Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File: wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier: OgbknjAH2Thg8Dk48lRMlzrEjOxCJ0CYYLI/y2kDw/w=
Subject key identifier: 47:3E:4C:82:29:13:BE:B8:E9:74:13:DE:E7:B1:0B:6F:09:9F:60:D8
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer: /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial: 019D389C02F05E2A3531A8D9F11D06FAB965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: /g675qwfD3jB/SJ57fABO5N7G/2n9JWWPlLbc0oEcYA=)
2: yHQ1YLiN5hY_gbv8gILFuVBIS7Q.roa (hash: gmCFySCBwmCnbmTNmPpd7gcPgHDTKx/9z23Y4aCqihk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:02:f0:5e:2a:35:31:a8:d9:f1:1d:06:fa:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=473e4c822913beb8e97413dee7b10b6f099f60d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:86:a7:8f:1c:f9:ee:5a:71:9d:bb:cb:24:
99:3e:f1:0b:a1:af:95:07:c7:06:a1:49:00:61:a6:
d5:fa:10:7a:cf:64:01:1b:7a:1c:93:33:27:f4:ad:
4f:44:71:3c:0a:49:33:92:9a:02:81:06:14:cc:61:
19:36:64:27:6f:ca:07:43:1b:34:7f:b3:c3:df:76:
77:8b:7f:fe:f5:f7:cf:e7:26:dd:5b:f9:92:46:51:
fa:bb:1d:23:85:2d:e3:01:8d:af:b6:6d:e2:fa:4c:
b1:ef:40:d2:6a:98:e9:01:ed:10:5e:de:23:ae:9c:
86:70:83:ea:9e:66:e7:da:6c:f3:33:d4:e4:fb:29:
c5:b2:93:51:51:14:14:45:90:9c:bb:b7:73:f2:c4:
6b:0a:65:08:5e:3b:45:28:2e:bb:e6:56:b9:15:e4:
eb:8d:8d:47:70:0b:89:96:63:67:cd:74:4c:d3:64:
01:75:25:ee:bb:72:7e:04:09:90:59:74:6e:5d:ec:
01:4b:5a:5d:68:c9:91:ee:9c:ec:c0:29:99:b0:54:
5a:ea:b3:7c:64:ea:80:46:4e:60:1b:34:be:96:1a:
bb:0e:93:53:19:0b:6b:81:df:9f:e4:79:ee:f9:ee:
0e:e7:89:6f:32:bf:96:df:ea:ad:d4:8e:af:b4:ad:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:4C:82:29:13:BE:B8:E9:74:13:DE:E7:B1:0B:6F:09:9F:60:D8
X509v3 Authority Key Identifier:
keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:17:3c:51:13:c5:93:86:d9:c0:de:a9:22:5d:46:31:94:
c4:90:19:39:27:f0:f8:74:88:2d:03:77:b2:fb:dc:7d:c9:af:
d8:4a:77:f8:e1:13:76:6e:30:45:e2:55:f2:a7:4c:2c:94:18:
c5:f1:f6:88:24:8f:d5:9d:47:fd:c9:01:63:0a:1e:38:45:c3:
25:07:44:ea:84:06:0a:f8:aa:5b:c6:a7:87:12:59:a7:bf:13:
ce:14:c0:87:01:2c:08:c7:8b:b4:f0:da:c8:ad:1d:0c:89:09:
87:10:ae:7e:72:0a:90:0a:ed:7e:bd:68:a2:10:d8:15:d5:3c:
c5:5b:89:4b:50:4b:1e:0a:e9:92:5d:8d:11:f4:61:92:cd:9c:
10:61:eb:26:22:b8:da:5e:2b:ca:9c:d6:5a:6f:e2:14:8f:b4:
35:e8:5f:a4:f5:53:fe:17:18:f2:d8:f1:07:15:dc:bd:11:ef:
7f:0a:2a:66:72:38:56:87:60:9a:2f:c1:7e:01:26:36:80:cc:
62:32:7b:7d:0d:8c:5b:61:13:e3:30:95:43:83:11:b9:ec:75:
64:82:93:b3:76:66:a1:1a:18:b8:7f:95:89:81:14:1d:4f:de:
e7:63:07:67:e5:19:45:e1:1c:66:50:c9:d5:bb:6a:84:66:39:
5c:94:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:33 2026 by rpki-client