Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: XUWqDGq3fTiMksW+MH4anEOmHbJb6n/zfEm40l6Im4k=
Subject key identifier: E4:6C:0D:30:98:DA:5D:5D:D1:67:53:30:0E:AF:24:76:97:6D:28:E4
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 019D3A1D0A11AEFDF81C9645862BF5822211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 0BAC
Signing time: Sun 29 Mar 2026 15:01:14 +0000
Manifest this update: Sun 29 Mar 2026 15:01:14 +0000
Manifest next update: Mon 30 Mar 2026 15:01:14 +0000
Files and hashes: 1: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (hash: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: 7ZXhlKO/ZBN4JFH/gJHp5nvNpF5shbtax0RaXK17dJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:0a:11:ae:fd:f8:1c:96:45:86:2b:f5:82:22:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Mar 29 15:01:14 2026 GMT
Not After : Mar 30 15:01:14 2026 GMT
Subject: CN=e46c0d3098da5d5dd16753300eaf2476976d28e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:d6:51:5d:d2:7b:ca:e5:39:97:a4:78:f3:
f5:59:db:41:f4:c2:0e:ed:aa:4a:9b:5f:94:c4:d1:
09:34:fc:39:57:9c:22:a3:eb:fa:07:19:d8:9b:c2:
df:a6:01:b1:09:81:1c:d8:65:86:24:83:d4:d2:59:
74:51:f4:e0:2f:41:d9:fe:88:1b:ba:66:74:c8:06:
17:6b:2d:b2:a7:4b:8e:d0:7e:63:3a:b5:a7:3a:f1:
01:e2:7f:ca:bc:fc:86:e7:96:8f:6b:ea:fb:0c:17:
70:b5:52:e2:1e:7e:ec:56:61:d7:eb:32:39:59:5e:
0f:9e:6f:ee:69:87:f1:51:83:2d:4a:b5:f6:35:76:
63:66:27:4d:e7:24:02:00:27:75:eb:e4:06:72:46:
8f:e9:0b:4b:83:4d:e7:56:27:8b:76:67:55:26:1d:
2f:00:a2:13:48:31:99:50:e1:c8:4f:d3:07:17:41:
36:d4:73:e5:c8:4e:4c:3c:da:4a:f0:dd:37:a2:79:
cd:ca:fd:e4:48:58:75:38:f3:a2:76:0b:ca:fe:b0:
9a:1d:55:a1:4c:77:d8:13:6b:d4:fc:df:6d:2b:2a:
33:91:65:65:62:d4:7a:fd:8e:28:de:0f:ad:9e:68:
12:56:bb:c4:ea:c8:4d:90:76:88:91:ce:e8:b8:87:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6C:0D:30:98:DA:5D:5D:D1:67:53:30:0E:AF:24:76:97:6D:28:E4
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:30:e2:99:6c:5d:a1:5a:03:ba:28:04:ac:71:ad:36:d3:
93:c3:cb:ad:8a:b1:08:e2:0e:3c:76:90:31:a9:ee:dc:fa:db:
b6:9f:76:98:3f:09:bd:a6:c5:68:dc:e7:73:07:ea:52:bf:24:
e8:a5:80:3c:36:29:fc:24:85:85:b6:3a:6d:e5:be:c0:c5:c7:
a3:04:a9:0c:3b:cb:00:5c:bf:0c:1c:80:1d:9b:21:73:ad:ca:
27:13:e5:75:86:d1:1b:9a:0d:f8:28:73:e7:4e:f4:14:01:f4:
69:b9:f3:cf:49:9d:3d:aa:41:7f:54:0e:1a:54:f0:bd:35:41:
81:ac:d1:5f:b1:c3:4d:d1:e1:b6:4a:a0:48:c2:91:bf:93:9f:
e2:43:5b:c1:f9:35:47:f7:0f:42:5a:8d:55:a0:2c:64:5a:8b:
07:39:c6:0f:4a:09:1a:f6:1a:2d:36:5b:1a:3c:33:a7:43:b8:
5e:c2:2d:70:fb:ac:b5:ee:e6:80:43:07:cf:99:d9:b0:52:93:
be:c1:f4:6d:a4:81:06:4b:bd:99:42:35:fb:41:64:ed:33:07:
9a:86:80:a8:7d:17:7b:ab:b4:70:55:e5:30:00:b0:54:48:f2:
78:32:9d:69:23:03:b8:b6:d8:31:2c:1c:35:77:e6:26:6c:59:
72:91:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:29 2026 by rpki-client