Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier: HSnN3/ns9aP9Z/Tf0Ady6+3zyTAHpqMhp0xhtyQcS1I=
Subject key identifier: B0:19:63:36:C1:84:E4:86:C7:56:18:F7:71:3A:C1:2C:6C:F8:49:42
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial: 019D375287D39EEB10C6C28A0046A6827651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number: 0CEE
Signing time: Sun 29 Mar 2026 02:00:48 +0000
Manifest this update: Sun 29 Mar 2026 02:00:48 +0000
Manifest next update: Mon 30 Mar 2026 02:00:48 +0000
Files and hashes: 1: _7mKcHkP3uOTS3kjipFm2tPGwgM.roa (hash: ngQx3yfqLseWqUcTbW2AyI+1iXtC1eJXGPQDz+lGjDw=)
2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: 5veYJLcVBv0ix62GsQas2ZpfRCaNYAHpr1bHRIk1gLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:87:d3:9e:eb:10:c6:c2:8a:00:46:a6:82:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Validity
Not Before: Mar 29 02:00:48 2026 GMT
Not After : Mar 30 02:00:48 2026 GMT
Subject: CN=b0196336c184e486c75618f7713ac12c6cf84942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:1d:41:36:10:d3:76:fa:78:32:01:c6:bf:
10:37:75:c3:3b:21:5d:66:e0:a2:55:d0:20:69:6f:
87:6f:50:a3:ed:e8:6a:f8:f5:a0:84:e4:be:64:6b:
51:59:e3:8b:1d:0b:98:d8:82:52:91:d4:aa:48:9d:
a9:cf:e0:e4:6a:28:6d:b3:d5:ef:23:af:ba:c2:ab:
61:a4:b3:5a:75:7e:b9:ee:88:93:75:45:81:1c:d4:
63:86:55:5a:cd:9c:9f:dc:dc:7a:e1:a7:11:bb:c8:
40:72:05:c1:18:ce:e4:f5:99:fc:75:98:3d:f3:34:
06:c4:c9:02:ab:07:b2:8f:58:c9:27:4e:d5:90:da:
ed:25:72:db:f3:59:1a:63:f7:1d:45:51:a2:12:78:
cd:73:25:75:40:9c:6f:62:0b:99:ac:e1:d1:77:62:
a4:fc:be:3e:a2:c0:0b:ea:33:37:55:1d:fd:f9:93:
ab:7f:e1:87:37:57:7c:35:17:5a:d6:3d:1c:42:7f:
27:dc:97:31:ba:9e:c4:4e:0b:9d:7e:7b:88:bf:57:
a8:3e:20:7b:9d:76:0e:3c:ed:00:48:8e:ae:7b:41:
f8:cc:15:34:f7:3a:3a:e3:c0:d8:aa:71:40:f1:17:
eb:c4:fc:6d:fc:77:c3:c2:5f:3a:df:c2:e0:04:ff:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:63:36:C1:84:E4:86:C7:56:18:F7:71:3A:C1:2C:6C:F8:49:42
X509v3 Authority Key Identifier:
keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ca:10:dd:0b:a8:cd:02:96:54:36:b8:f8:4d:38:d6:e0:89:
69:9e:30:20:93:7e:aa:0d:2e:d6:36:32:ed:9f:89:9c:bd:07:
39:0f:5a:8c:62:2d:d5:29:b4:73:7a:c7:d0:b7:87:67:9a:f2:
3e:3f:0e:d3:5e:86:0a:ef:09:b4:69:7a:af:e4:84:f2:83:4f:
0e:eb:59:3a:85:3b:06:d6:46:97:fb:52:21:18:13:67:ad:db:
d2:55:53:8a:cf:71:9b:b5:77:37:1e:fa:46:79:3a:86:c4:13:
07:d3:6e:63:94:7d:ed:f6:a7:da:29:8e:ba:9f:36:d7:44:bd:
83:28:bc:1d:29:94:b5:e2:8a:4d:27:8d:72:20:e2:9f:30:f1:
fa:9b:6b:a0:76:91:6e:4f:89:2f:9e:bc:65:c5:99:79:cc:c2:
2f:04:0d:b9:40:0a:25:e9:05:70:27:f0:18:2d:ca:9f:83:2f:
56:bb:58:b8:21:4b:3b:8e:8d:75:97:b6:d4:9f:50:1b:be:65:
d3:56:d2:a5:a7:4b:f1:9f:43:3a:fb:21:78:57:ff:67:b6:5e:
a3:3f:5e:2d:22:d9:15:bd:01:84:13:b2:b1:79:99:50:86:9f:
9f:13:e8:a3:3c:fc:b0:f9:0d:74:8e:1d:5a:be:71:f7:1a:34:
8f:7e:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:12 2026 by rpki-client