Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier: jSYmMXs8a2ZrDzPXlxEKw/rQkHZZzO3ghL5BcjsUMac=
Subject key identifier: 18:39:2C:F9:42:29:A0:74:A7:CD:46:83:76:61:F8:28:16:99:D9:03
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 019D386674C35FDB44987C4FC57F13060422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number: 0D41
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=)
2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: MU2l1mGVZbnEV7aPKXIp5j7nEx52rzJDSxccEJ7c2UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:74:c3:5f:db:44:98:7c:4f:c5:7f:13:06:04:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=18392cf94229a074a7cd46837661f8281699d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:1c:ea:36:2b:df:5e:c0:f5:9f:37:23:5a:
57:ec:4a:55:94:fa:05:c0:2e:cb:2d:0d:cd:1a:6d:
18:68:e3:b4:c1:dc:f3:2b:4d:fd:f4:39:4d:fd:8c:
be:c9:be:39:b6:12:02:f3:56:85:55:af:78:73:e0:
63:9a:a7:33:09:68:5c:c4:f6:6e:e8:47:24:db:74:
59:c3:8f:2a:e9:bf:0d:e6:9e:16:aa:68:a2:6a:5d:
91:68:dc:17:d6:58:36:2c:17:4a:b6:7e:84:ff:29:
64:57:7a:fa:5d:da:49:eb:2c:8c:0c:f3:4b:ef:d7:
cd:94:16:b0:88:93:d3:1b:0d:b1:4e:19:5d:a6:d5:
94:c9:3b:04:6c:8a:66:c6:f8:9f:f0:2b:a1:4e:34:
f5:24:3d:15:68:8f:9a:b9:8e:92:61:d2:82:cd:de:
c0:4e:41:2e:d1:24:b7:3e:70:f5:66:ac:18:a9:a2:
15:93:da:f2:5f:35:58:3c:96:5e:9a:5c:ff:60:40:
37:7e:3f:15:a1:d1:34:59:b3:0c:ca:cc:42:3a:92:
ce:fd:31:f9:7d:f4:f3:50:44:54:dc:c9:8c:56:78:
51:71:a1:77:a4:2e:77:4c:4b:a5:cb:aa:33:e3:c2:
94:41:01:fc:b6:7e:de:24:18:96:0e:39:38:63:8e:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:2C:F9:42:29:A0:74:A7:CD:46:83:76:61:F8:28:16:99:D9:03
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:78:53:db:1a:78:f8:f0:14:d5:d9:29:4e:60:ce:7b:a2:83:
59:2d:d0:3b:5e:f7:c0:61:46:66:7b:ce:0f:b4:e9:58:5c:d7:
86:a5:e7:ac:c4:4b:63:b8:47:e1:32:1c:bd:3e:52:ce:57:07:
bc:8d:d6:f7:fd:91:22:89:bb:bf:e4:3e:eb:28:b4:6a:33:63:
7b:b7:a8:71:d6:50:bc:2b:c8:bd:0b:14:8e:e6:4b:16:0b:5e:
c7:87:44:96:e0:a7:cc:8b:0f:53:ce:6f:23:3f:f9:7f:88:9a:
62:1a:5e:e7:35:5e:bd:65:b0:12:80:a1:53:82:01:87:a9:62:
ea:0b:b5:16:06:c9:20:ac:ef:cb:9e:e1:44:b7:42:60:97:4a:
96:c5:16:d3:dc:06:ab:d0:87:b5:a9:bd:a1:7c:d3:2e:2a:6b:
71:3c:20:a1:99:97:07:02:c6:1d:46:bd:54:b7:62:8e:6f:b1:
4c:51:62:12:e9:1a:cb:a0:2b:36:11:57:02:f9:84:46:8c:ec:
28:63:fe:6b:a7:3f:44:c8:0f:35:84:ef:d2:aa:76:ea:06:78:
b2:ae:86:36:0a:cc:c0:96:8d:e9:8d:05:3b:38:4e:27:07:6a:
84:6a:1c:29:41:ba:6f:96:c4:11:e4:f9:95:52:7b:88:a6:df:
69:4d:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:38 2026 by rpki-client