Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier: kUyqI/Bw3vGr2vh5SvBz9BHnRbBpax6NZc9czwP9/vM=
Subject key identifier: B8:6C:7B:10:0C:1E:0A:26:87:E0:3C:F2:1D:3B:3C:BE:65:B6:46:D3
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial: 019D389BD6DC93571614905C03EE43D03DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number: 0595
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: 0lgng2rjDy26wvLpufoJ44YGSa8.roa (hash: Sp2gMQIGghJdGnoU3YO/ErS7zVxVldScly14Bqy0M6k=)
2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: 8iQ/yb5H11DhRLx26UMjZ9jAq1P2ZLhN7KwfgYHbcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d6:dc:93:57:16:14:90:5c:03:ee:43:d0:3d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=b86c7b100c1e0a2687e03cf21d3b3cbe65b646d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:32:37:f9:31:8a:0e:f3:87:f3:bc:d7:17:bf:
24:d4:b8:39:2a:a5:5b:45:10:87:22:b0:bf:e5:c3:
7b:72:04:53:ec:59:1f:7d:2a:46:ea:da:3a:3f:0c:
1c:af:0b:8a:ad:6e:e4:2b:c1:78:0c:ca:1b:39:74:
de:05:90:5a:af:ce:b8:12:74:4d:87:5e:27:bc:61:
12:5a:18:9c:c0:2e:f3:bc:77:b9:a7:7b:ec:34:d3:
ab:fd:85:1e:78:8a:49:67:e7:33:d3:4e:17:34:c8:
1c:ce:f1:b9:d3:a2:18:aa:fe:2d:b6:53:00:e4:c4:
26:1c:5d:8c:7d:0a:40:57:26:4c:62:00:f9:0e:0e:
8d:eb:b4:7b:cd:45:11:7d:1f:a2:3b:fa:b2:e8:fe:
92:42:71:34:02:7c:be:4e:4d:d8:e5:e6:48:8b:3e:
8e:db:3e:d4:ad:be:25:3c:50:1f:61:b0:11:c0:25:
9c:81:a8:16:87:03:1a:64:5c:b5:cf:ee:4b:33:95:
45:7b:88:6d:d4:47:a6:5b:ac:a5:97:90:fc:bc:f7:
29:4a:ed:37:8e:a8:e5:5a:34:34:5e:53:e7:5a:d9:
b0:48:81:23:97:91:8e:e3:e4:39:40:89:2b:63:27:
72:02:7d:3e:35:a2:83:a9:8b:0d:1b:7d:b0:e3:98:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6C:7B:10:0C:1E:0A:26:87:E0:3C:F2:1D:3B:3C:BE:65:B6:46:D3
X509v3 Authority Key Identifier:
keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e7:9b:89:ef:70:d5:40:98:df:61:6a:d2:36:3e:6c:af:d8:
45:f3:2a:a5:56:70:b8:7c:4d:57:dd:fe:9d:ed:7e:69:c3:d0:
9c:13:e0:39:7b:0f:58:37:56:5d:02:33:e6:8f:19:3f:aa:71:
09:40:da:a6:c7:27:2a:b9:21:8b:9e:e9:59:7c:41:2a:e4:18:
6a:14:66:eb:3d:73:73:aa:24:f8:70:99:d8:f4:85:b3:1b:76:
bc:06:a7:f3:20:17:db:94:a9:26:20:52:18:7d:ae:aa:99:85:
73:f2:29:f2:56:a0:20:cb:07:7c:a7:f9:09:f9:2a:01:fe:fd:
69:5b:2c:20:23:22:aa:f4:01:7e:57:74:3d:0a:9b:d4:f5:ab:
b4:9b:06:c7:82:2a:6f:f1:08:f7:2d:9e:3c:eb:31:9b:3f:6d:
bc:77:95:ae:0a:25:47:60:62:d7:89:1f:e3:74:11:16:86:c4:
53:d5:57:4e:6e:de:27:6b:38:c2:4a:ca:f9:05:8e:70:df:46:
e0:7e:a5:91:eb:0f:27:b1:fd:1a:1c:16:ff:7f:7c:c9:d5:62:
0b:37:69:2e:3a:a6:83:fa:0a:33:b8:3a:7d:cd:34:c0:cb:9d:
4f:bb:2f:89:2b:ec:4f:08:62:e1:0b:53:d4:ef:68:65:76:18:
88:29:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:19 2026 by rpki-client