Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: /yKoBPj0xigfJ4QG6/5zX5hckSxDSXHX/eS2D5y9UyU=
Subject key identifier: CE:BC:8C:2D:D2:6B:C4:41:C9:F0:4D:6C:B7:02:6D:14:3F:28:0F:24
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 019D3940BDC3EFFF2D3B4E0B88E1204D3EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa (hash: IFvAqWAV36VhOvXLelo0nvun/QoXpwk8T72OiDJu/UQ=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: ZtPe/e/pIM6fd2SJffB54CdibJaxD2avRkGsmsbXvVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bd:c3:ef:ff:2d:3b:4e:0b:88:e1:20:4d:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=cebc8c2dd26bc441c9f04d6cb7026d143f280f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:65:8d:b4:a7:6f:82:02:26:43:99:b2:e1:
28:46:b6:6a:0c:3a:57:20:a4:61:60:5e:4a:b7:75:
b1:97:d6:88:e5:6d:ce:d5:49:73:2a:ce:e1:58:80:
21:c3:68:df:a6:72:4b:a3:34:d5:1f:d7:b9:ce:fb:
d7:67:7f:81:2c:f6:8b:95:26:14:c8:d5:e1:50:36:
d9:c7:ae:9c:ca:52:14:41:f6:e8:8d:6b:6b:70:05:
a0:54:e1:b3:dc:9b:19:68:3c:3e:ff:77:39:34:b4:
02:3c:2b:df:4c:2e:7a:c2:a6:3a:4f:82:48:69:ba:
ba:b6:9f:3b:47:71:3a:cf:f1:d3:8c:ed:b6:18:89:
45:ee:0e:e4:bf:b5:1b:8c:41:35:3d:7b:ec:4f:0f:
c5:33:0f:ef:60:b9:2a:a3:f4:79:73:65:17:5a:98:
15:f5:5e:b5:76:36:f1:7c:55:12:53:92:7d:4a:5e:
84:65:c9:78:4f:11:aa:13:e7:af:5f:3e:00:10:eb:
ac:5f:9b:0a:56:90:87:03:18:0a:4a:48:d6:53:81:
c1:c8:7c:0a:3d:b7:52:b5:5c:3a:11:7f:cd:c5:bd:
a2:24:bd:4f:f5:24:c4:d4:ca:72:2c:4a:3a:b5:57:
56:d8:7a:80:ce:8d:b7:4d:ad:49:1c:74:32:2e:d3:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:8C:2D:D2:6B:C4:41:C9:F0:4D:6C:B7:02:6D:14:3F:28:0F:24
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3a:fb:53:c3:de:55:9b:d2:ef:8c:c5:bd:af:6f:27:ca:48:
b4:ee:e2:69:18:03:d5:7f:55:ed:12:06:82:89:1a:9b:0a:ce:
95:3f:5c:a7:c2:8f:63:b5:56:42:94:9a:5a:aa:58:42:2a:d6:
19:21:58:f0:f4:32:b2:29:29:e3:0e:0e:56:98:42:d1:5f:22:
54:7a:1c:18:fc:4b:1d:17:b6:2d:15:cb:4e:22:da:04:af:3b:
88:85:fb:2d:73:0a:f8:9f:52:66:31:09:18:2d:b2:cb:e5:41:
a2:ab:39:7d:f6:f7:f3:63:43:5b:82:d7:d7:92:58:4f:66:93:
24:41:f0:ae:13:e9:90:6e:75:1a:e3:1b:f2:44:3c:1b:d8:38:
8d:e6:1e:db:58:05:f3:79:d7:ad:6d:44:c6:fe:a8:2e:79:2c:
e1:5f:39:0d:69:bb:99:c3:38:ff:7a:89:3a:b2:bd:d3:b3:12:
13:ec:db:56:1d:46:68:58:5e:a2:a8:98:b5:36:a9:5e:b5:d8:
cc:ed:9c:6d:15:11:9d:81:c1:38:d5:9b:f6:bc:c6:65:ce:a3:
75:0d:47:01:70:1e:47:16:27:1a:cd:f9:76:78:de:7d:31:8b:
b8:b0:d9:17:9a:a2:77:1d:c2:d9:c1:76:15:90:a7:4d:7e:6d:
a4:60:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:24 2026 by rpki-client