Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: BIjmsOSABdHGO5BD0HtFF3C/ZdgjJb5lljx+R0LqaEA=
Subject key identifier: 98:00:6B:C7:0D:8D:40:95:98:9A:25:5A:44:3E:71:92:66:0C:5D:6A
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 019D3A53A867C7952494948605983134C9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 10B0
Signing time: Sun 29 Mar 2026 16:00:54 +0000
Manifest this update: Sun 29 Mar 2026 16:00:54 +0000
Manifest next update: Mon 30 Mar 2026 16:00:54 +0000
Files and hashes: 1: Ka7alFqI87s4EdJtZyqE-NGPHhs.roa (hash: 3RMOWVJO1ZQcH4d2j0ueEWLJLM5MekEDToq5QKnUUrM=)
2: VQIQLar7HwcjhVGKE5MtajsCN6g.roa (hash: SY7ZBqxQfy17eB+jMKdcaxNzW/pWzNXUCVDqxS62ZG4=)
3: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: izTBvjUE7NUH+3qYSkT2lz+T1nzWqxbF4nBJGXlmdJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:a8:67:c7:95:24:94:94:86:05:98:31:34:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Mar 29 16:00:54 2026 GMT
Not After : Mar 30 16:00:54 2026 GMT
Subject: CN=98006bc70d8d4095989a255a443e7192660c5d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:98:89:96:b1:91:32:41:3e:4d:7a:ca:29:
73:d0:ed:60:6d:e6:a6:4b:c8:1e:26:61:28:92:69:
25:24:47:42:1a:3c:f9:a7:85:79:10:e7:34:1e:d6:
14:ae:c8:e4:35:86:38:52:fd:18:1e:03:96:60:8b:
05:24:ab:11:9c:d0:1b:c4:21:0a:8e:8f:83:45:ec:
7d:d8:eb:10:44:c0:ea:d6:de:45:7a:5c:3f:7e:82:
0e:f6:22:a5:04:6e:49:39:6e:15:fd:08:40:72:e9:
db:8f:a4:74:a5:fd:64:ea:5b:87:de:69:ad:4d:89:
3d:ef:44:ae:f3:da:20:23:69:2d:1c:22:fe:75:b5:
76:55:5d:8d:53:ff:33:e9:4c:74:2d:b0:e3:2d:42:
56:2a:c2:f2:31:6c:3d:0d:b4:fa:ff:98:21:2b:4e:
76:25:57:36:30:17:65:69:61:e7:09:63:8c:d5:2d:
1a:8c:4b:a5:91:fe:aa:da:52:be:9d:da:bc:73:7b:
52:e0:98:b2:aa:1b:05:2e:23:37:2b:54:2f:cb:a9:
38:1a:e4:83:80:b7:4d:61:9e:6a:19:da:f7:08:b1:
8a:d1:4b:a0:52:23:de:86:3a:6f:0d:69:69:f3:47:
d8:5e:e8:6f:7e:d0:a2:ae:8b:5f:45:04:56:a4:da:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:6B:C7:0D:8D:40:95:98:9A:25:5A:44:3E:71:92:66:0C:5D:6A
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c2:8b:7e:82:4e:70:e7:f7:f1:7b:a9:5e:07:12:4e:3e:b2:
31:44:bf:a5:64:1f:75:84:0a:79:43:c9:36:f3:4a:a7:db:18:
cc:93:ed:ee:d7:9b:20:e5:9f:a3:81:22:93:e3:ff:16:a7:81:
c2:57:95:1b:e8:7e:26:0d:76:3f:c9:01:dc:ff:a5:af:d3:d6:
17:5b:65:43:e8:76:94:d0:68:f6:f7:bb:1a:9f:11:f9:5a:f7:
b5:98:6b:0b:b2:41:bf:d3:ee:e1:19:1c:88:29:95:bd:50:db:
20:2e:bd:d9:29:b7:b5:bd:a8:5b:a4:18:76:22:5b:66:80:8b:
e5:bf:31:18:c8:a4:6a:14:36:00:ac:fe:43:fd:75:86:71:fa:
c4:e5:f5:52:c5:8e:88:d8:b6:da:76:e1:ba:6b:cf:e2:eb:8a:
57:93:a0:d1:8b:b3:9b:56:bd:7f:a6:be:1a:e7:10:d0:f7:d1:
0c:db:9d:6f:66:c7:c5:7f:e3:7e:28:b6:d0:94:fe:25:ad:89:
8c:81:99:89:f2:5b:c6:81:37:51:96:bb:ac:9e:e8:21:d1:2e:
64:79:e3:bf:be:a1:e0:6f:f4:b2:65:48:c4:5a:f4:97:f4:09:
ad:12:b7:fb:a6:58:ac:4f:bf:01:24:5b:52:92:86:32:35:e4:
f8:ad:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:56 2026 by rpki-client