Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File: wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier: 52E+ZfmGrpWMCwtY1xgFi8SkIPtyEKJqI937oesGa34=
Subject key identifier: A0:B7:37:AE:4D:17:E4:04:DC:7E:D8:6E:55:28:18:5D:2B:09:3F:4C
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 019D390A3D37C60F2C2813DD72D32C9FEF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number: 16A7
Signing time: Sun 29 Mar 2026 10:01:05 +0000
Manifest this update: Sun 29 Mar 2026 10:01:05 +0000
Manifest next update: Mon 30 Mar 2026 10:01:05 +0000
Files and hashes: 1: 8o82eGnMQ9kdXbjLZCmd88Y3NYk.roa (hash: lQLIuazU2M1Mw2xConB6RbtwCMEC7BRrPajBXYv168c=)
2: a3C7IbzkbaswXsbovboq2w9BwGQ.roa (hash: ZSzg7SMIqSibkb5Y6lnFSEbHePc9+LOJ33oGgEo573Q=)
3: sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa (hash: 0fsrSElISGl5fc2Oeen1Zkemgio3HCia7HQB3m6xfVc=)
4: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: YgJeazWtulepQ3BAY8xMsLerzsUwbMIvJ4qVlaNECVg=)
5: z9e4MYEp5ML-wSYz0dIO1W_R8-M.roa (hash: 9rf8k+M//WSQYyuu/prsp6q1l8xGdsVv2M04htviNLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3d:37:c6:0f:2c:28:13:dd:72:d3:2c:9f:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Mar 29 10:01:05 2026 GMT
Not After : Mar 30 10:01:05 2026 GMT
Subject: CN=a0b737ae4d17e404dc7ed86e5528185d2b093f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:70:89:38:73:13:1b:7b:1f:ee:19:88:c0:
f7:8a:28:35:e2:09:2e:89:0f:34:e0:0a:1b:69:59:
fa:60:47:29:80:f6:d3:79:e1:af:da:8f:79:ea:71:
7b:60:2b:a0:91:28:b2:f0:6f:54:04:32:98:f0:16:
a9:e6:7b:ac:75:ab:3d:46:ca:2e:03:22:aa:cb:7b:
90:97:b9:42:98:46:fd:72:ed:33:76:02:39:da:96:
ca:95:a4:dc:99:a3:d9:ae:8a:35:9d:4f:e1:a4:ce:
f3:2a:f7:74:88:d9:9a:ec:ea:7a:e3:bc:ed:3a:38:
3f:81:0e:3a:00:4e:28:13:a2:89:76:36:50:fb:e8:
ae:5f:65:d4:89:2a:47:fd:1c:fc:61:c0:0b:10:64:
b6:31:60:83:62:0e:c2:9b:15:49:e1:cf:94:31:47:
90:0c:7e:50:b1:a1:bc:f1:9a:18:f0:77:74:ef:2d:
31:75:6d:3f:84:be:81:d4:a3:24:20:53:37:00:13:
a2:c8:27:5b:b6:fa:94:33:b0:87:33:ac:a1:20:e1:
4a:20:07:e1:a3:67:be:7f:65:f6:22:3e:92:f3:0f:
8d:5e:67:b3:8b:7c:d1:20:17:85:7c:84:8a:c2:1f:
04:38:3b:e8:68:17:a1:7a:38:b2:f3:9b:24:2a:12:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:37:AE:4D:17:E4:04:DC:7E:D8:6E:55:28:18:5D:2B:09:3F:4C
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:96:ad:74:cd:24:67:bf:74:58:36:10:63:31:ca:51:42:39:
4f:c4:6c:a4:57:44:ba:06:8b:db:df:e1:13:b7:4f:82:f5:a6:
d7:f1:2f:64:85:6b:16:97:39:ff:eb:1b:5c:10:30:1f:63:b2:
6b:33:e8:b7:bb:0b:e8:43:31:b3:99:5a:72:b1:8d:72:e4:f7:
92:4b:ec:21:b8:8f:72:c2:01:c6:a4:03:58:39:63:31:33:1a:
6b:c0:5d:6d:74:7a:ec:93:a5:49:8f:31:26:7b:af:28:d9:7c:
d2:24:2b:73:33:53:0a:e5:67:15:6d:32:91:e7:42:32:41:61:
94:cc:2b:c2:88:53:ef:fe:79:07:0c:f2:3c:a5:35:88:be:d9:
08:3f:d7:97:8c:04:ea:75:68:1d:ac:c6:45:b8:75:42:59:72:
ec:13:d3:34:4c:ce:a5:ac:fc:2d:70:4e:06:a1:73:60:e1:23:
df:8e:24:b1:65:76:af:cf:f9:09:57:1e:15:ce:04:10:24:40:
16:46:98:7d:64:67:fc:3c:03:de:68:37:bb:c7:bb:4c:22:e3:
0c:fa:6f:fa:1e:39:5c:14:b5:61:0f:40:2a:50:64:f0:77:cb:
8e:a0:ef:31:50:e8:ed:e4:19:30:1d:09:fa:1d:0f:19:05:c5:
96:75:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:04 2026 by rpki-client