Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File: Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier: afU9wm+KOvYnAaLNuzEcNhxYkeL40sYIxBr2hxLUBPA=
Subject key identifier: C7:0D:E9:80:33:13:36:63:D3:ED:F1:47:47:4F:0C:80:54:58:95:51
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer: /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial: 019D38D2D19ED15FBE2C815A0AFE000E1214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number: 0654
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: J37URkCTs05jiz-Rj5fYxPu7CXc.roa (hash: jYLrc7tKRBPyUDOWTkYxDyN6WhDwfRNStduazvGrF2M=)
2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: Qkbot4uXBrxqFeGX/j5foMYYBmgoGX8HbJDwr2jElkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d1:9e:d1:5f:be:2c:81:5a:0a:fe:00:0e:12:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=c70de98033133663d3edf147474f0c8054589551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:41:7c:3d:a9:66:2c:01:3e:5d:3b:63:97:
14:85:95:d3:32:1f:6b:7b:91:e2:80:a1:ac:9f:7d:
c9:49:03:a5:3b:26:6b:af:de:df:e7:1b:3d:0e:32:
3d:77:c8:a7:b4:6e:33:85:e2:b8:e1:b6:cd:7c:1c:
eb:99:ce:f3:76:43:5c:49:3c:9d:69:84:e9:71:e8:
2d:1d:e9:6c:d9:f8:9e:49:03:50:6b:32:d4:80:8b:
c5:80:5a:a7:b6:a7:55:d7:eb:3b:f8:fe:d8:78:4b:
ac:3a:fa:19:34:25:b6:37:88:6d:23:8b:1f:af:5e:
27:c0:18:e1:64:7f:6f:9c:f5:48:d1:63:e3:e3:61:
81:c2:5e:04:f5:a0:c3:a0:e4:90:16:4b:a0:0b:4e:
6e:24:22:ea:cb:aa:61:94:1a:23:08:ad:5f:54:50:
d2:27:be:ad:96:0e:c1:28:9d:18:52:f8:40:38:bc:
72:cd:07:41:9e:4d:f5:19:54:59:17:d2:b4:39:ec:
f1:07:c9:9f:2a:0a:be:a5:87:64:9f:a0:49:e5:dd:
03:c4:76:a6:46:30:f5:2c:7d:48:e2:1a:9b:d6:f9:
09:5d:0d:a5:6f:30:04:39:b5:6e:eb:08:39:fa:9d:
93:13:a6:75:47:2b:85:05:09:b2:c6:74:e5:34:af:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:E9:80:33:13:36:63:D3:ED:F1:47:47:4F:0C:80:54:58:95:51
X509v3 Authority Key Identifier:
keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:83:81:77:93:c4:21:aa:81:c7:77:af:71:c2:2e:de:63:1c:
2c:3f:ff:fb:d5:d4:12:d8:31:fd:e9:e2:1b:66:c3:79:25:41:
4d:44:1f:7e:18:8e:66:77:ae:4a:bd:34:f2:f4:5f:9c:52:2c:
2c:d6:e3:ef:50:71:a7:0a:9f:dc:5a:9e:01:42:34:a0:48:af:
60:c3:00:1e:1e:1a:ca:c3:a4:6a:e8:e3:b3:fd:2b:a6:ef:79:
92:3b:c6:7f:2b:1f:54:d1:a0:2f:f3:c9:34:43:2d:1a:7b:c9:
c0:55:76:0d:b1:a8:e5:c0:f8:29:b9:e6:f5:ce:04:a4:66:26:
df:bc:82:e2:d6:93:b6:8c:01:c1:e7:4f:38:cb:49:8d:cf:68:
98:3c:22:bb:e8:41:1d:20:10:f5:49:a7:e1:90:da:65:a6:4c:
7a:fb:a8:9e:d7:62:e0:05:43:7e:e0:d2:0c:92:48:d2:35:26:
5b:cf:72:8e:1c:6d:67:b3:27:77:a6:94:b5:61:cd:94:6e:4d:
ac:6f:c4:0e:0c:bb:39:56:8d:8d:6f:7e:33:34:53:50:b5:9f:
6a:68:e2:6c:11:ca:af:6f:72:9f:0b:d0:36:59:02:9f:48:4f:
f0:6e:ce:a8:d0:b6:66:6a:25:6e:ad:bb:47:84:7e:e9:dd:4c:
45:24:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:42 2026 by rpki-client