Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: n4deavutwiRNsFfJc7aFI3CTvPnO1wo8xTJHgSFNx7Y=
Subject key identifier: 7E:63:3B:A5:9E:CF:A3:C6:CC:55:36:FD:D7:5B:41:CF:95:97:41:8F
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019CBE4D3BE43F243F9E61B75510857C1532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 12AF
Signing time: Thu 05 Mar 2026 14:00:58 +0000
Manifest this update: Thu 05 Mar 2026 14:00:58 +0000
Manifest next update: Fri 06 Mar 2026 14:00:58 +0000
Files and hashes: 1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: 3ccRtSjOyCcDBllOcgZPqY5q1blA3RokikmOnM765mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:4d:3b:e4:3f:24:3f:9e:61:b7:55:10:85:7c:15:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Mar 5 14:00:58 2026 GMT
Not After : Mar 6 14:00:58 2026 GMT
Subject: CN=7e633ba59ecfa3c6cc5536fdd75b41cf9597418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:53:c6:e3:01:ba:26:5e:2c:f2:be:9e:2c:
de:86:11:65:85:78:48:b0:15:dd:b1:27:86:75:30:
13:5d:df:fe:cd:ce:85:82:82:94:a2:61:4b:9b:e4:
92:d4:01:f4:dd:cd:8b:e6:8c:56:3c:03:e0:9a:4c:
99:6c:94:e2:4e:88:73:36:4d:1f:10:d9:8d:89:05:
7f:1c:ab:81:de:7f:51:94:4e:08:34:64:4d:77:00:
14:4f:c5:41:c0:41:25:0b:6a:d5:bf:bd:19:06:1d:
18:cf:cb:f1:97:fd:16:94:f2:28:4f:9d:45:5b:aa:
00:98:20:4c:47:c6:06:0b:21:2e:9f:d2:cf:ed:5d:
2d:14:d7:06:54:a0:88:87:f3:e2:3a:81:c4:40:9c:
a5:5a:57:70:6b:6b:40:b2:cb:ac:db:e7:58:58:fa:
7b:15:56:af:ff:4b:73:3e:8c:b9:a9:90:9e:0b:26:
44:c0:39:2c:17:50:d5:55:e5:03:8b:a1:0a:e9:be:
3a:61:f8:bd:1b:f2:17:f2:fb:0c:16:05:02:5d:54:
18:88:42:e5:6d:12:83:17:64:8e:fa:20:d0:b5:72:
98:7d:df:4c:ec:a2:d8:d5:c4:dc:90:c2:2d:30:33:
1c:87:17:4b:71:6d:0d:bc:b2:d6:46:11:c6:b3:1a:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:3B:A5:9E:CF:A3:C6:CC:55:36:FD:D7:5B:41:CF:95:97:41:8F
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ab:d4:61:7c:3a:de:4f:7f:3f:b1:4e:5a:12:20:ca:de:ac:
4b:40:ef:c9:f2:15:6c:ec:48:7c:8c:ef:e4:ce:bc:ff:95:c8:
2c:f6:de:9c:fd:58:1f:33:29:7a:17:d7:6c:24:97:bf:48:98:
7a:c9:fe:8d:36:07:b4:0e:e9:a7:88:f5:f1:c7:01:19:56:7d:
9a:de:99:fb:c3:36:ad:27:50:46:06:ff:80:7e:a1:44:50:96:
17:60:6b:00:31:d8:42:b2:51:d4:11:93:cb:f5:80:19:9f:0d:
18:f4:a2:81:ab:12:3b:e0:13:62:c8:31:70:8e:4e:3a:25:17:
52:bb:af:cc:c7:00:00:1d:ae:12:7b:9d:ad:80:0e:cb:01:e0:
81:5d:95:fd:f8:d2:d7:e1:66:95:4b:11:8e:5d:eb:b2:72:70:
67:a1:0d:d7:9c:4a:9e:7e:95:f0:38:a0:3d:19:2e:3a:ef:17:
41:6c:42:93:25:51:8c:38:88:a0:f0:43:58:d4:bb:98:3e:38:
f5:fe:3b:9a:8d:79:89:4d:57:f6:40:8a:65:74:59:ae:54:a5:
fe:fd:9c:e5:5c:07:5c:08:38:86:37:7f:45:8b:9f:3a:b8:4e:
07:ec:b9:74:eb:8b:fd:8b:c1:ce:ef:28:5c:67:eb:46:ab:e2:
72:9d:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:06:30 2026 by rpki-client