Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: p/7jLuNuJCLwTFIbxEKluhWMz5MW85Ffl0HECV2498Y=
Subject key identifier: AF:79:AD:68:F0:95:90:DD:08:87:3C:FD:27:86:37:02:3B:CF:E3:2E
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 019D38D2DCE221BEB0C8F00C1C80A755EB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: DFvKBjCn1lQRCEGx+4V1T/bPSlUFu3PpTVxTDperqEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dc:e2:21:be:b0:c8:f0:0c:1c:80:a7:55:eb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=af79ad68f09590dd08873cfd278637023bcfe32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:46:85:e2:ac:7a:f3:59:72:87:61:3d:f6:
ef:5b:82:aa:5e:80:93:28:2f:00:ed:61:08:dd:89:
a8:51:75:13:d0:e3:c2:07:5e:da:f9:d1:e9:71:8c:
90:f4:f2:10:06:fc:7b:61:ba:e2:0d:29:31:9b:7b:
98:97:34:03:c0:8b:e8:fa:62:a0:c0:f2:a6:40:83:
42:07:6a:89:5e:57:14:ff:f7:98:cc:ff:11:90:b7:
aa:6f:26:56:e8:c3:e2:78:0a:23:15:74:00:4c:7d:
8a:17:cc:14:bc:92:21:95:5b:70:0e:aa:37:d2:50:
bd:78:54:60:e4:8e:5e:ba:5d:a5:e3:58:5e:40:36:
c4:6b:a4:8a:3b:aa:46:9c:37:f5:44:81:63:40:04:
4e:a7:07:61:5d:66:c9:71:88:94:3a:1a:65:90:3f:
95:9a:99:88:97:99:c5:83:4a:4d:e9:a3:7c:f5:fb:
55:5e:88:04:29:cb:45:3b:f7:8c:ac:dc:dd:7b:d2:
da:79:18:51:64:5f:85:34:64:57:de:ac:8a:8c:99:
49:4f:1b:7e:9a:49:61:c4:3a:16:b5:66:e5:9d:91:
e6:71:36:96:5f:7e:b5:49:2e:49:23:2f:bd:9a:f1:
2a:98:1d:02:2a:58:97:4d:4e:f3:f9:db:2a:ea:1b:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:AD:68:F0:95:90:DD:08:87:3C:FD:27:86:37:02:3B:CF:E3:2E
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7d:67:f7:6a:70:a1:0e:bc:04:bc:d6:0d:d8:9b:46:7e:02:
9d:5b:f6:7d:d1:d7:aa:85:4e:14:e2:78:c9:ac:e4:57:50:db:
b4:9d:af:29:cc:a7:46:c9:6d:4c:e0:ce:dc:39:ea:fa:50:2a:
e3:74:29:e7:af:cc:18:73:44:3a:d5:01:97:8c:d6:87:64:b1:
d7:3f:fb:01:f8:53:72:43:d6:23:97:73:45:c7:ad:3f:8c:95:
be:b6:25:08:e8:b9:c9:52:fb:cd:62:43:b3:91:94:7d:c9:06:
6a:f0:f1:4a:4c:c5:a9:cd:4a:70:77:97:89:b2:9f:55:20:c1:
00:4d:b2:80:32:83:48:2f:bc:c7:cb:d6:09:f4:35:13:aa:06:
36:d2:26:3f:8d:b4:b2:3f:74:fd:4e:0e:80:fa:0f:8f:f5:db:
5c:37:c0:10:84:bc:6b:a9:16:e8:af:23:3c:62:bf:62:d5:ad:
05:b7:d4:15:34:81:a3:3e:78:60:cc:48:66:de:91:ac:22:f4:
a8:17:d7:c0:bd:20:a3:26:18:c4:f9:3d:48:07:26:d0:95:cf:
d1:89:46:f4:49:ef:99:e1:2a:de:48:ff:8c:e0:73:69:2e:87:
9f:14:68:b5:5f:06:05:b7:af:80:8a:09:5d:45:3b:75:f8:16:
b2:22:64:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:25 2026 by rpki-client