Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: uz235YWM8Ost1mDlwWVCpX6TTM/FMISThUxrL7syChc=
Subject key identifier: 3E:58:56:3C:A5:F3:6B:47:DF:52:CE:18:91:AE:F9:D7:D5:9F:DD:9E
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019CC82BDC3A960CE01BD6110565B9456A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1857
Signing time: Sat 07 Mar 2026 12:00:43 +0000
Manifest this update: Sat 07 Mar 2026 12:00:43 +0000
Manifest next update: Sun 08 Mar 2026 12:00:43 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: tUHfC770kyAk/MWoqVxpVvB2Y5d2DgA8+g4bDGGf7DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:2b:dc:3a:96:0c:e0:1b:d6:11:05:65:b9:45:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Mar 7 12:00:43 2026 GMT
Not After : Mar 8 12:00:43 2026 GMT
Subject: CN=3e58563ca5f36b47df52ce1891aef9d7d59fdd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:74:6e:7c:a1:c4:03:26:39:cf:99:8d:a1:
4e:73:e9:6c:e5:9e:2d:2d:38:b5:c9:f2:18:06:37:
70:4e:03:65:37:04:ae:3f:d7:b5:0b:27:ee:e6:8c:
ee:c0:db:8f:9c:c5:0b:8a:db:d0:a6:d9:cd:25:ef:
b9:4b:8e:9d:f4:85:45:aa:22:e0:1b:f9:5d:8b:54:
f7:54:be:1c:8e:9e:6b:2d:76:2c:94:88:61:11:89:
c7:eb:15:5f:ae:6e:e8:3a:84:40:fe:e4:b8:2d:51:
89:86:98:2a:68:ed:d1:78:0a:93:73:50:9d:f4:83:
2c:40:01:29:ed:22:92:cb:7e:63:82:88:f6:8a:00:
ef:6e:7c:a0:60:d5:9a:53:78:f0:56:33:27:cb:56:
63:99:93:c6:8e:99:41:66:65:60:ea:f5:96:67:c7:
30:b1:91:76:e1:1f:e4:3a:64:c1:e0:db:2f:2c:54:
1b:48:42:33:7c:aa:49:06:0a:aa:e0:93:eb:73:3e:
31:2a:5b:42:f0:fb:79:51:32:99:69:2e:0a:80:3e:
f4:87:29:b0:6b:94:23:fc:24:14:0c:d7:28:bf:17:
fe:b8:50:e2:d1:83:3b:b9:b4:06:82:a3:a8:84:b4:
cb:d7:69:c0:08:a5:63:11:65:ba:65:5e:d5:4b:c5:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:56:3C:A5:F3:6B:47:DF:52:CE:18:91:AE:F9:D7:D5:9F:DD:9E
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:75:20:9e:2b:84:b9:1b:4f:14:ae:d5:f1:78:9c:d3:ba:58:
75:8b:f4:85:e9:de:4e:49:53:ca:19:06:64:85:6c:88:90:37:
58:95:8e:be:5c:78:1c:9f:4a:57:99:cc:af:35:c2:ec:6b:76:
29:a1:e3:05:ca:a6:f8:fe:69:c4:85:f0:2b:75:bd:94:4e:4d:
90:9d:d2:cd:05:62:e8:d4:0a:8e:80:5b:d7:df:a3:f7:22:13:
34:4f:ca:dc:f5:79:19:2c:58:97:62:cd:28:ca:8e:94:ab:68:
b2:6c:3c:c2:e2:af:0b:a8:cb:75:0b:df:b7:04:61:10:81:3f:
69:5f:43:b1:92:b2:69:42:63:56:98:af:9a:34:1d:57:6f:95:
c9:73:44:a6:f5:2a:60:b8:c8:2b:e6:b6:05:ab:89:8e:7b:dd:
e0:95:6c:f1:d8:4d:a4:2f:7c:f7:b3:91:4e:88:bb:18:c2:92:
eb:79:56:9d:57:69:a6:74:51:6e:92:32:96:f1:a8:b0:2f:59:
d8:47:46:fd:cc:bf:fb:be:08:84:af:19:39:a8:e5:08:3d:a3:
cf:73:1e:7c:64:06:a2:e0:9e:b8:4f:97:33:fd:52:df:34:61:
c4:ed:fa:6c:69:05:b9:02:23:28:7c:a4:42:11:89:30:f0:04:
9c:5a:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:56:28 2026 by rpki-client