Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier: UhcecxX00rLxw28m84Z4aHsWHVfcCulmZRedjjU2+MA=
Subject key identifier: 2C:A6:57:47:5E:4A:F2:15:49:54:A9:FA:FC:A1:1D:AB:CB:62:DE:1C
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 019D37F770172E7BCAC4834925BA5A1BF4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number: 0F3B
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: wP+6z3gcdjNphUAUz4pJQE5Ll1KB00HoHMGTrYR0hfU=)
2: bVpF-JYq76hoB_KaZysLKYZxssY.roa (hash: SoJIyXdEMWSvR/+6Xh9JWJx82o79MJZiZkGc6eExE4Q=)
3: zlJsdcVG0p77PTXt8jmhe0IabOo.roa (hash: XQoISMsfEzLKJXtLfw9ZR5EQm2J2AG+8D89HY8r5jvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:70:17:2e:7b:ca:c4:83:49:25:ba:5a:1b:f4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=2ca657475e4af2154954a9fafca11dabcb62de1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:1c:16:b1:66:ec:c2:05:6b:e8:3a:2b:37:
34:22:ec:b4:42:d6:ec:d4:f7:15:5f:53:d8:77:b5:
62:6a:8a:3d:75:9e:cc:b7:b7:af:12:7e:ea:b7:f5:
bc:22:01:56:2b:13:6b:23:93:ef:b1:93:70:bb:96:
ed:8c:53:b9:d6:7a:38:17:9a:d3:40:6e:7b:4b:b9:
f5:2f:c1:58:ba:23:e8:98:3a:75:b3:89:7c:f8:7c:
69:df:63:40:c6:0d:52:68:16:e5:65:6e:cb:42:bb:
c5:88:ba:e9:b9:3b:46:43:0c:ce:26:45:75:ad:c8:
b5:1b:7e:a2:52:5c:e2:ad:d2:a0:58:3e:76:af:a5:
f0:c5:e4:ba:18:e9:d2:1e:76:49:3f:d7:49:44:60:
6c:b3:27:61:89:b3:1b:7d:33:e8:1d:b7:c3:ee:c6:
07:97:50:5c:1f:4d:2f:eb:93:eb:fc:9d:03:51:ea:
ed:06:85:f2:3c:22:f6:67:50:41:d5:7d:be:fe:73:
a5:a7:14:35:7c:76:31:1e:88:9b:9b:89:53:9f:48:
cc:51:dd:41:89:23:7d:5d:04:9f:ee:c9:24:2f:fb:
c7:a7:98:7a:1b:71:63:ba:83:4e:56:9f:44:4c:0f:
68:7f:04:9d:a4:32:04:b4:13:e0:68:62:e1:91:ee:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A6:57:47:5E:4A:F2:15:49:54:A9:FA:FC:A1:1D:AB:CB:62:DE:1C
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1a:18:86:38:27:5d:af:e5:58:d7:42:3b:9b:75:55:da:28:
95:b2:3e:51:e3:ac:73:5f:19:62:11:e3:e6:84:ff:1c:d1:83:
25:34:0f:ae:10:54:f0:fc:e4:11:97:74:98:09:f1:b2:fa:cf:
ea:19:ec:52:10:22:d6:ba:3a:86:15:c2:a9:e5:cb:81:69:80:
4f:9d:8c:4d:12:7c:8d:f5:e7:90:9a:2e:9b:38:ae:d5:31:a1:
1a:f1:6f:35:77:aa:f7:d6:dd:76:b3:fa:90:d8:ba:9b:46:10:
da:71:26:ef:7b:03:16:b1:3e:c1:73:cd:91:ad:c0:59:70:de:
5c:46:c6:c5:26:64:44:1d:ff:e9:8f:8b:92:2d:13:f6:be:e4:
0a:27:17:0d:b5:88:d5:63:e7:20:6f:1a:b5:e3:8b:32:26:55:
41:40:33:0a:79:bc:15:a2:70:a9:d5:ea:f5:68:d3:52:07:c1:
d7:1c:20:fc:9f:6d:ab:6c:61:54:f4:ee:e1:7c:fb:b7:1b:34:
5d:2b:f3:89:5a:77:50:ae:bf:e4:c9:fd:aa:e9:3b:7d:42:9f:
34:30:2a:79:95:90:ee:97:bb:cb:ad:74:10:63:ef:94:c7:96:
1c:80:f3:28:f8:a9:01:6d:c3:99:1d:21:06:01:a3:40:22:97:
ab:c7:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:12:51 2026 by rpki-client