Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
File: WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft (raw, json)
Hash identifier: KOVyRJScSGWJEgTzbnHVckCfxE5RB2tV7hsJjgXjmso=
Subject key identifier: A2:D8:F5:AF:3A:D9:7F:A5:B0:4F:43:D2:E6:58:B5:DA:27:31:0E:1E
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Certificate issuer: /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial: 019D3909D770F7742CE60F1BE0520A37B090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: 1jX8vpWuzH003x-Qpi8XxrbKqjw.roa (hash: fIBfbZN1KJlMbAU4QQDCO0WxA1fKbyJMB6d4i6/8a0c=)
2: WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl (hash: 2G12xOyiS358pZGKdJYyaFxLe/kJ9t8pjMNr6AHCJSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d7:70:f7:74:2c:e6:0f:1b:e0:52:0a:37:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=a2d8f5af3ad97fa5b04f43d2e658b5da27310e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:ed:53:c3:3a:c3:ab:e5:ae:fd:1c:0b:d4:
96:fa:b4:8f:17:7c:35:ba:7f:4f:30:fb:b5:13:79:
d9:01:ee:fe:d6:da:7a:82:f5:73:d9:3e:73:27:7d:
8d:2c:8f:95:a2:88:bd:27:9a:c7:1b:b1:16:56:4f:
4f:35:65:69:c8:6b:27:55:7c:92:0c:80:4a:63:e8:
6f:08:78:87:58:76:44:ab:bd:ed:46:7c:e2:24:f4:
5c:29:86:34:4c:ff:76:62:94:46:18:a9:d8:01:10:
f1:06:05:c9:5c:aa:4b:fa:1d:59:d0:29:2b:31:ba:
12:3f:2a:e8:b1:47:ca:99:34:0b:8c:ad:df:5e:9e:
fe:91:f0:16:e2:ef:bb:8b:3c:ef:0f:fa:90:79:20:
97:22:6f:2a:57:bf:c6:ae:54:b9:e9:e4:84:86:1b:
eb:e3:01:18:67:bc:a4:7d:1a:09:1c:44:ea:68:75:
8a:f7:f5:d4:eb:94:86:38:0d:0c:2b:bf:ea:c7:de:
c4:c9:9a:5b:94:d0:51:e8:33:8d:84:89:35:ce:eb:
aa:66:32:0f:37:34:b8:b5:23:4f:07:19:93:e5:85:
b9:c2:3c:7b:1f:e9:ee:41:0a:0f:e4:d6:10:85:af:
e1:b1:37:6d:ec:96:70:5c:56:90:98:45:4e:71:b2:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D8:F5:AF:3A:D9:7F:A5:B0:4F:43:D2:E6:58:B5:DA:27:31:0E:1E
X509v3 Authority Key Identifier:
keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b5:14:9c:46:b7:1d:91:6a:e8:a6:63:9d:db:5f:77:0c:4e:
05:66:0e:f8:1a:00:26:8c:ca:65:19:7f:d3:cb:3a:97:0b:9f:
be:6a:f4:6a:2f:34:8a:20:ff:dc:ec:aa:a2:c6:4d:61:e9:83:
9e:de:dc:8c:f2:e1:50:91:2d:08:b9:6c:c5:82:b6:f2:5e:d8:
8d:af:f7:47:7b:fb:a2:f2:f4:eb:75:09:24:ac:03:31:50:ab:
be:50:78:c3:74:53:2a:18:89:95:d1:08:56:2f:a5:16:0c:99:
dd:c2:d9:e8:fc:af:bc:8d:61:78:1b:d5:9c:6e:bd:3e:a4:a5:
8f:81:1e:3b:14:d0:fd:77:68:43:80:ac:f0:24:2d:d3:ed:ee:
54:a6:4b:52:34:f0:2c:c1:08:ac:0a:e5:0a:63:b6:cb:66:7a:
8b:a1:76:ca:ef:c3:ba:73:dd:e3:7d:c8:d0:df:e8:6d:6e:20:
3c:7d:ae:41:c1:54:46:43:22:f4:fb:45:d0:84:5f:1d:97:35:
d9:ff:01:74:84:be:e8:e2:63:da:49:c9:13:36:44:59:39:28:
03:8b:1e:81:97:42:f0:86:7c:d5:f1:d2:81:6d:6a:4c:66:cf:
95:c3:69:70:19:14:a3:f8:d7:1b:99:82:7b:46:e0:41:89:f1:
81:ed:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:12 2026 by rpki-client