Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File: wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier: fxyhUE4mAcnB3eVxZtGFibPZy32dG+JkMwFB/P8OHvY=
Subject key identifier: 68:09:12:DE:A0:B5:3A:25:95:7E:3B:04:A1:BB:07:11:68:BF:4C:79
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer: /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial: 019D38D31D9022D188981C4108BF8BA2FCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number: 076D
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: J4rL1Jg5V2IoUUTVBjeovLJnAeI.roa (hash: HuC3dI4gjcfntzO7yeVJHjKTBqW9v5vPfeXmEq56k1k=)
2: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: MLAfvcQZ6qNNV8BkMQtOuHgnYxur216m0NRud96p2Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1d:90:22:d1:88:98:1c:41:08:bf:8b:a2:fc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=680912dea0b53a25957e3b04a1bb071168bf4c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:2a:de:81:84:52:09:72:d4:9f:03:ca:5e:
d1:b9:5c:ff:ee:90:8c:7e:d5:17:29:9b:32:d5:6b:
ee:23:2b:40:75:96:98:2c:df:1b:b4:16:56:45:09:
88:57:a6:e0:fd:65:bd:fe:9a:e9:4b:63:80:9c:4e:
60:39:ca:6f:1e:bf:35:e6:41:11:d8:be:2b:0c:2e:
a7:d2:eb:0a:f5:c9:d2:14:b8:cd:6b:95:18:c2:bc:
50:91:34:13:01:3b:4f:9f:93:3e:30:08:49:7a:11:
dd:ec:f5:da:8e:3c:cd:c7:30:e6:62:0e:23:37:ef:
71:ba:ce:8a:9a:af:94:51:27:f0:57:74:01:e7:40:
73:69:ec:db:e2:4d:e5:d4:7a:f4:11:b2:ee:2b:4a:
bb:69:97:54:fb:22:0b:9e:09:c1:fa:9f:79:80:9b:
b9:26:20:df:6d:fa:f1:18:c6:31:96:52:65:88:12:
76:21:e4:9c:15:35:cd:78:0d:57:65:74:7f:ce:3d:
39:0a:36:d6:81:94:7b:6c:4e:a7:2f:b2:bc:00:9f:
61:fb:e5:a1:40:df:ea:5b:3b:c3:11:24:f3:e3:65:
ec:00:62:8d:34:63:f7:2b:d8:75:50:e6:77:33:08:
c3:26:1c:c3:64:a2:6d:ed:04:aa:4e:e6:46:bb:88:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:12:DE:A0:B5:3A:25:95:7E:3B:04:A1:BB:07:11:68:BF:4C:79
X509v3 Authority Key Identifier:
keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:d2:70:f1:94:f5:15:c1:59:84:0f:55:7e:75:0d:0d:b1:
a3:42:57:a9:4d:74:d0:5c:3f:62:de:b9:98:77:1d:2b:e5:46:
5e:de:44:06:f1:51:62:9a:8a:03:ed:05:32:38:46:d6:52:1e:
12:f1:3e:35:bf:e1:ab:cb:30:aa:7a:ed:25:1d:66:2b:83:62:
9f:d5:5a:a0:05:5c:8e:ef:e1:80:52:b6:52:7a:8d:37:dd:24:
5b:91:79:89:60:ae:0b:5c:d3:5a:54:7d:96:57:fd:73:f2:72:
54:05:1a:9f:95:ae:b1:65:f3:8e:60:d6:6e:a7:27:dc:04:33:
c2:a0:5d:b1:65:00:1b:4d:bd:bd:33:d6:b0:19:9a:15:c9:1d:
7a:59:30:9d:5d:64:2c:a3:94:5f:8c:14:1e:c2:a7:4d:55:35:
72:d1:a3:07:13:b4:23:a5:c5:dc:d5:f7:a4:f5:d0:ee:44:a9:
21:2c:6c:11:68:17:8e:99:52:3f:91:ed:49:c8:4e:cc:f8:c0:
9d:a1:85:55:be:47:8b:35:89:4a:b4:80:4f:06:7a:ab:fb:23:
b2:cf:87:ce:69:00:b1:6c:c0:01:60:2e:c5:21:d1:f6:dd:0c:
6d:3a:b9:0e:2d:13:92:76:f9:84:94:fe:c6:17:3a:71:17:56:
8d:04:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:30 2026 by rpki-client