Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: 9yBtV7EdZ66uXZkRGXzCwPtKsf1YHLtETJ5xkUyNinY=
Subject key identifier: 4D:20:08:54:20:CF:F2:0E:73:74:45:33:A9:DA:93:CD:55:76:8F:DE
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019E9B85441C1E01B68F76F60E7496B73BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 06:01:02 +0000
Manifest this update: Sat 06 Jun 2026 06:01:02 +0000
Manifest next update: Sun 07 Jun 2026 06:01:02 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: 91i7NyrXHMdmm0cSB8Y9iWwchqws7BVCA9Zw3YAsKv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:85:44:1c:1e:01:b6:8f:76:f6:0e:74:96:b7:3b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Jun 6 06:01:02 2026 GMT
Not After : Jun 7 06:01:02 2026 GMT
Subject: CN=4d20085420cff20e73744533a9da93cd55768fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:3f:9f:bf:f5:a7:fb:01:2b:40:6a:22:ac:
06:3a:e1:79:1d:5b:9c:73:47:f2:1c:19:55:8d:5c:
15:55:46:ee:5a:66:4a:08:ec:2e:fe:55:00:49:8a:
19:c6:69:ab:28:0d:f8:4a:74:0c:e4:4b:27:1a:28:
4b:a2:96:ef:8a:74:ae:da:4b:88:6c:f2:63:4f:2f:
be:4c:53:fa:e4:03:bb:0c:a5:ae:80:7f:be:1a:ae:
85:de:9b:ed:88:eb:28:53:39:84:de:e3:75:64:bf:
4c:ce:bb:a6:2c:de:02:76:28:ad:21:8b:46:2c:35:
04:64:cf:f2:05:82:e6:84:ba:32:71:bf:67:d1:38:
ca:a6:0d:7e:54:95:3c:00:d8:91:1e:24:d0:43:94:
85:04:13:61:c2:4b:bd:e5:1d:97:4b:77:72:02:c4:
dd:39:ab:ef:c0:89:57:43:6b:3e:75:d8:71:fc:f3:
0c:8d:43:c1:b3:67:e6:17:3e:fe:19:8c:46:ef:f4:
c8:f7:e1:06:6e:72:e2:1b:0d:b1:9f:f2:0b:3c:93:
bd:64:30:f3:38:14:2a:72:f5:2a:4c:b2:b3:99:d1:
b3:9f:3c:1a:91:09:59:fc:ae:73:b6:f8:69:07:35:
ee:c0:07:c0:bd:75:ec:01:25:71:22:26:74:ed:cb:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:08:54:20:CF:F2:0E:73:74:45:33:A9:DA:93:CD:55:76:8F:DE
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:b7:f4:94:77:01:0e:95:57:57:7e:6e:e9:d6:09:e2:73:
5b:83:29:1e:f5:9b:b2:08:66:80:11:68:f7:28:df:7f:79:a2:
3d:3d:d7:63:70:b9:9b:2a:69:1a:9e:f6:7a:08:7b:d2:2c:6a:
53:13:36:24:9f:ec:cf:26:90:11:7b:1d:a8:ea:83:99:98:8b:
32:be:9f:55:1a:c1:29:2e:23:5b:c1:db:c6:34:a7:10:87:4d:
af:87:0a:09:7f:0f:b8:5e:a1:60:e7:5f:57:cc:be:1e:0c:06:
25:eb:f4:6a:e5:23:8e:8c:93:15:57:fc:59:3d:ba:ed:5f:3d:
59:cb:3c:ad:b5:c9:ec:d9:7c:ab:97:fc:21:c4:94:0c:19:5b:
93:e8:25:97:b2:0f:70:98:44:d7:30:13:7e:5a:c8:a4:2c:f5:
14:2e:c7:34:64:79:ee:d2:bc:ad:8a:55:ff:ba:e9:69:f7:86:
d0:f4:b9:ad:9e:cf:41:70:9d:6f:fa:d5:8d:9e:d8:90:5d:4a:
3e:28:84:78:23:70:05:a1:14:14:6d:87:f3:c2:af:1d:af:54:
1f:c5:57:85:57:7f:d1:b1:52:ce:90:2e:6e:84:0c:f4:c4:22:
d5:46:7d:fb:1e:5f:ad:bc:34:f1:85:95:63:49:dc:a9:89:c1:
2c:46:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:37:53 2026 by rpki-client