Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier: XwnjeuE/F2TYIF61BmN0FGUlNyIUE63fjlxh9+WrZD8=
Subject key identifier: 6B:22:02:BA:6A:B0:C6:6F:BA:A2:AF:AC:10:6B:CF:D0:1E:42:1F:54
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 019D41D5D7A38E7F72EFE3B18BEC0D78CDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number: 1893
Signing time: Tue 31 Mar 2026 03:00:26 +0000
Manifest this update: Tue 31 Mar 2026 03:00:26 +0000
Manifest next update: Wed 01 Apr 2026 03:00:26 +0000
Files and hashes: 1: LZ-6W0p7V-_FK2vNKbU1WckOSyQ.roa (hash: w9kLA3Gv8FlNVERrO2aaxlGZDvx7nVjiV7GPYUks7IM=)
2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: MFt8C/qrE1PZ6pK+w2uTwV1WxuP95aVp6vAY7M3TPhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:41:d5:d7:a3:8e:7f:72:ef:e3:b1:8b:ec:0d:78:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Mar 31 03:00:26 2026 GMT
Not After : Apr 1 03:00:26 2026 GMT
Subject: CN=6b2202ba6ab0c66fbaa2afac106bcfd01e421f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:3a:51:a3:63:62:54:cf:3a:63:89:be:c8:
14:71:eb:ac:c5:c0:de:6a:81:2c:0c:d7:8f:7e:3a:
bd:b7:91:39:b8:d6:15:41:54:05:77:b7:1d:14:50:
f3:76:bb:1a:bb:3e:bd:21:cc:98:77:3d:20:07:38:
de:81:4b:d5:35:a8:13:c9:77:99:83:cc:e6:ac:0c:
e0:25:ff:b0:40:21:63:28:25:4c:0b:18:74:4c:45:
8e:58:c5:33:c2:09:32:09:5a:cd:9d:c6:ca:46:ec:
cd:64:d4:e2:4e:2d:41:53:28:47:22:e7:ec:d3:68:
00:9a:12:96:7d:e1:9b:8b:97:ef:6e:f8:8f:99:78:
c4:a5:0c:3b:5a:35:ef:36:9c:5d:ea:02:52:d8:d6:
6a:e5:18:1b:ad:e5:57:d1:3b:3e:44:85:2d:f8:df:
16:c0:70:5e:42:67:c4:63:8a:50:15:03:ca:dd:bb:
73:43:89:c5:a2:52:3f:0e:d1:94:ed:5f:70:86:bf:
90:51:73:0c:f2:53:ff:e5:bd:0d:3d:55:76:08:15:
1b:21:f6:c0:e4:7a:bf:e0:5f:cf:50:89:9c:61:b8:
6b:3f:57:84:d3:ff:c2:d9:bd:c3:50:3e:17:b5:a2:
d3:e5:39:97:5e:f1:c3:66:e3:7a:92:28:46:ae:0a:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:02:BA:6A:B0:C6:6F:BA:A2:AF:AC:10:6B:CF:D0:1E:42:1F:54
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:01:e0:a4:85:aa:de:f4:70:ad:9e:97:cb:7d:ad:51:a1:31:
13:aa:5f:81:be:0a:d2:2f:d1:59:3a:32:07:36:42:de:61:2f:
fb:51:3b:a2:b8:06:00:33:37:ad:bc:85:e2:c2:50:80:20:b6:
d2:8f:44:bc:7d:b2:35:95:a1:49:f0:31:a8:4c:38:9f:be:a9:
51:b4:be:8b:c2:63:41:dd:cd:97:79:38:a7:f3:e1:26:44:07:
f1:bd:77:29:03:22:e9:40:3f:ce:a2:0c:ba:29:e2:98:07:43:
c6:29:96:9e:60:d1:0e:e1:24:df:80:87:ea:d8:31:23:fa:b2:
1d:09:b7:8c:59:62:02:cf:7d:a3:f6:ff:57:a9:46:ed:26:c6:
1e:1c:4c:8f:13:f2:f3:a3:b3:33:65:fd:5d:a1:d2:3a:99:ed:
be:79:9a:82:15:11:d9:da:23:16:db:3a:78:93:22:c9:55:e9:
19:c2:77:25:35:1c:4c:6b:5d:43:56:17:b3:df:ca:9c:2c:e7:
ca:69:85:37:b3:1d:db:4d:58:9c:f3:60:c4:49:46:e2:4c:8d:
33:a6:a8:20:f4:49:4b:79:2f:9a:02:26:3f:f7:67:8d:98:a4:
5b:04:13:b5:46:6b:12:ea:c8:e2:f2:99:70:da:8b:1c:cf:7b:
4c:3c:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:28:01 2026 by rpki-client