Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: AisyMn7kcCU4IoEX/yte464OQavsy7bwyuc0VrrjGRc=
Subject key identifier: BB:A8:F3:38:43:34:42:CF:98:B6:53:3A:88:D6:6B:45:62:93:85:F7
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 019D37C01D9AEB5D230D3D960CCDD48D6DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: 6-LYShGdtFu2Nyi-6m5NptYJBCw.roa (hash: pCChEGRh0lt/HCBsI0AnydKM37+rgJWloeeUpKn5NEc=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: P2ZIAjfd5IDAsZ3yeld9x+9az2e+qT+hKowkxL1Txoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1d:9a:eb:5d:23:0d:3d:96:0c:cd:d4:8d:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=bba8f338433442cf98b6533a88d66b45629385f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:7a:40:25:ff:95:55:e9:9d:59:b5:f4:66:
7d:35:e0:81:8c:a0:9e:28:00:74:90:4f:d0:51:f7:
2f:3c:4c:b3:f0:9a:4e:70:c2:91:01:37:b3:b0:79:
c9:58:fa:82:5a:24:cd:c0:4e:ad:42:6b:4b:8b:29:
7d:28:1a:87:c5:15:40:3d:aa:79:8a:05:85:50:80:
ce:ab:aa:43:89:52:37:83:23:c2:96:5c:5f:d7:b4:
53:71:5a:74:ac:7b:b9:b9:27:5f:b4:49:27:7d:75:
a2:f9:ab:1b:91:bd:5d:0f:b3:bd:06:0f:e1:18:0a:
42:97:05:29:61:98:3b:7e:02:13:3f:b4:8c:a1:6e:
cd:fe:2f:74:fd:5a:a0:bf:0c:1f:77:52:2d:29:95:
07:cb:7b:53:32:3a:fd:a8:74:d1:74:4f:79:1f:af:
ea:4c:24:03:26:ae:fa:b7:de:8c:9d:80:ae:82:04:
b3:09:6f:72:93:73:4c:83:4d:01:89:07:51:05:62:
9d:8f:ef:3a:5d:23:9a:e5:83:6a:1b:e0:f2:e4:03:
b1:2c:c7:17:d2:b3:f7:5d:d3:da:65:d2:2d:12:dd:
28:21:5d:d8:31:eb:91:de:0a:f6:f9:e7:01:d7:1c:
96:85:45:90:02:12:8f:9a:c0:44:2c:01:31:18:eb:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:F3:38:43:34:42:CF:98:B6:53:3A:88:D6:6B:45:62:93:85:F7
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a1:99:36:44:ab:18:67:6d:47:fe:36:17:79:94:52:24:96:
a5:37:d5:7c:55:a4:4f:c8:3b:0c:cf:c0:e3:26:6b:c5:d2:10:
ca:87:da:1a:92:3d:d2:33:f7:0f:bf:a1:f2:12:27:eb:c4:46:
b3:f5:30:f6:b4:20:fb:cd:d3:d1:04:71:4c:00:f2:0a:49:2a:
1a:f4:29:40:34:49:77:83:40:09:14:65:74:a7:5d:b9:ce:8d:
74:47:50:4d:c7:68:e2:d3:61:bf:39:5c:00:b5:c2:db:ba:74:
17:65:be:30:2d:36:c4:99:d0:02:fb:5d:74:d6:6c:06:5f:ed:
29:3a:d1:0f:e7:d0:0f:b2:af:c6:df:e7:de:88:59:ed:e1:49:
38:c5:51:4d:62:67:19:95:7f:c9:74:9e:7d:21:97:ee:7c:85:
26:40:7f:ab:6f:30:a9:7a:9c:25:96:44:24:89:27:ce:b4:5e:
74:9c:3b:6c:5d:83:97:70:8c:aa:62:db:91:a8:63:8f:69:aa:
f7:3f:41:98:21:fe:86:09:7c:94:ee:b5:15:12:84:88:8d:4d:
dc:76:83:a7:12:37:a6:18:ad:90:35:2a:68:32:34:63:7f:3d:
6b:3a:f8:75:31:a0:49:a3:84:68:a8:b2:fb:cb:48:4f:71:ce:
e0:3c:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:17 2026 by rpki-client