Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: Wlum7283zDJ/fREddmsx2HzGh3M7PSwvCjtuZmybyFw=
Subject key identifier: 17:62:5D:DB:9F:00:4C:6C:B0:A3:8F:37:60:25:54:87:10:DA:A5:51
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 019D389C649297810E8B132B53AE2B4F4BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: FC3W89E7lPxHMttdKdqwUZ8ayGo.roa (hash: P2wT7iaUIOeyGlWOhw0T1qRlFG0Wm2TszirFqNtZ4G8=)
2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: 3oz7Dzvwcs6zJW3eSAR1vClVvzxnJe0TUlH9/dSLrhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:64:92:97:81:0e:8b:13:2b:53:ae:2b:4f:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=17625ddb9f004c6cb0a38f376025548710daa551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:34:de:29:a5:60:90:2e:a3:59:2a:6a:05:
50:b2:1b:4f:8d:c9:f4:88:29:1c:fa:b9:71:93:ce:
16:5b:f9:e1:90:2f:1a:52:4e:15:ee:e8:b4:8e:e2:
51:c3:ef:b3:75:c4:f4:ca:79:88:4d:86:c1:a5:e8:
f6:b4:b3:45:80:34:08:ac:df:68:62:dc:b3:5c:67:
eb:e6:f4:76:ca:a3:7c:e8:34:1c:8f:c6:e7:fa:29:
74:8f:b5:78:39:03:7c:87:a9:be:44:9e:8c:a6:b8:
13:e8:4e:37:b5:90:7b:00:1c:da:d2:ea:d5:05:b2:
35:bf:60:2b:1a:67:68:3c:d3:ee:c8:42:59:1e:c1:
ac:f1:8f:88:dc:c6:35:7b:2c:29:0a:fa:d4:2f:9b:
62:86:e9:21:4e:cc:15:ab:a3:00:28:06:d3:1d:6e:
39:a2:04:7d:98:b7:88:db:0d:49:23:57:b9:0e:dd:
ea:e3:a4:52:2f:9a:4e:f5:4b:fc:04:6a:4a:0d:c8:
52:b0:f6:09:ec:e0:c8:32:70:ef:d2:48:93:dd:6c:
0a:2a:7d:c2:8d:d8:de:eb:df:ad:b5:fc:d2:56:d1:
18:ad:e2:68:75:98:c1:ac:88:1a:d6:a6:41:c7:93:
1c:65:4e:9f:48:9b:be:9c:de:92:93:51:68:c4:80:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:5D:DB:9F:00:4C:6C:B0:A3:8F:37:60:25:54:87:10:DA:A5:51
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:79:e6:29:cb:ac:d0:25:7c:8c:ef:1c:5f:04:7c:a9:45:ef:
2e:d3:f9:ea:c8:cb:7f:b1:9d:f1:60:4b:9c:b1:02:73:1a:e5:
4d:1a:5e:3f:d3:98:af:ff:69:d6:4b:76:13:1d:db:be:ce:fe:
0e:ab:bc:48:67:21:9a:bf:d9:46:1f:79:e0:4a:f7:0f:1a:d2:
7a:62:8d:98:82:25:ae:78:dd:43:37:3f:39:fb:dd:dd:d0:71:
5c:67:0d:d5:83:0f:d0:91:ec:7e:77:bd:fe:02:7a:ab:0d:a1:
2f:8e:d2:66:ef:1f:23:77:a0:7a:8e:ad:ea:89:15:1c:28:37:
17:3a:5b:93:57:47:0e:e7:86:97:7f:35:af:9f:24:8e:b9:e7:
53:a5:06:e8:48:ac:22:b3:ce:96:d1:f3:8d:34:f0:30:51:38:
4b:6e:2a:f4:ab:09:15:9e:57:94:b6:a0:aa:7a:f8:13:5f:7f:
13:61:ca:45:02:14:d2:4e:4a:0a:b6:f9:c8:8a:6a:c1:25:4a:
af:61:33:5a:83:0d:f4:9c:40:00:8b:e4:6c:fb:70:b5:72:2d:
20:05:69:86:27:c3:7f:05:cc:47:6f:95:4e:bc:42:7a:07:35:
81:e5:9f:8e:08:53:a8:61:a5:54:bd:44:23:ab:db:69:82:c9:
97:ea:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:26 2026 by rpki-client