Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier: QtBy7+qYrWSWu6FUW2E0ZlchwGIt3PMT2vYEZBeKclo=
Subject key identifier: 86:57:F8:43:00:53:34:40:34:B2:78:BB:C4:56:25:CA:55:56:11:9E
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial: 019D39E5E1B25C79F780D65FFCD7F84E2AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number: 0D53
Signing time: Sun 29 Mar 2026 14:00:59 +0000
Manifest this update: Sun 29 Mar 2026 14:00:59 +0000
Manifest next update: Mon 30 Mar 2026 14:00:59 +0000
Files and hashes: 1: 6mjN2cFeWfG3wVcYw8P1dVWShro.roa (hash: oi7Y1F+Y4ggk+eXgRwxuyy3TiFb/d2QmgXSyELcF0f8=)
2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: QYfCIHhazCDvHztUAx/MQISq/J7ZQmZa+aU3d99LSPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e1:b2:5c:79:f7:80:d6:5f:fc:d7:f8:4e:2a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Validity
Not Before: Mar 29 14:00:59 2026 GMT
Not After : Mar 30 14:00:59 2026 GMT
Subject: CN=8657f8430053344034b278bbc45625ca5556119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:1b:1b:40:12:37:30:f9:af:73:3e:8b:2f:
79:b9:ec:3e:5d:10:42:68:c2:10:cf:58:2f:56:a5:
08:09:71:a6:d9:20:8a:36:51:58:d4:43:b2:c6:eb:
0d:c1:26:e8:17:20:74:bb:8d:51:5b:0c:91:0a:15:
3d:e5:18:e5:7c:0a:9d:2f:c6:2b:49:66:7d:b1:2a:
75:61:35:3b:f6:4b:c3:c5:8e:95:7e:3a:e9:32:d3:
7d:5f:bd:c1:2f:3f:3b:50:7e:d2:e7:c0:b0:ac:b9:
7b:42:32:0b:fc:93:37:ff:26:10:06:6d:c8:ac:ed:
8c:bc:1f:41:f9:c5:b9:3e:68:19:1b:15:74:2e:f4:
18:0e:a5:91:59:05:66:16:fa:af:17:a9:bd:7b:73:
07:eb:48:99:78:d7:ec:ad:17:6f:b7:4c:b7:94:81:
73:98:0d:4e:b0:3a:58:80:ad:32:f6:ea:ad:a5:2c:
51:83:a9:49:fb:4e:d7:04:4e:b3:e5:57:91:ac:74:
d8:05:3b:36:8a:c2:ce:72:00:4a:63:8f:2b:0d:2a:
b3:17:a9:28:86:00:fb:19:68:b4:bb:e5:65:6f:3e:
c1:8d:4b:1f:70:66:e8:07:96:68:5e:50:d9:bc:79:
c8:53:dc:59:9c:4b:8e:e3:a1:b7:36:83:28:85:0c:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:57:F8:43:00:53:34:40:34:B2:78:BB:C4:56:25:CA:55:56:11:9E
X509v3 Authority Key Identifier:
keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:b0:1e:af:a6:72:24:e2:6d:07:fa:40:95:51:5e:18:db:02:
dc:1f:69:7f:9c:b1:cf:49:fb:78:17:52:d5:69:be:29:2e:fb:
9a:09:46:1f:4c:f1:b5:e5:3d:26:ac:b7:5d:c8:0d:a7:42:ea:
9e:07:a3:29:39:a1:f0:12:08:e7:ea:6f:53:3a:af:04:f8:50:
c8:0f:5e:32:c8:f3:e7:ed:a7:18:85:8d:5b:84:df:6d:a1:be:
76:dd:1b:d8:bb:d8:c3:bc:7a:01:24:33:b9:12:11:16:23:5f:
61:f5:3f:a1:70:8a:c9:36:e6:fd:95:b2:7b:37:b8:5d:19:21:
88:09:53:85:71:61:57:75:42:a1:b3:16:9d:31:29:f1:80:0b:
e6:fe:8f:82:d0:33:00:00:26:8d:a5:5a:b5:2e:82:80:00:fd:
71:d7:7b:d9:2b:ca:e8:95:40:36:b3:3e:1a:8c:fc:87:de:31:
f1:f4:91:0a:8b:b2:a1:3a:fb:ad:0a:6b:7c:f2:a7:78:ad:37:
29:c3:91:a9:fa:d0:fc:59:74:df:1b:68:bb:ae:1e:be:4a:c0:
f3:d2:4d:03:2c:66:02:fd:f5:19:cb:a2:2b:2c:f7:48:94:36:
06:5d:86:c2:0c:c4:ed:87:41:ad:ee:08:5a:c5:de:d5:ee:ff:
0f:b7:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:56 2026 by rpki-client