e:ab:7e:d4:1e:86:a9:2d:33:18:84:f8:
f8:89:d7:15:9c:e7:04:44:b3:68:4b:94:51:c1:96:
5d:79:45:cd:49:92:33:27:25:30:6e:d5:2b:ee:5b:
7c:9d:c8:eb:c0:33:13:38:85:f1:0b:f8:61:0a:ad:
97:de:7f:a8:c9:74:a5:3a:b7:2d:5b:c5:10:11:fe:
d3:0b:17:21:09:71:34:b2:4f:9a:4c:03:d9:7a:51:
35:be:7b:c6:09:8b:45:89:9a:f8:88:d5:42:f2:88:
ae:e2:0f:8c:4a:ba:28:1b:35:83:14:f5:e2:bd:09:
cc:67:cc:25:38:d0:a9:c0:45:61:02:aa:f7:e8:09:
9d:6f:0a:f6:1d:23:6e:98:97:d6:8b:81:63:ec:08:
ce:8b:e9:13:8b:52:38:85:84:f0:74:40:1a:9c:f7:
cc:ee:d8:9d:8b:b2:15:f4:bf:f6:80:95:fc:37:c8:
55:8a:e4:08:b4:13:1b:b0:e3:09:12:e5:53:2f:ce:
dd:d8:7e:ed:24:03:12:fb:bd:97:32:c5:0e:2d:af:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:EE:06:78:DC:3E:75:4B:42:6D:CC:F1:C1:45:0C:B7:C0:40:C0
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:00:45:46:49:a0:92:2e:df:7a:08:fe:8f:cd:6f:e8:c5:
d5:cc:34:c0:fe:f6:7e:bb:96:bb:e0:3d:da:6d:2d:ce:c3:80:
d0:d0:ec:fa:22:fc:d1:ee:2b:ae:c6:e2:87:2d:a1:e1:00:00:
88:ab:c2:96:26:97:03:05:fc:78:1c:27:aa:e3:e2:42:86:ea:
76:4c:af:0f:17:84:ef:b0:16:05:10:dc:8b:a7:85:89:53:ce:
02:86:ea:b0:e9:e9:ff:09:f5:1d:cd:2d:80:c7:25:3e:33:ce:
3e:f0:cf:dc:3c:fe:26:cb:c1:49:d8:12:52:94:6b:90:29:67:
93:a7:6a:ff:0a:29:89:3b:8e:47:f7:10:a7:2a:6e:31:2e:30:
69:46:6d:1b:24:51:74:81:aa:ac:13:cf:bc:fe:37:c7:04:6d:
50:08:cd:cb:24:fb:28:b5:f4:05:a8:fc:2f:e2:05:6c:0e:89:
63:91:e3:b8:d8:5d:b1:3c:24:77:eb:54:ab:1c:19:d5:b6:43:
cc:68:5b:23:52:16:15:2f:c8:4b:34:01:4f:4e:57:16:a1:20:
73:aa:33:9f:1f:6e:ee:47:8a:82:f2:09:aa:fc:77:2e:1b:cf:
37:2f:f3:05:a5:41:f5:35:b3:4b:2d:2b:8d:ac:d1:0f:86:50:
ac:0f:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:14:06 2026 by rpki-client