
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
File: wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft (raw, json)
Hash identifier: cxXc7DiINDH9L9SDQR0TTXeMJAhlyztvJEDBrTSFvLk=
Subject key identifier: C0:D0:35:BF:46:11:36:08:A0:23:06:9F:BF:57:8A:2D:64:78:08:F3
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 019D37F6FD2283D952438A3F6EA0C1C27DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
Manifest number: 1053
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: a2wJLV7P5DGWhusYzf4J4uUDAug.roa (hash: q6iaHsPiufcNlLRUKtOJ5vKMvHcKJCFipIPxXUmEW6U=)
2: hkDILjMkkdM5vhdicPcOC_rPPAk.roa (hash: 5pbYYSt+DRX/pDl00GSjYc7pEFz9SrosjpZf7GRqg18=)
3: wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl (hash: XAmq+J73WVAe3SHuzk4HvHDhf2gdeND3CIRoAK6HGJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fd:22:83:d9:52:43:8a:3f:6e:a0:c1:c2:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=c0d035bf46113608a023069fbf578a2d647808f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:bd:7c:c9:23:06:c4:e2:bc:ab:8b:0a:0a:
20:4b:ad:7a:83:a1:fb:be:ef:43:cb:d3:40:af:3b:
45:7f:8c:be:33:6d:a1:97:96:2f:f7:69:24:3c:44:
0e:2b:54:ac:92:e8:e4:c7:e3:a7:e3:df:9c:eb:72:
12:3d:59:66:97:9d:ba:a0:96:be:e6:da:54:90:d9:
f8:38:31:11:a5:41:8e:c9:e0:43:e1:a2:14:8a:c9:
3a:04:17:81:bd:c4:92:22:92:0c:b3:dd:bc:4a:1e:
0c:4f:8b:02:51:23:8d:bf:ec:22:e4:d0:b4:d5:4e:
68:f2:5c:9b:81:45:71:b6:15:80:51:29:02:34:97:
06:51:2b:ef:c3:75:24:e5:2c:6d:62:0f:f3:4a:68:
f8:6b:42:36:13:e6:ed:c6:48:be:6c:6a:85:1a:17:
5c:f3:40:f8:6e:66:30:74:73:c0:70:41:98:1a:96:
2d:ed:e8:2a:df:34:78:c4:64:63:a0:c5:0d:b8:21:
14:d1:3c:4c:14:a2:d4:ba:ac:f1:c1:a8:59:78:eb:
41:59:b8:2f:8c:c1:05:e4:06:fd:c4:77:93:85:0a:
b6:59:26:63:72:fa:67:cf:4f:e5:64:f5:53:36:86:
52:c9:f7:8e:b5:91:08:4d:b3:43:d5:56:2a:65:c0:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:35:BF:46:11:36:08:A0:23:06:9F:BF:57:8A:2D:64:78:08:F3
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:a9:ca:8d:8f:50:be:07:9b:62:66:cf:19:7b:f1:11:bc:
b0:c4:73:2d:5f:28:64:d2:42:22:29:36:10:cb:46:74:45:7e:
c7:54:e1:ac:ea:15:4a:6a:13:74:16:92:88:f5:ee:c4:3a:1c:
b7:b8:51:32:cd:9d:db:25:f2:06:de:7f:ca:36:e1:c2:80:80:
94:61:70:ec:de:5a:9c:e2:47:ec:2a:6b:67:72:51:4e:6a:cf:
71:b6:b4:50:b3:48:39:67:63:8a:25:b3:32:06:1f:5c:dd:fc:
d5:67:62:6e:89:43:3c:75:4e:0b:5b:82:38:02:e3:97:30:7a:
db:1b:38:55:78:0a:6d:9e:57:c9:ce:66:ee:ee:00:15:68:bf:
d8:99:ac:5e:6f:cb:02:07:5d:3e:1a:b2:cd:15:8c:3f:f1:80:
45:a0:e8:96:cd:63:91:9e:e8:d2:19:ed:21:ba:c7:d2:03:cd:
47:cb:de:c1:6b:a2:af:12:1b:f8:0e:e6:be:45:73:10:93:b7:
02:d7:46:e1:ce:7e:74:06:92:b9:ac:59:fe:35:8f:01:7c:7e:
3c:9b:bd:d0:ea:8d:a9:1e:83:22:4d:78:ef:46:c4:4e:98:c7:
ce:a4:c2:eb:cb:dc:8f:6d:a3:b3:9d:78:0b:b3:86:da:8d:32:
45:8e:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:02 2026 by rpki-client