Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
File: wR0IGGQzkDBptda7ZS-YQo9TyAg.mft (raw, json)
Hash identifier: HxnrGUhwo8RuqcL4u6QVizlwzHGxVWaUZp9rjHXhDZA=
Subject key identifier: 5D:05:D6:06:38:A8:F2:DC:BA:C2:CA:CB:5C:82:29:9F:A3:75:1C:08
Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
Certificate issuer: /CN=c11d08186433903069b5d6bb652f98428f53c808
Certificate serial: 019D37F73DDC657F1CB7DB763D5E73112EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
Manifest number: 0470
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: a5e5m59VpFO4p4dy18WiGqkpZ8A.roa (hash: WRnLDwGlhFM7xAH4tskKGrHMj8+0GuB3ILEsnJKuHDc=)
2: nhi5PR9kkGjJU8TEuQ8xL20m7XA.roa (hash: eXjfHEORSrmx9j/3/AZZ7XF2KyD0yfbFG3RfIuUBXFk=)
3: sYaZQ3u2p7Idos9F2hdpdk29H-8.roa (hash: qUgIR43iEvfVLnAh9SKc6qTcZrxYuGi/KZLcH3UDKI8=)
4: wR0IGGQzkDBptda7ZS-YQo9TyAg.crl (hash: TbnerbMFUqIOdfaYEKs1EqdKoTdu7cWZN34cW07EUU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3d:dc:65:7f:1c:b7:db:76:3d:5e:73:11:2e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=5d05d60638a8f2dcbac2cacb5c82299fa3751c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:ce:a8:e5:00:ae:57:da:ff:a7:19:df:6a:
3c:19:bd:54:6f:f1:92:ae:7a:34:2b:a1:17:3f:5e:
09:a4:8f:38:bc:5d:48:93:9c:2c:f3:c1:43:4c:02:
d0:57:3a:87:2d:89:fb:1b:84:a5:9c:16:fb:ee:c1:
c5:8e:87:22:8b:a4:06:80:d4:c3:e3:ca:fc:55:47:
2f:fe:f1:0c:1f:4b:aa:f8:cd:97:b0:41:f1:e2:b0:
64:4f:bf:dc:fa:79:b5:55:87:15:f4:98:43:69:63:
13:11:46:70:2c:cf:96:ff:46:44:b4:4b:3e:11:00:
ee:2f:c1:16:44:3c:50:c9:da:a6:73:73:fd:98:ca:
cb:37:66:88:a4:eb:a4:ee:19:fc:1b:20:7a:d5:8d:
9f:f9:0f:20:53:08:5f:60:29:1c:de:4f:7b:7f:49:
cb:1b:fc:2f:2e:3c:ce:ed:cd:b2:b2:e7:98:c8:0d:
9a:d1:8c:3e:dc:7b:ec:5a:9f:fa:77:f7:66:07:51:
7f:84:da:79:bf:d8:4a:ca:4e:98:7c:89:08:6a:4c:
d5:7e:c3:48:6a:e8:6a:c3:86:7e:4f:fb:f8:8b:55:
8e:5b:24:72:f6:6d:73:1b:93:b5:66:b9:33:d3:0e:
7b:44:20:0d:af:78:48:4e:ad:18:26:06:08:1b:dd:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:05:D6:06:38:A8:F2:DC:BA:C2:CA:CB:5C:82:29:9F:A3:75:1C:08
X509v3 Authority Key Identifier:
keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ae:78:43:7b:0e:34:68:56:1f:12:e3:d5:20:56:9a:45:5f:
b5:60:04:7d:6e:6b:b4:f3:cf:cd:f3:b7:17:3a:cf:b0:78:de:
c3:e1:24:d5:4b:11:21:f6:b7:29:ed:5f:20:a2:42:47:0e:80:
37:4d:80:63:1b:a2:3b:5f:5d:73:fc:86:7d:ea:c7:da:30:14:
0d:90:ee:58:51:c0:42:f1:ff:ed:63:ff:0c:a7:96:8a:72:8a:
ef:07:48:c1:3a:18:83:9e:f2:92:16:b7:1c:f4:8b:12:f7:0f:
c7:a2:fd:7a:2a:db:b3:a4:c6:3c:75:d0:73:81:93:bc:c5:6f:
de:de:73:bb:f5:89:22:e1:46:33:da:d1:3e:90:11:ad:55:e3:
82:27:8f:e0:69:37:38:77:b9:a8:2f:a7:d7:dc:6f:0d:7a:c3:
49:6e:7b:f1:5e:8d:c5:ae:18:71:87:6c:56:7b:66:33:68:f6:
e1:24:f5:a7:1f:8f:53:6a:85:6e:17:cc:f0:1f:4f:90:83:0a:
e0:84:e6:69:50:ad:d1:ab:89:21:d9:a5:c2:16:65:d3:90:ee:
26:3d:4a:45:2e:1b:fd:a0:83:96:ba:6b:eb:13:d6:ee:c7:b8:
67:c0:4d:d4:09:6e:65:cf:cc:6a:8c:af:c0:1a:d1:e9:fd:b4:
86:c2:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client