Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: nruEbYCs2NfjAijKftkJfeFpliEDH173qbxMvOnZGEQ=
Subject key identifier: 59:E1:C0:8D:99:02:A8:F5:C4:C0:FE:E2:DC:F6:AE:2C:5C:E3:86:C9
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019CE2225D1CCFE8B5756B364E7C4AF4C206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 0D00
Signing time: Thu 12 Mar 2026 13:00:28 +0000
Manifest this update: Thu 12 Mar 2026 13:00:28 +0000
Manifest next update: Fri 13 Mar 2026 13:00:28 +0000
Files and hashes: 1: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (hash: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8=)
2: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (hash: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ=)
3: NjHKuubvlyQaDe6G06rOD1BcaRY.roa (hash: PZZctgeIeCE44qT9n7ZGgk3AP9NOWa0WxX8jRLoy034=)
4: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (hash: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk=)
5: n6wjoRn8vuXLiBZK6YUuKxpVigI.roa (hash: kDFxvzggk1wOuyNg5FpJqYvgPEZaD8Cam2+bcXXeVYY=)
6: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (hash: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw=)
7: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: ddnOPO+7B/E2SQ53855vmJUZ2xaX5o6Q7MS5y9NrPDc=)
8: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (hash: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:5d:1c:cf:e8:b5:75:6b:36:4e:7c:4a:f4:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Mar 12 13:00:28 2026 GMT
Not After : Mar 13 13:00:28 2026 GMT
Subject: CN=59e1c08d9902a8f5c4c0fee2dcf6ae2c5ce386c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:65:70:f2:a0:18:2e:66:5c:9f:f4:2d:a9:
02:e8:88:7c:f0:07:9c:ea:0d:a4:d9:7c:3e:0d:95:
7a:15:00:c0:bc:0c:a1:83:5d:ce:f6:7b:d0:9d:2a:
10:90:61:e1:48:2e:da:09:91:bb:ca:d4:cd:ad:79:
7b:cd:58:bd:aa:df:35:c1:9c:7f:7b:fb:bd:49:1f:
a8:80:cf:73:8d:d1:6b:ab:d8:b5:c2:ae:e6:d9:d4:
8a:9a:78:0b:78:e9:31:53:b8:56:d4:b8:03:2b:52:
01:2f:32:dc:01:61:65:0f:38:01:d8:c7:07:e9:80:
d5:d4:dc:73:ec:c6:e4:cf:45:b5:32:9a:07:16:ea:
68:fd:f5:1c:ab:9c:80:75:6e:8f:99:ea:72:b2:1e:
f4:2f:86:47:23:9c:ef:20:c7:8b:24:2a:b3:c3:98:
dc:bb:cd:6f:84:bd:26:84:03:e8:25:2e:ea:85:84:
29:7a:41:c5:ae:4c:d5:c1:b0:b4:e5:19:ac:47:53:
2b:a3:df:07:b1:2a:23:34:2c:4c:79:c6:8d:f9:d1:
7a:6f:95:00:f4:05:a5:e1:b5:a6:9f:ba:fb:8b:96:
06:97:99:73:43:48:dc:e7:a0:dd:e0:cf:94:df:e9:
06:1b:bb:df:32:da:58:2c:78:c6:6e:9b:ee:ba:61:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:C0:8D:99:02:A8:F5:C4:C0:FE:E2:DC:F6:AE:2C:5C:E3:86:C9
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:81:4c:74:d3:6a:19:d9:1e:16:e1:be:68:52:4b:a3:45:a2:
3d:ec:8c:6c:41:42:87:ef:82:5f:a3:ee:dc:df:62:32:32:39:
d1:36:ab:8c:72:87:81:e5:ec:5e:78:da:63:1a:dd:1d:0e:0c:
c6:2c:fa:c1:ff:af:87:05:aa:83:b3:a1:4d:65:76:58:8d:53:
b1:58:e4:0c:f7:92:0a:cc:d8:60:07:95:50:f8:2a:53:b1:9a:
57:71:9a:9a:d2:f2:13:e7:64:f4:43:3e:3c:4b:4d:15:03:c6:
b2:ba:80:8c:f9:1c:ce:bd:90:e9:fb:87:eb:3a:0c:93:6c:e4:
13:f2:d4:80:1f:fd:15:91:d9:d6:bb:8b:b5:65:4b:aa:1c:c3:
ee:05:01:6d:7f:96:28:53:f4:78:79:78:d6:05:e8:a1:33:ca:
72:ba:42:0d:6b:0b:e4:82:16:e2:b6:05:11:e1:c5:1a:c0:a8:
81:43:54:0f:52:db:0b:3e:c0:fa:36:d8:a9:90:b0:87:27:58:
ad:4b:5c:c1:09:30:2b:20:8a:f0:c5:99:1f:ec:1a:36:41:e2:
68:db:48:92:a0:6b:d6:f3:ce:9d:90:dc:7b:6e:22:9c:25:6b:
ad:9d:ea:08:f8:c3:80:90:93:a3:72:7d:f4:b0:e5:5c:a7:87:
e6:7f:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:48 2026 by rpki-client