Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: hBk0wYLR0kYvVfhnx9rccyZPWc8MWhXvvpRsRy9DPOs=
Subject key identifier: 5F:F6:BA:52:2A:F7:C6:AD:66:B0:95:80:9A:DA:BB:10:0A:73:3F:EC
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019CE6A443AC2F7BB76B411DCA7E637FBBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 186B
Signing time: Fri 13 Mar 2026 10:00:50 +0000
Manifest this update: Fri 13 Mar 2026 10:00:50 +0000
Manifest next update: Sat 14 Mar 2026 10:00:50 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: pGo++XRE9RsuQwGMBe3zZKK2in1shx8f9pZj1nDod+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:43:ac:2f:7b:b7:6b:41:1d:ca:7e:63:7f:bb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Mar 13 10:00:50 2026 GMT
Not After : Mar 14 10:00:50 2026 GMT
Subject: CN=5ff6ba522af7c6ad66b095809adabb100a733fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:40:1d:a4:43:33:e8:36:3c:3f:01:51:bc:
4e:4b:94:7a:a7:bd:33:8f:eb:de:e9:56:65:96:4e:
6f:c7:bf:e0:24:52:c5:28:b6:4f:3e:d4:1d:30:7b:
56:bf:64:53:57:4c:f4:f5:03:eb:71:49:61:63:30:
b1:bd:4a:75:d6:ba:0e:70:7b:00:d2:2b:2a:09:aa:
e1:b1:70:2f:e5:7f:87:1f:61:e6:fb:c2:92:94:c6:
25:29:7f:1a:cf:79:7a:5d:c9:5d:a1:33:80:56:e2:
bf:ec:d3:cc:78:ed:85:0c:9d:56:53:15:f4:3f:0e:
2e:8c:99:7b:65:f0:ce:eb:e5:3b:cc:c6:3f:22:66:
fa:e4:67:98:10:2c:e1:86:d6:58:a6:5a:ca:d2:20:
1e:b4:d7:b4:b2:f0:25:e3:02:ef:89:a3:e1:77:2b:
76:b6:d7:af:ce:37:bc:2e:09:34:77:6c:1d:fe:93:
41:99:17:e2:d8:d3:dc:07:49:33:ed:e2:f1:d7:2d:
9d:03:41:a3:ae:54:88:d0:17:75:51:ce:80:c9:19:
fe:d2:79:d6:f2:61:61:37:65:ba:43:7b:db:34:2f:
d3:60:63:45:7a:db:b1:a4:1b:7d:73:04:61:ad:21:
a8:e9:ed:b6:f5:11:a9:e7:6e:b7:98:0f:2d:34:54:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:BA:52:2A:F7:C6:AD:66:B0:95:80:9A:DA:BB:10:0A:73:3F:EC
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8b:3b:1d:37:34:da:03:be:23:ce:ff:54:b3:6f:04:8b:df:
3d:20:53:8b:bb:a5:be:73:fb:7b:42:7e:be:6d:cc:cf:b9:c3:
a3:e0:d4:a7:fe:a0:b0:98:5c:f6:74:84:9c:1d:ec:07:7f:54:
8d:02:9b:c5:d5:23:d1:f6:45:03:99:31:08:40:a6:94:ad:57:
67:2a:27:b0:34:82:f9:79:79:74:e2:c0:6f:09:5b:48:3e:b4:
dc:15:c4:f9:40:63:64:a7:0d:7b:fc:60:a7:4b:0d:4d:a5:16:
02:d6:56:7d:86:fd:80:44:b8:c5:77:df:1e:c9:23:74:50:be:
a8:88:50:91:74:b8:2f:9d:75:be:47:6b:42:0d:af:5a:ed:2c:
81:9e:82:73:1b:13:99:f9:d1:09:74:7d:cc:50:7e:35:bf:5c:
eb:60:83:e1:9d:22:3a:8b:5d:09:c9:5a:64:ad:f7:4e:1e:71:
c8:3b:b4:13:25:fd:50:a7:7d:3d:d6:f5:5c:92:5e:10:0b:3f:
15:ce:44:b6:04:aa:0d:5e:1b:83:59:5d:e2:a1:25:42:e2:06:
f7:1e:f6:ba:81:7e:e4:2f:96:9a:82:0f:d4:ff:3f:b5:33:88:
73:b3:f8:27:3e:3a:d4:a5:6e:f2:bd:4b:d0:e3:35:8d:ce:59:
38:06:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:14:01 2026 by rpki-client