Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: +gXdSvtl3ifIdCsaQhK/EEJyY2yvkH2b0M2VLWKORPY=
Subject key identifier: C4:F9:12:8A:4D:B4:B2:5A:31:04:7E:B0:20:C0:76:A9:7F:A2:98:33
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 019D3865B61EA66A8D1849BAEB21585FE8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: fN2gWsOqKCC84REk4m4H4o2d1hsvilU/ea68uA1kiFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b6:1e:a6:6a:8d:18:49:ba:eb:21:58:5f:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=c4f9128a4db4b25a31047eb020c076a97fa29833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:31:40:1a:fc:a8:f5:34:df:ca:1d:a0:ca:
e6:a6:58:bb:28:30:1f:d1:3c:78:36:ea:da:69:c9:
2c:36:b0:65:83:e7:95:7c:f7:99:79:39:01:d8:cd:
d6:e8:e0:78:a7:e7:2f:03:eb:a9:d0:ec:4c:57:14:
f4:af:4b:5a:f2:be:36:07:bc:b2:e2:42:14:41:7c:
0d:93:d2:83:4a:1f:47:2c:21:80:a5:ee:66:be:b8:
b4:5b:0b:e4:47:06:b6:d5:52:ba:31:66:56:f1:b8:
75:71:d2:f2:e0:3a:aa:92:8b:7d:be:ce:87:55:21:
c4:a7:35:4e:02:27:8b:47:de:6e:9d:4b:48:db:83:
a5:0a:b0:ff:51:27:77:37:45:0a:0e:16:81:89:1a:
43:c5:bb:31:3b:53:82:76:6d:4f:c1:07:5c:fb:61:
7e:8e:82:85:4b:44:c0:b8:4b:a8:65:a1:7a:dd:fe:
52:67:90:5a:66:42:91:69:be:8b:65:f7:b2:9a:d7:
b0:08:68:e4:7b:f3:31:be:9e:60:e3:bb:46:eb:ec:
4f:a8:ba:04:2c:60:99:d2:96:d9:b8:a0:95:8f:79:
9c:0f:ae:ee:53:f4:27:06:2f:5a:84:71:f9:37:8f:
3c:55:9b:8f:c1:2e:a7:19:92:1b:3d:8e:2a:09:b3:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:12:8A:4D:B4:B2:5A:31:04:7E:B0:20:C0:76:A9:7F:A2:98:33
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1b:ba:7d:fa:3f:9e:6a:b6:3b:bd:17:66:50:66:a0:f7:13:
1b:53:1d:41:80:75:2f:56:3a:f4:73:f2:a0:7d:b0:df:82:88:
df:72:4f:93:32:01:ee:84:ad:78:e2:9d:f0:3b:e0:d3:68:ab:
20:43:9a:b8:47:b1:6b:b6:08:aa:fa:c6:f8:7f:6a:fb:68:21:
db:35:bc:70:5a:6e:7a:66:87:36:3f:37:57:82:69:9d:50:ea:
6a:bc:2f:88:bd:76:aa:16:46:9e:be:2c:c9:22:12:45:d4:a2:
4e:73:07:cb:00:07:79:f0:c4:29:cd:f2:4e:9a:20:65:c3:d8:
55:09:b7:54:ff:15:4b:89:3e:a6:85:0e:e3:96:f3:5d:15:ff:
50:88:6d:c8:11:78:59:44:d1:58:b8:af:09:a0:fb:40:b5:d2:
29:31:68:79:a9:b3:bb:5b:e4:e6:28:6e:3f:52:2e:6d:56:f9:
62:ec:66:bf:84:b0:70:c2:6f:14:2c:28:bb:f3:f3:f3:3f:a0:
b3:df:9a:77:8d:08:44:34:96:62:74:31:99:94:88:37:da:26:
26:6f:14:d1:31:e6:52:8c:50:96:80:11:43:94:f7:dc:ad:69:
d9:c5:8a:e5:b2:b9:7b:0e:fc:12:bf:94:d3:2d:8d:57:aa:4d:
6b:99:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:45 2026 by rpki-client