Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: jgOZgfMn8ZnkoTgRH4zSJkznf7ZrYyg0kLHjnxd37/M=
Subject key identifier: 45:9A:4A:38:90:65:AD:66:81:6F:16:40:5F:B4:BB:88:6D:DC:35:B6
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019D3789949A2ADD883810763F80B6B8D2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: oRSdAKe2YdIrFVEJjvBnpmMcs+l0n/BBonzNLjNnbRI=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:94:9a:2a:dd:88:38:10:76:3f:80:b6:b8:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=459a4a389065ad66816f16405fb4bb886ddc35b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:5d:f8:dc:37:32:24:78:7b:1a:ed:b6:8f:
21:5a:64:5b:5d:4b:fc:f1:37:fa:20:13:d1:7e:c4:
74:d7:33:36:7f:9f:1b:43:fb:ff:99:9f:0b:a0:67:
74:73:58:30:2a:99:e1:af:7d:41:7f:ac:3a:5e:4e:
e4:40:53:a3:6f:8f:33:fa:17:22:c1:4d:13:01:57:
c7:80:b6:f6:44:df:b1:b8:3c:7f:83:1d:4f:40:5d:
28:90:b4:17:ce:3e:ad:75:c6:8c:fb:a1:78:cb:f8:
40:b9:8a:25:7d:eb:6d:68:eb:9d:55:ca:6b:fa:93:
53:9a:12:7c:8e:59:c3:89:ac:da:cc:22:0d:17:04:
47:9b:76:05:fd:01:01:4d:f8:c5:43:20:6e:ab:ad:
b1:34:39:84:c9:33:82:b1:db:1f:13:59:0d:ab:bc:
a0:0c:1d:4e:3c:c9:0c:84:4e:17:53:e9:3b:3e:c9:
26:b7:b7:2c:7c:aa:c4:d2:97:72:8f:e3:c6:41:5d:
e2:a2:ac:b1:ce:a4:0c:a0:e8:a7:6b:2f:94:09:ee:
d9:27:7c:c8:ba:9e:ec:b4:d6:40:1e:fc:78:d6:f2:
35:03:e9:ba:73:94:ec:06:6b:60:e6:83:e7:38:2a:
78:cc:a1:71:25:e0:2a:14:55:7f:b3:60:74:81:b0:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:4A:38:90:65:AD:66:81:6F:16:40:5F:B4:BB:88:6D:DC:35:B6
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:45:c8:04:66:fc:e8:54:87:49:a8:a6:aa:72:3a:7b:04:
3e:5a:85:db:1b:c1:c7:fd:b2:66:06:6f:04:e1:92:f4:c4:16:
b2:01:2c:e7:14:21:d0:ca:63:27:4c:72:62:07:34:ab:4e:76:
d1:04:80:da:50:ee:fd:0d:bb:2e:47:00:3c:7b:85:09:6f:5e:
98:e6:90:f1:24:af:04:57:d5:20:ef:7d:48:f6:3d:53:e9:0f:
64:96:1d:62:7e:2f:00:dc:de:f0:3f:3b:44:c2:ae:28:e1:fc:
a3:89:a0:43:2d:64:88:8f:8a:b5:66:98:7c:27:6b:82:8b:f8:
67:fd:a0:cb:1a:89:cb:1d:e2:2c:d2:b7:03:45:f3:51:70:4c:
ef:bf:5a:0d:59:b5:ca:b0:b4:eb:f2:89:c3:08:9d:74:eb:21:
09:d5:6d:36:3d:08:62:29:37:b4:4d:2b:4c:92:16:10:b4:7f:
e3:03:ee:79:7a:79:c5:ea:68:ff:d3:61:5b:4e:35:9a:b0:aa:
b7:0e:ef:dd:53:7b:18:63:8c:dd:c9:52:56:e6:a4:c8:8c:0d:
f6:58:c6:7f:a6:23:af:40:3c:4a:b7:fc:27:da:45:13:f0:32:
8e:47:b6:25:82:fd:76:fe:00:d2:e1:9f:d7:1f:4e:95:c3:09:
4e:e5:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:34 2026 by rpki-client