Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: IywA9TUhN1XNWs3LGxwBMpx0jStmpMCZYH4yVfApRjE=
Subject key identifier: 26:E5:FB:6C:33:8B:C9:85:EF:B9:BC:C8:FA:7A:4D:74:EB:26:1E:38
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 019D389BFD00D633346D781AFD3C9D076A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: ch32gMkwgIvhncaw2j6_w1rWqBM.roa (hash: 2zNuBXW5TRNjyq7/jYrllStnRO2aSpxPfwq4qZw6++Y=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: 9j+Tmau5F0shIe7ldHsEO1AGJFk6YsUxM8fTSa36b88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fd:00:d6:33:34:6d:78:1a:fd:3c:9d:07:6a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=26e5fb6c338bc985efb9bcc8fa7a4d74eb261e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:4a:91:6d:6f:f8:35:b8:1e:e8:b8:35:36:
d1:2d:49:56:b3:bb:18:a5:c0:29:d5:b8:b6:04:aa:
b2:41:2c:0c:ee:de:14:b0:85:a1:3d:65:dd:6d:4d:
07:cc:51:13:27:7d:96:1a:45:38:b5:81:cf:59:5a:
56:0e:da:52:6f:9f:62:29:81:fa:81:f3:cc:b3:f2:
dc:ed:9f:48:5f:21:8b:72:d0:74:1b:e6:b0:e9:8e:
1c:b5:ed:80:43:a3:7c:07:b9:09:21:d0:25:e5:f5:
e3:ff:8e:d9:fa:d1:b0:9e:8e:7d:33:85:14:83:39:
be:83:60:17:86:42:56:d2:60:07:f4:b1:6c:90:b7:
f2:b6:70:b9:01:28:c0:2b:e0:b2:c6:af:78:32:3b:
29:ae:ce:f6:8e:d5:70:ca:66:d4:de:58:9b:e8:fb:
3b:0d:6a:78:13:19:32:0f:ce:29:0c:ca:5c:04:d3:
aa:05:d8:04:65:49:c1:2e:df:38:98:4c:a9:94:0e:
e1:36:04:ed:3e:1d:24:ae:30:d4:23:a5:09:1f:99:
d9:5f:61:94:90:c6:97:64:9c:34:84:16:93:72:f4:
24:c1:6e:ba:eb:9c:e5:53:a2:35:23:20:d4:5c:82:
64:35:cf:68:10:dd:d2:7e:8f:f0:9a:a1:ab:36:66:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:FB:6C:33:8B:C9:85:EF:B9:BC:C8:FA:7A:4D:74:EB:26:1E:38
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cc:08:9f:02:81:8d:01:7e:20:22:a3:8e:ab:c0:30:40:de:
bc:d4:79:f2:3a:57:2f:13:1e:fb:80:5d:91:ff:f5:ce:4a:10:
15:fe:75:91:59:99:b1:22:ea:09:93:07:ed:a1:57:1e:bb:30:
11:ab:3e:c0:d2:b2:90:fa:c2:cd:03:21:a4:b0:8d:02:4f:16:
e5:88:d6:b0:22:8c:e7:ee:7d:62:82:ae:c8:81:8f:d9:6c:7e:
fd:3e:07:db:d6:4d:ae:9d:45:3c:96:17:a8:42:52:21:cb:a9:
0c:31:5c:5c:95:0f:52:9f:84:a9:8c:76:d1:fe:26:60:b4:0a:
3c:f2:c8:c3:fb:95:38:13:e1:ab:06:d3:10:7d:63:27:28:87:
69:e2:a6:fb:70:2b:e0:0f:04:71:96:a0:d3:d5:21:18:7d:af:
69:5e:87:5f:a2:90:70:d5:8e:ad:2e:2e:82:3b:54:f7:b4:2b:
8a:06:1a:a9:66:97:db:7f:09:85:7b:71:6a:42:b0:ad:3c:d9:
b9:c5:c1:65:ea:7d:52:b3:de:c9:f2:b8:02:89:0c:82:da:d9:
4b:00:ce:85:8d:86:af:35:5d:2c:b4:18:88:5f:94:c4:6d:c5:
58:9d:34:77:74:91:0c:1e:46:a0:0e:23:e1:78:40:89:5a:3c:
ed:55:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:46 2026 by rpki-client