Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: 1hDKre1hkjkjxzQgilfcsL7prCOzXrn6ZwP7iXDCNIM=
Subject key identifier: 8C:84:68:FA:52:84:0B:6B:91:B4:D9:9D:FC:71:C8:A1:77:D1:AD:98
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 019D2695FF286F60175360B71FDCAE5E08BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 0857
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: 42Ji29vqDAxpdndaWxEQMipFjyU.roa (hash: aVLNPW2DwaXPkiMoRdCmxUWjB3XXnvtot9VBLL1K0cY=)
2: ME6vRLxkNmOkJwq_oQkZ9OQRI14.roa (hash: ztigzmBI+Nqg3JYL/aEqwd3HX52y65/qJXje8DI37qo=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: 5dPKCtfriOMwnnLwtRCQqzTZ42ydhjlS3G7K9tYn39U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ff:28:6f:60:17:53:60:b7:1f:dc:ae:5e:08:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=8c8468fa52840b6b91b4d99dfc71c8a177d1ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:c1:5c:4c:00:54:7b:31:86:87:82:f1:1e:
a0:7d:c2:fa:be:00:e4:6f:3f:a7:63:93:62:f1:1e:
9a:c0:69:77:77:1c:e8:d1:73:e4:00:3f:b0:ae:73:
76:e1:e2:85:46:4d:e1:18:95:e8:be:06:6a:ea:54:
e9:4b:36:55:9a:1b:af:8f:c9:ff:02:c2:00:ea:a7:
77:60:09:bb:2e:5b:2a:b7:f3:a2:4a:16:86:6c:7b:
3f:5f:8d:87:e3:4b:65:61:24:6e:a1:24:db:13:fe:
44:51:f6:b3:8d:a3:8f:07:cb:f9:e3:9e:1f:bf:50:
ff:2e:82:2d:8f:a1:76:94:36:2e:83:7d:2a:ef:e6:
a5:12:c0:b9:cb:c4:12:05:41:e6:f4:80:21:67:46:
73:a6:ea:79:c7:a4:af:ff:98:d8:bd:33:4f:a2:0e:
65:06:2d:01:f6:2d:72:6f:3a:06:fe:79:0e:d1:de:
aa:2c:0e:c1:17:6f:0d:a1:f3:75:3d:3a:27:f5:d9:
cb:e9:9e:66:c7:45:2a:6f:80:ad:91:03:ab:61:02:
29:fa:f7:f1:e2:29:9a:c3:ac:3d:21:22:4f:36:5e:
de:54:2d:7f:a6:30:cd:75:41:93:a0:13:74:02:bb:
81:e6:f8:e7:00:31:74:57:c5:c2:ca:4e:fd:3c:53:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:68:FA:52:84:0B:6B:91:B4:D9:9D:FC:71:C8:A1:77:D1:AD:98
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:47:c3:eb:29:64:f4:35:69:34:ec:ee:93:06:67:4d:d0:6f:
af:03:0a:52:09:b6:50:7a:45:fd:24:a0:91:d0:59:97:b7:e2:
92:53:7b:38:e1:c2:08:f7:0c:13:6d:c2:ea:63:c2:c3:94:ca:
e8:56:2d:fb:c4:81:a0:1e:32:fe:53:65:77:27:ff:bf:8d:5e:
d5:7a:56:b7:fa:bb:c1:70:ec:1e:62:f4:3b:b3:ba:49:5f:8e:
ab:77:9e:1a:f9:3c:5e:5a:67:1a:4c:0c:80:dd:89:1b:ef:15:
48:21:59:54:ab:de:5b:08:35:43:f2:03:51:7e:c9:81:6b:ed:
e5:a7:51:b8:d6:18:44:ab:e9:a4:4c:84:20:b5:82:52:f5:bb:
7e:15:fd:29:d8:5f:6f:c4:7b:1a:cc:bb:8a:7b:dd:fe:b8:88:
60:78:5d:1a:28:2b:16:a2:b4:d7:69:c2:73:61:00:f6:a2:29:
82:1c:c4:e7:7d:a6:26:a0:c8:b3:7a:00:24:42:ee:19:f0:b5:
d6:2e:41:65:96:e4:c1:eb:73:6c:4c:45:09:9c:50:16:70:0a:
b5:54:37:fb:01:fb:aa:a8:a1:c4:49:a4:cb:ab:b3:e5:5f:34:
34:de:63:59:f6:b8:7a:4a:09:0a:3c:8b:f1:85:da:49:e8:82:
3c:b1:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:43:11 2026 by rpki-client