Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
File: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft (raw, json)
Hash identifier: f8h/tiwiUD8w9HOapOXJtnX09qYchgJ98RkiAHkOi8s=
Subject key identifier: 8C:06:D8:09:07:79:F0:7C:E2:99:D7:42:C0:A5:EA:B1:CF:11:1C:BA
Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8
Certificate serial: 019D38D3B24C40F4F30F1867368149F09CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
Manifest number: 02F1
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: TEXm9KrsMUEKUPk1jEnmZgD0IK0.roa (hash: eO/8L9pLcpErOVloeSJcO/Ypgo8LgxO3Ojcx2J5Fa8g=)
2: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl (hash: vle0wu/RUauATSgLUOm7J/jCwV8BvFnBwbUQG0ahkck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b2:4c:40:f4:f3:0f:18:67:36:81:49:f0:9c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=8c06d8090779f07ce299d742c0a5eab1cf111cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:f5:b2:46:da:f9:be:f7:dc:7f:96:26:83:
da:97:6c:1d:60:06:62:d1:bf:20:d0:5d:28:d1:b2:
dd:ee:05:ea:5d:01:71:1b:e3:d1:56:85:65:f5:b3:
d7:76:1c:09:a3:d7:66:c6:9c:3d:fc:89:38:aa:5e:
93:00:99:3f:34:0d:e5:31:ee:48:49:a8:97:e1:e3:
27:c8:62:67:78:d3:23:3f:c7:63:5e:f6:4e:3b:c5:
2c:08:4c:f2:84:11:63:2f:d6:68:6c:09:23:fd:8d:
d4:4b:62:91:ca:ba:92:9c:86:3e:16:b7:1b:4f:57:
2f:d8:8b:be:6d:ec:fe:b3:02:b9:3a:29:67:60:d9:
4f:e9:92:7f:dd:42:31:a3:fa:5a:03:f4:dd:e2:4e:
44:c0:61:4c:23:3e:28:8f:da:72:d6:99:03:6a:6c:
cc:91:41:09:bc:83:cb:12:6d:64:cc:c3:12:28:fd:
1d:c1:04:61:a6:1c:10:2f:ad:3c:b3:c9:b4:e6:74:
d8:6e:8a:08:26:ba:ed:33:49:86:1f:cc:f6:43:bf:
25:50:49:fd:11:e5:99:bd:f4:67:70:a6:0e:f4:57:
b2:b9:ed:b1:e5:c2:97:40:c9:ee:2f:51:06:0b:2d:
77:0b:ff:2c:1f:94:6e:e5:f8:1f:68:52:db:bd:5b:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:D8:09:07:79:F0:7C:E2:99:D7:42:C0:A5:EA:B1:CF:11:1C:BA
X509v3 Authority Key Identifier:
keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d5:93:ae:f3:35:c6:b0:b3:c9:71:21:7c:57:8b:24:19:cb:
84:70:91:c9:41:24:85:cd:4b:94:37:fd:ef:5e:f6:ca:e1:57:
ce:ec:e0:7c:c5:2c:36:27:1c:b7:a0:a1:b4:c0:f0:ad:e6:bb:
65:f9:4f:f3:1c:73:95:61:f3:8c:9c:2c:48:98:11:cd:96:ff:
dc:a0:8f:a5:34:78:d2:83:8c:d4:ab:58:1c:f0:2a:06:f1:41:
53:88:ce:85:e4:3b:f0:22:6b:d7:a1:2d:8a:61:59:9f:d0:2a:
f2:7b:a4:bd:2a:6c:4c:e0:10:14:e8:01:83:65:20:db:bd:45:
23:36:40:d3:a4:3b:59:64:2a:b2:09:04:81:e0:64:7c:b6:dd:
bb:fc:c2:62:ae:58:ee:a3:d4:e4:78:da:6b:16:0d:c9:35:cd:
bb:b0:5a:49:b1:e8:a0:a7:22:09:fa:f1:ea:fa:98:8c:e7:d4:
af:9f:a8:8d:65:bf:87:90:16:96:34:b3:72:01:37:7a:5c:6e:
f1:f9:bd:64:79:e4:18:ee:91:e0:91:f5:b9:2c:9d:64:e0:79:
02:74:0e:01:8c:56:0c:e6:24:f8:60:a6:b0:c0:48:0b:51:5b:
03:d4:71:b9:5c:97:ef:94:fb:98:1a:07:88:96:70:7b:d7:48:
db:34:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:41 2026 by rpki-client