Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: Ou5yu6rHk8nRUXVsEnzok6q03PPHCuaPDM31dOooBS4=
Subject key identifier: 45:EA:93:9C:FF:57:6B:BE:8F:2D:44:12:41:C1:DB:7D:45:CF:BA:8C
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019D38D3262CCEEDEBBD05D6B2D8839D698F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: KryCaxT64_DbJj9jN-VGjBxwrAo.roa (hash: Tm0gGiIBbT70VOlPTXJPfE+loxLa156dIkZIGPLoeOg=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: b8vK4hkinOK/zTBwiQMDksl/gD4u47APSQ6N+dLit/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:26:2c:ce:ed:eb:bd:05:d6:b2:d8:83:9d:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=45ea939cff576bbe8f2d441241c1db7d45cfba8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:15:60:52:3d:5a:c8:56:63:c7:f1:49:5f:
d7:9c:57:13:18:6a:52:15:22:e8:c6:4a:b8:1b:17:
1a:e6:90:3d:82:16:3f:a4:a7:1e:46:86:d8:6a:a9:
11:fe:bb:3d:d9:a2:c0:c9:c6:11:5e:09:31:8c:71:
21:a3:2b:e0:6e:bd:73:65:ef:94:f8:7b:b6:ad:b0:
ea:0a:bc:89:7b:25:8c:02:cc:67:f3:d1:d3:f3:a5:
02:52:71:9b:37:c6:80:c0:e4:d7:98:70:a7:10:be:
8a:bd:05:d9:53:73:a7:4a:df:9a:41:38:dd:85:71:
14:b5:8d:9a:1c:82:05:39:08:24:3b:a7:4f:8b:a5:
94:3a:46:fc:a0:e5:fb:60:53:37:90:2a:3b:2f:f0:
6b:f6:7e:7f:58:12:21:b7:f2:47:99:74:3f:ef:6c:
36:bc:af:24:a8:41:42:8d:46:3c:8c:c0:7e:f3:88:
72:8b:45:b9:16:d4:5e:35:58:3b:66:48:e5:68:3e:
28:41:a3:be:65:37:6f:27:4f:ac:9a:49:9a:08:ff:
4a:8d:35:a1:88:0c:75:0f:6a:82:23:7d:fd:c8:4d:
3c:3b:2f:87:42:4e:6e:b0:c0:5e:42:f6:d3:85:89:
3f:01:cf:58:e5:d3:af:b8:c9:ab:5f:13:3c:85:bd:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:93:9C:FF:57:6B:BE:8F:2D:44:12:41:C1:DB:7D:45:CF:BA:8C
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d3:2e:d7:a4:26:53:b1:ff:15:ef:80:34:63:bf:6d:60:77:
1b:55:0b:2f:eb:d1:48:38:8e:73:d4:af:54:99:ab:e1:81:86:
40:91:71:0c:62:5e:1d:a4:96:98:9d:0c:2d:8b:cd:40:8d:d6:
5a:e4:4a:df:a9:66:e6:52:cf:5e:fa:e8:32:d4:14:72:24:63:
74:7a:8c:3d:3b:90:83:2e:3b:20:bc:69:42:d0:81:26:a0:08:
85:bd:6b:5d:4b:1a:82:1f:49:fb:f9:5a:23:15:ef:6c:35:5a:
15:7b:c4:92:38:ec:27:6d:e5:bd:30:a4:15:3b:3e:e0:f3:2d:
e2:bd:da:af:14:95:6e:2c:fc:8d:49:70:62:4d:cd:8e:24:a4:
4b:7b:e1:6e:3b:3c:fb:71:ff:c1:6c:d1:f7:6a:ec:bd:ff:bd:
64:bd:75:60:3c:c6:2e:4e:93:c0:1a:d9:8b:80:da:13:dd:5a:
cc:06:e6:ba:64:9f:1e:5a:42:88:f5:f0:6a:83:2d:4c:b4:49:
4a:b3:59:f9:08:94:79:e7:49:68:41:98:3d:90:03:80:a1:55:
c9:f1:db:7a:95:f6:a9:ed:e7:ef:b8:5e:6f:37:5e:76:ef:da:
3a:18:8b:62:53:5a:88:7e:63:2e:c7:c3:5a:be:c3:03:4f:a5:
e1:69:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:59 2026 by rpki-client