Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier: J5YHKSKt7JC9GVopXntXTw8/eT0shZR/JdMqCdam6N0=
Subject key identifier: FD:86:48:37:D5:AA:CD:10:9C:4B:DC:89:CE:A2:18:73:57:1A:24:AE
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 019D3865C97213C0D352B591F01FF175829B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number: 1427
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: GWCQDoCj1EnoGr4G4aQGE_yERiw.roa (hash: jbmBzxR3cM82xnuqQI0lxiYS+XoV+IrgikeHq5X9ZmM=)
2: Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa (hash: Bnj3IDrJ882iRsnMbr53VXkROwmtnT/7J8NLZ7LP/VA=)
3: fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa (hash: 9DTO9B8YoPB/uUt1Im78LbNqxaAWyEGXlRRw0zOgX3E=)
4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: V10Nwwzvil/q39I9AuIhcaYuxXPadCGmwTh914pfpR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c9:72:13:c0:d3:52:b5:91:f0:1f:f1:75:82:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=fd864837d5aacd109c4bdc89cea21873571a24ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:91:cb:a2:dc:f8:dd:a0:a4:d0:01:e6:76:
97:87:a5:bb:8e:b5:b0:bf:b7:3a:8f:a9:ae:cb:e3:
53:1d:d6:0c:b6:69:1a:e0:56:42:28:36:02:c3:ff:
6a:2a:15:ab:10:a4:d3:70:6a:52:25:6e:53:86:67:
5b:b1:16:bc:40:b6:e5:d8:da:e3:77:38:30:12:ee:
64:55:72:6f:c4:db:54:d4:c7:47:7b:be:4d:04:7f:
c3:b0:d2:0e:1f:b6:64:e9:85:da:46:70:43:35:66:
94:06:b9:d7:d3:fd:53:93:79:76:89:17:f5:d0:e7:
a8:2d:5e:67:bb:47:0b:cb:cb:8b:b0:63:fd:f7:d7:
2c:87:71:ea:39:d9:1d:3e:a3:7e:7b:1a:3a:d5:a0:
0c:c4:97:5d:3f:7b:8e:26:7b:7b:5e:69:5a:24:b1:
2e:b6:b7:99:8a:48:2f:dd:58:2c:68:39:7f:4d:a8:
19:41:8c:27:af:17:c8:52:04:fa:ab:aa:f1:c3:09:
ee:2c:53:92:6b:a0:d2:52:84:86:31:09:f2:6b:76:
09:b6:66:ee:3e:42:5e:c2:c6:6a:1e:36:ba:f5:85:
3d:72:23:ae:d0:49:cc:16:7d:70:71:33:22:d3:9c:
58:b8:ab:39:a5:ec:1c:32:39:3a:4a:9e:6b:e5:00:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:48:37:D5:AA:CD:10:9C:4B:DC:89:CE:A2:18:73:57:1A:24:AE
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:97:8a:2e:b4:63:90:aa:69:69:d2:3b:d0:34:0c:78:24:
ab:4c:e8:2a:f8:75:04:d1:7a:a5:33:bf:4e:d8:b0:8d:7b:f3:
74:6c:64:27:f2:c0:57:a0:2d:f5:be:5f:41:8f:63:57:f5:1d:
a7:73:05:79:ad:cc:46:2f:13:6a:63:ce:44:19:c8:c6:08:d4:
e0:25:e9:5a:03:30:68:b4:2f:61:a7:5f:3d:b5:be:47:37:09:
18:ec:70:4a:7e:47:71:99:7e:66:fc:60:31:ab:ba:6e:d4:43:
33:72:d6:31:b0:67:bd:19:c1:8c:6a:1c:64:c6:4d:50:53:9c:
70:6b:9d:73:a3:aa:75:80:ff:d2:f6:f1:ca:18:49:60:5b:97:
7e:2a:fb:ea:6c:a6:a7:6a:50:cf:bb:ca:4e:84:50:cf:4b:81:
28:52:a9:be:d5:25:14:b4:af:5e:2a:0c:80:74:25:c7:02:75:
54:bd:f7:9c:48:16:6e:72:35:57:98:5c:23:a1:49:ec:4a:08:
72:59:b7:8a:8a:74:5a:dc:b8:48:25:9c:f3:0d:fb:dd:be:fe:
a2:0c:c5:f2:0f:43:92:c3:ca:77:6b:24:15:4c:97:85:d0:81:
44:73:af:a1:4f:63:ca:ca:a9:bb:a9:6d:be:15:92:ce:55:20:
cd:a6:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:59 2026 by rpki-client