Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
File: wvPozdMcgnmN3vk0AfKcfcqmr20.mft (raw, json)
Hash identifier: b0C50N7+9QuRKMLtQCsnBrygu1j/sdJSFxXeNbvbVtA=
Subject key identifier: 78:E2:E3:F8:7A:E3:99:FB:71:31:56:22:0F:AF:7F:E8:75:A5:46:BD
Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
Certificate issuer: /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Certificate serial: 019D3940EDAD89C9A6F3CAD9B8A75D32E6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
Manifest number: 0219
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: Gfv6VShJ4mT0fdnOqNJm0r4Kd0I.roa (hash: qUpgMPynY63Z9VUYkg3HECjUl6zX6JH95LZtBLn9SPc=)
2: wvPozdMcgnmN3vk0AfKcfcqmr20.crl (hash: BpLqeM8NsP9JpxRj8lpGJo76lcdf0azOlnTsCUuXtOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ed:ad:89:c9:a6:f3:ca:d9:b8:a7:5d:32:e6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=78e2e3f87ae399fb713156220faf7fe875a546bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:af:ff:29:fc:f0:aa:e1:fc:4b:6b:5c:c2:
d1:f3:8c:26:8e:aa:15:dd:ae:c5:bb:70:bc:30:fe:
d5:1f:6a:0b:78:3a:55:4e:f8:6e:a5:1b:a0:3a:cc:
03:0e:1f:56:12:fa:03:4d:70:f6:e6:d5:b4:eb:e9:
4c:b3:d6:c9:53:93:a1:4f:58:63:68:51:6c:15:94:
d6:e8:35:41:58:48:de:df:57:5f:30:14:d2:8d:38:
a8:f9:9e:84:52:b0:cf:38:99:b8:f9:26:f4:8c:f7:
0a:d5:55:dc:9d:15:ed:88:bc:7c:7a:1d:27:ef:c6:
1b:e2:ac:1b:ac:70:af:8e:79:04:6f:e4:76:e0:a5:
b3:ad:c0:a3:e3:7f:31:ef:3e:b8:66:78:d7:d3:22:
6f:ef:40:59:d2:33:cc:8b:3f:75:9b:4c:13:26:3f:
bf:81:fe:26:73:07:46:fa:b3:28:ae:f0:ce:ba:e1:
b9:f9:46:5a:8a:c1:41:05:60:19:71:08:cb:de:2d:
93:30:17:b1:e6:20:31:28:4a:27:56:22:d6:ed:f0:
4d:0c:eb:0c:7f:c8:82:68:c6:30:58:c8:0c:ae:de:
02:06:5d:64:4a:13:5e:86:7f:dc:59:95:38:03:aa:
59:c2:6d:31:4b:54:63:0a:b6:08:90:de:0a:82:96:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:E3:F8:7A:E3:99:FB:71:31:56:22:0F:AF:7F:E8:75:A5:46:BD
X509v3 Authority Key Identifier:
keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:32:f2:26:23:8b:ca:ad:88:da:6c:a0:34:0a:4d:f0:89:72:
19:f6:cb:d2:e5:9b:c3:84:df:64:3b:54:67:9e:aa:4f:07:f7:
60:2b:d8:b2:f2:e0:57:c5:08:db:ac:bd:1f:6c:76:df:9f:5f:
8a:33:7a:82:5f:97:76:9c:28:54:b8:2d:24:d8:10:c0:d8:c4:
03:3f:a0:df:da:eb:28:7f:bf:a1:97:77:31:6a:6e:8d:6f:61:
fb:31:88:55:92:3e:f1:29:76:63:7f:4b:34:d2:b8:c8:ba:4b:
46:15:a5:58:63:36:4a:7f:e3:e5:6c:93:7e:b0:3f:5e:0f:2c:
0b:ef:03:4d:a8:1e:9c:b6:66:e6:03:7c:7c:d5:bb:29:4c:2f:
6e:d1:53:02:4f:48:28:d2:85:c7:9c:20:fc:6e:61:b7:78:65:
bc:8a:10:5c:68:a5:22:12:54:de:b2:67:12:ee:ac:d3:4e:a5:
cb:15:8e:74:20:56:90:b6:df:74:7c:8a:dc:f3:1b:04:02:b4:
73:dd:09:05:f8:ea:11:66:f3:f5:8d:08:68:4a:e9:0d:17:41:
21:9c:1c:11:0d:b4:41:d7:e4:bd:15:48:13:3d:85:43:d0:3e:
e8:1a:05:08:23:2a:b8:8a:fe:3b:0d:89:bf:f4:16:84:c9:f5:
bc:73:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:06 2026 by rpki-client