Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: +ToCKhdxxpVPgnXW/KMQIOLQKsP7ime1ErJ9pHbDkiQ=
Subject key identifier: E7:F3:5D:B2:03:20:9F:96:7A:67:91:2C:49:DA:1E:50:1D:5A:9B:F7
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019D37892D058097EFD6B93E7D1E0330449F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:29 +0000
Manifest this update: Sun 29 Mar 2026 03:00:29 +0000
Manifest next update: Mon 30 Mar 2026 03:00:29 +0000
Files and hashes: 1: WrB_6nEScPqneHKwQCA6QB4d4QA.roa (hash: 85wjB4Jt2bkwpAvi6/jsQd4XiX94VRI5UhSDcmPSSb0=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: jrf4cZk2aGqFTcFRPp+PsJmtTyCOhgAHXPo8rDAEwcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2d:05:80:97:ef:d6:b9:3e:7d:1e:03:30:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Mar 29 03:00:29 2026 GMT
Not After : Mar 30 03:00:29 2026 GMT
Subject: CN=e7f35db203209f967a67912c49da1e501d5a9bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:b9:f2:44:48:3c:cd:4e:71:df:4f:2a:d8:
57:a1:d8:52:fe:62:27:cb:f9:e2:12:c1:f1:a6:d2:
bc:0c:a2:e3:51:b7:15:68:67:19:6a:66:8f:19:c6:
ed:25:df:76:95:5f:11:f8:fd:94:b5:fd:34:24:5c:
4a:e3:bd:72:f8:12:70:cb:97:ec:6e:62:49:9b:c3:
fa:52:af:af:e0:e2:92:5a:34:68:32:b0:77:e1:b4:
19:46:5d:1c:38:db:a2:ac:39:fa:1a:8e:eb:a5:9b:
22:0b:7a:f3:31:fe:03:37:5e:2b:f5:15:b0:45:08:
67:44:08:06:e9:32:c8:77:18:fa:53:f4:35:2d:c0:
e2:25:22:75:54:dc:77:dd:1b:8e:06:26:81:44:0b:
df:5b:28:a5:3f:16:4f:53:5f:4a:dd:e6:a4:dc:e8:
89:87:d5:ec:d6:ef:0c:c7:96:79:4d:ff:e8:a6:15:
dc:dd:9f:66:ce:88:b3:94:00:5b:32:27:03:72:2f:
9b:12:d2:9b:67:a7:4a:dd:74:5d:67:7f:01:20:32:
06:8c:64:87:00:4c:db:d8:c7:ef:df:21:8e:cd:7c:
b9:e9:a3:84:62:bd:ee:78:a2:f3:6e:ab:ff:9d:0a:
4f:dc:7e:9d:13:8f:46:b6:06:83:d3:a0:cb:e3:f5:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:5D:B2:03:20:9F:96:7A:67:91:2C:49:DA:1E:50:1D:5A:9B:F7
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:4d:1e:c9:5d:b3:bc:59:81:c5:64:e6:19:45:50:a7:63:
96:26:36:a9:4c:45:c4:4b:15:a0:9c:fc:5c:41:7c:f2:b1:ee:
65:dc:11:56:52:10:b7:a4:27:1f:8d:ad:94:0c:3a:48:e9:dc:
68:95:dc:3e:57:fb:41:0b:00:86:82:6d:a1:d2:2f:8d:e5:a2:
c6:77:e9:9f:2f:59:ef:4e:b5:23:e8:50:61:b3:78:59:4f:5b:
b2:78:40:ec:c2:d0:56:e4:eb:3a:cb:46:a7:8d:8e:e1:b4:4a:
59:e0:07:ad:66:e4:64:30:c9:98:07:19:20:77:fe:a6:9c:8c:
bc:6f:58:ca:e0:c9:b3:dc:40:a1:dc:d7:1c:aa:26:91:40:96:
b1:71:21:c1:13:4f:de:4f:5b:63:75:fd:16:64:cc:2b:4e:e6:
0b:ec:86:d5:79:1f:b1:f7:c1:65:25:9f:8e:af:f8:ba:f6:73:
6d:d6:c9:50:eb:84:72:b6:a6:dc:44:ec:2e:54:8d:84:21:99:
89:89:58:9b:94:10:40:07:b9:ec:02:ee:17:22:e8:5c:1a:0f:
5d:01:e1:88:92:d0:28:73:37:5e:18:f4:5c:14:d5:09:e3:f1:
d1:ed:fa:4f:a6:e6:23:0e:b4:c0:2a:a9:6c:4a:38:63:b4:c7:
31:21:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:20 2026 by rpki-client