Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
File: Wva8LaPCxkKxSuEpwb__JnhS1vw.mft (raw, json)
Hash identifier: vWXazLS4GlSQBE5NukYZBzNFerFRLwgjpbqxoeKFD+8=
Subject key identifier: 08:8E:77:AF:3E:29:CC:D8:DE:F0:CE:AE:F7:E7:F4:AE:00:F0:3E:2A
Authority key identifier: 5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC
Certificate issuer: /CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc
Certificate serial: 019D37C0631AE5F33A7CB6C0610F5EF7D070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
Manifest number: 02B4
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: K4OipTcwUR5GHe48dIx0uYunkgU.roa (hash: 4X8maR7BlRFLa0y2Jq93U8WPeZASLwROy9eW+4OpHmY=)
2: Wva8LaPCxkKxSuEpwb__JnhS1vw.crl (hash: Z4zd/2RaaKmFVnYcmtXLm6oStNq3GYHQxFZTQVen070=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:63:1a:e5:f3:3a:7c:b6:c0:61:0f:5e:f7:d0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=088e77af3e29ccd8def0ceaef7e7f4ae00f03e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:7c:3d:f7:97:40:b1:ce:9f:32:d3:f5:28:
89:74:c9:8e:74:5d:f8:06:bd:03:07:8d:51:ad:56:
e0:92:ca:bb:96:ee:29:35:fd:be:f0:96:e2:27:55:
e5:43:13:2f:67:30:2e:3c:da:f4:a8:e0:ed:b9:a5:
da:75:91:84:96:c9:73:2b:ee:2d:00:e6:52:82:24:
46:7f:66:5d:c3:35:3b:a5:64:60:b3:41:ca:d7:34:
e3:b5:40:0a:dd:1f:41:4a:a9:f5:72:ed:00:dd:fe:
9d:40:d6:14:5e:9f:22:da:72:29:be:90:dc:c5:26:
e6:8a:25:a0:77:cb:e5:94:32:3d:d1:60:b0:6d:d3:
4b:27:98:76:1d:d2:57:09:28:66:89:02:02:7f:26:
66:f1:dc:44:33:ac:ef:a4:e8:f5:ef:6f:f3:da:bb:
f2:0c:3b:29:0b:56:59:e1:e0:3b:fb:80:7e:31:a0:
8a:68:a0:ff:15:3c:8c:a2:2d:a5:a6:bc:12:7b:8f:
21:4b:fe:b6:ff:15:c0:49:e3:26:f5:8d:01:f3:c8:
6c:5e:b8:28:d7:81:81:d3:47:d8:de:5d:63:ee:2f:
d3:5a:f5:5d:5e:81:f6:bd:18:a0:91:99:78:5d:b2:
22:89:cf:b1:81:96:04:86:61:c0:84:39:00:d7:da:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:77:AF:3E:29:CC:D8:DE:F0:CE:AE:F7:E7:F4:AE:00:F0:3E:2A
X509v3 Authority Key Identifier:
keyid:5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:03:a3:08:08:4e:0a:2f:73:68:fd:0c:18:f4:ac:a3:81:ee:
c4:9f:72:08:b0:25:b5:5b:b2:26:d4:ec:6d:a8:64:60:c2:a6:
67:e2:33:1c:88:d5:c8:b8:d8:a4:9f:02:75:59:6f:e6:f4:38:
ac:7f:43:30:f5:64:52:0b:61:7f:02:4f:90:dd:b1:95:c9:5b:
37:22:e5:4f:57:f6:ed:1b:8c:93:15:e8:e5:0b:27:c3:4e:00:
15:44:65:1f:40:8e:64:71:b3:9d:53:10:f5:e3:70:2d:4d:8f:
74:e8:e8:8e:eb:69:86:5b:f9:70:1d:5c:0e:b0:63:17:51:73:
aa:02:60:dd:ec:fa:b3:a8:4c:97:b5:43:dd:c3:7b:79:ce:c9:
0f:9a:86:cb:6f:51:86:29:67:db:11:cc:5c:05:15:05:21:c4:
8a:56:73:08:b7:f2:9a:72:ec:9c:fd:56:24:1c:c5:e5:b3:9f:
fc:b6:4e:25:c3:00:13:42:ec:e2:6f:77:29:75:c1:95:eb:42:
5c:3b:18:bf:f9:33:39:d4:a6:c1:55:ef:a4:48:73:97:39:1b:
0f:0d:7f:af:46:8a:a9:c3:c4:5f:50:f0:91:fe:2f:ee:22:97:
64:db:cf:ec:16:3d:39:5e:b7:91:49:53:9c:05:0d:f5:53:84:
d9:89:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:56 2026 by rpki-client