Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: PWLp/W30+baidx+X8b0sLxo0AEIsPXzrJ+PnyatoHX0=
Subject key identifier: D3:94:AB:01:77:1E:37:E1:D4:27:48:91:00:5D:90:1C:81:E0:13:37
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019D389C0FC1326ED98785AE5CB1653E0B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 18AA
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: PHg3Ww569zMDLEj_XkzXkt_l28U.roa (hash: 5pJ4hX6iwllF4hbtS1Bn9jqzOhPSmXxQOqAVEn4F03k=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: tXnXi4M2yxOitEY3+P16aGJjbN3YwN6qVvbjLJblixg=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0f:c1:32:6e:d9:87:85:ae:5c:b1:65:3e:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=d394ab01771e37e1d4274891005d901c81e01337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:41:9d:b0:de:17:8a:66:3f:72:32:fe:e7:
be:fb:be:f1:d4:f8:11:69:8b:cb:b4:04:82:62:c4:
d3:95:57:6c:fe:18:5b:16:91:3b:0c:8c:23:73:95:
e8:8c:0c:8d:3a:42:6d:8f:6f:ed:7d:36:29:41:4f:
d2:f4:2c:23:c4:b0:e6:e1:a4:db:c3:db:85:89:80:
2a:4b:85:aa:01:8d:44:ba:1b:db:80:fd:8b:6c:2d:
df:94:92:e6:a6:7c:74:97:9d:00:8f:76:6c:21:ea:
6a:ff:7b:6c:9b:d8:0d:33:16:ed:e8:e6:d8:c9:bf:
7c:98:88:7b:9b:67:47:64:48:91:fb:5c:b8:43:a9:
37:ab:e2:36:e2:9f:72:3e:5d:fb:3f:7c:92:2f:14:
20:13:85:0a:af:b8:94:9c:b4:5b:12:31:1d:a9:00:
bd:6b:54:f3:1f:8d:4b:10:a7:ce:e3:65:ae:2d:c1:
d8:33:8e:7c:b9:ba:3f:e8:a2:99:4e:c6:8f:c2:a0:
a6:41:6c:aa:75:a6:90:d0:1a:58:fc:5f:88:1a:87:
6b:ff:16:d9:31:28:60:87:d3:b8:d9:12:ea:0f:b7:
54:95:b0:d7:f9:c9:71:a3:89:95:83:dd:da:3f:00:
b3:d0:98:bf:b6:e4:fc:bc:35:55:0f:8b:8c:28:93:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:AB:01:77:1E:37:E1:D4:27:48:91:00:5D:90:1C:81:E0:13:37
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:27:ca:fc:7a:16:51:e5:90:e9:fe:db:0c:10:45:30:9d:a0:
80:b7:80:5d:9b:ac:78:cc:80:0b:2c:b7:52:82:7a:a7:e1:4e:
c7:82:8e:40:68:f4:18:12:43:13:c6:70:3e:75:36:68:c1:89:
4f:d6:70:b3:f2:a1:68:6c:2d:e8:35:73:f5:34:03:d1:2b:f4:
ae:55:f0:6c:27:41:69:5c:49:d5:6e:95:03:a4:dd:01:22:7d:
c9:31:55:61:26:de:1a:46:2e:99:96:a3:c4:3e:75:52:b6:66:
8f:7f:22:a9:fc:b1:80:62:aa:a1:98:dc:f3:36:57:43:8b:d1:
46:d5:e4:c4:ef:ff:f3:1a:c7:57:36:63:9b:39:87:7f:c0:0f:
9b:98:60:d3:3b:b9:55:53:2b:a5:4c:6e:6e:95:3f:2a:25:8a:
d1:e2:0c:e4:00:86:18:9f:d1:92:64:34:e5:d1:f1:4b:62:35:
13:cd:59:39:32:c7:1e:51:10:9a:d1:80:55:f4:57:91:79:ed:
f9:e9:10:71:6d:68:db:6d:b3:9f:60:d6:39:03:92:1d:d0:22:
34:94:57:cc:9d:86:43:0c:33:ae:02:a4:cc:4f:28:21:d4:85:
25:55:77:b1:4f:dc:42:f2:01:8c:63:a5:bd:34:14:13:e4:25:
47:78:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:33 2026 by rpki-client