Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json)
Hash identifier: /cc/HO6+bvpzhdm4MdFUjxU4yorVcHaiXF2iUn39oZ8=
Subject key identifier: 8B:66:8B:13:07:64:55:FA:47:6F:77:CE:95:85:D7:F4:F3:9E:81:8D
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 019D389BE5473D96C8C19C5BEA6AD575CD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
Manifest number: 0346
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: 1yjt5dmVKbfg9xfVUdqxr84kv83M4I/QYSPr4V+ufR4=)
2: zc3uA_Kqejq-ynl5hw7DgsICqZs.roa (hash: J23fc0kk/YQdneIepC92Zz7vs5gfl3zjCFcARQvJKXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e5:47:3d:96:c8:c1:9c:5b:ea:6a:d5:75:cd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=8b668b13076455fa476f77ce9585d7f4f39e818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:b8:93:b1:7d:d4:13:59:9f:62:97:6c:af:
d2:93:17:33:d8:0c:6b:54:bb:c7:68:8d:65:a7:e7:
8c:00:5a:66:04:d3:84:75:93:90:e6:c3:fb:85:9f:
ee:11:55:12:7e:54:1c:cd:56:11:18:39:91:2c:d1:
fa:e6:c6:eb:e3:9b:d6:e2:59:81:ae:dc:be:5b:a5:
d9:fd:c5:4f:ea:be:1d:bc:f5:cb:a4:8a:d3:33:8e:
af:29:d8:55:3a:6e:7b:32:5a:ef:6f:63:77:23:38:
1f:c2:3f:4e:78:ce:81:f5:0b:06:22:01:9b:ed:44:
1a:ce:e1:95:a8:14:9e:17:45:72:7f:58:b2:f3:eb:
2a:58:cb:c3:d9:c1:3a:0e:2c:cf:7b:d5:0e:5f:72:
a8:c7:35:87:bd:30:d3:d1:85:26:b1:50:55:33:e7:
77:46:02:1d:3b:33:6e:c3:1e:16:a2:99:d1:27:22:
4d:26:df:36:8d:4a:9d:bb:e5:58:b3:5e:e9:1d:01:
c3:ff:e5:2d:39:17:a8:91:32:e9:39:01:c1:ba:30:
13:dc:34:5d:c8:97:43:1e:a2:e9:80:2b:ba:0f:d4:
ef:54:cd:06:ae:da:7c:ab:40:2c:d9:84:d8:94:15:
81:e1:12:58:70:18:a6:07:a5:c0:23:20:6a:f1:8c:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:8B:13:07:64:55:FA:47:6F:77:CE:95:85:D7:F4:F3:9E:81:8D
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e7:f6:39:ec:b2:71:5d:e6:03:45:e1:2a:9c:bd:ed:8b:24:
1b:99:3a:fb:cd:f7:c0:12:b6:db:3b:e5:24:d9:3a:dc:c6:48:
3f:14:8b:f7:36:ee:fb:15:72:5c:f9:95:42:55:56:ce:3f:81:
a0:f8:c7:53:e6:4a:83:a9:73:66:ce:a7:a9:f1:ce:1e:b3:63:
5f:f9:e3:25:dc:fd:b2:bb:68:da:a8:cd:6d:0a:59:f1:e5:9a:
74:9e:8e:c7:ae:34:83:e6:5a:88:cb:0c:0a:0f:e7:46:94:f4:
e9:5b:e2:8a:72:52:01:d8:fb:fc:7c:cd:e7:f1:1b:9e:58:d3:
17:f1:de:2d:85:61:57:c4:26:f7:31:9f:fd:66:d5:52:d1:27:
3c:10:08:94:3a:7b:7f:2d:a9:2f:cc:04:a3:29:b7:7c:9d:74:
f4:d3:80:88:cf:de:c1:e6:66:6e:7f:91:6c:f5:d9:a2:f5:69:
f9:0c:78:8b:da:a7:9f:9d:7e:30:af:8e:d3:a5:b4:f7:1d:bb:
f2:42:a0:91:30:78:5f:1f:38:00:e1:ab:94:d9:4d:69:30:3e:
e5:22:ee:62:0a:33:55:ce:93:85:f3:f2:d2:a5:49:ef:c7:dc:
47:d7:d4:9d:d3:83:e2:31:12:41:6c:a7:8b:27:ed:82:57:39:
e7:98:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:15 2026 by rpki-client