Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: Q1qchIrKEq7gOWAmCW/W/bDhsgwptP8fTJRfFHPCyAM=
Subject key identifier: 42:C3:13:90:A1:51:1B:42:1D:57:EA:B4:49:0F:D4:CF:F5:94:E1:21
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 019D3940843D4C8AA2DEE36151A7F0B3AEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: AaoD9e1Rc9A7OLbVCIZcDp6j6JM.roa (hash: ytSdeQxHuy+yxjmnJ8gqjABXw5mRmre0ka6vBBpW/Mk=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: vLREzMFl5+MZhZWrvFLQynxflFCTMo6BdqD75yg4idw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:84:3d:4c:8a:a2:de:e3:61:51:a7:f0:b3:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=42c31390a1511b421d57eab4490fd4cff594e121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:4b:03:fd:ea:1a:17:d5:04:5c:e2:7f:e6:
08:a7:98:62:4f:08:d6:22:1d:07:7c:0d:8e:11:54:
50:9c:23:0b:39:5b:9a:b4:d4:12:da:15:9e:44:79:
e6:59:1b:c8:f7:9e:b4:b5:3d:78:2d:d0:5e:5a:79:
1a:30:f9:47:06:e2:08:3b:d0:cb:12:87:dc:45:4a:
5b:69:f5:c6:46:c0:10:1e:ee:47:40:57:31:56:f9:
32:68:3e:49:a9:57:5d:be:8b:06:a8:46:61:31:71:
63:5e:72:08:6d:f3:b8:d7:b7:71:19:b0:25:0a:cc:
67:fb:7a:6e:b9:b8:d0:fd:97:99:cc:e3:57:9a:bf:
e4:9d:53:58:6b:1c:43:ee:0f:9d:b2:16:8a:76:19:
7e:48:0c:e0:7c:05:4e:1e:5b:79:5d:d5:63:6f:eb:
84:9d:b8:1d:e3:07:56:3b:a0:43:33:18:1e:75:cf:
83:fe:e1:fc:08:2f:50:20:40:78:e7:37:98:8c:e0:
cb:f4:a9:97:93:a0:bd:3b:30:a9:8c:89:b6:54:ed:
a4:df:67:10:fb:35:ba:a9:59:b3:4c:ec:eb:33:41:
83:70:0e:f5:0f:0d:b3:48:2e:17:64:7d:aa:e9:e8:
24:7f:ef:07:f1:59:5e:7a:90:0c:8f:6c:79:df:05:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C3:13:90:A1:51:1B:42:1D:57:EA:B4:49:0F:D4:CF:F5:94:E1:21
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b4:78:e0:2e:b0:24:3e:61:48:36:2d:82:2e:eb:da:35:e1:
03:34:4e:50:8c:00:12:24:22:4c:63:9a:cd:ef:20:12:33:ab:
70:ad:f6:f2:96:18:c4:15:8e:43:38:1c:ff:be:1f:33:07:98:
56:b7:99:8f:1d:49:e9:fa:53:54:ce:92:e8:27:f3:2a:1e:a2:
cb:a0:c0:7d:d0:8c:60:96:f8:c5:51:cc:5e:da:ce:a5:db:f8:
ff:15:84:75:bf:43:2a:f2:b2:d3:c7:b9:de:7a:b7:ac:71:1b:
f7:f3:a8:37:a4:b8:66:74:b2:2f:93:71:97:94:5f:94:60:38:
b5:53:a3:94:df:e7:11:ef:c4:49:2e:2c:6a:95:71:ac:7e:3a:
d0:05:8c:15:10:96:ca:a7:e4:52:eb:f9:86:fb:36:a0:dc:e7:
8b:20:c0:99:45:6c:db:6c:e5:d0:23:e6:46:14:e5:c6:bb:de:
21:35:25:a2:e0:72:47:b3:a2:e4:40:a3:fb:63:d8:58:67:31:
a3:37:ce:39:f8:b9:14:54:63:4f:0e:60:b7:cf:bb:d3:e4:d9:
55:8b:6f:a5:10:21:0a:b8:f6:9d:68:58:80:60:f4:b5:35:88:
a0:98:32:ce:b8:d4:7a:63:49:f8:38:02:fe:d0:95:82:78:14:
c7:62:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:46 2026 by rpki-client