Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier: OcjqsBa+KJhQcLjFJVKO+scRPfQIYeQDDw5JPUwjLmk=
Subject key identifier: 05:85:F3:E6:81:52:67:8B:66:31:79:16:D8:97:13:42:B8:DD:A8:1B
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019CE6365138B0FDF171CBBFE99FAAF41EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number: 0CA6
Signing time: Fri 13 Mar 2026 08:00:45 +0000
Manifest this update: Fri 13 Mar 2026 08:00:45 +0000
Manifest next update: Sat 14 Mar 2026 08:00:45 +0000
Files and hashes: 1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: CqUeZLroiXp33FZuLsRoqVIlMgxD/VNHSTpf55y92n0=)
2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:51:38:b0:fd:f1:71:cb:bf:e9:9f:aa:f4:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Mar 13 08:00:45 2026 GMT
Not After : Mar 14 08:00:45 2026 GMT
Subject: CN=0585f3e68152678b66317916d8971342b8dda81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:d7:d0:05:f0:4e:9c:65:9e:d1:a2:bb:b1:
05:c0:17:34:89:66:e5:7e:5a:05:14:29:5e:49:8e:
11:fa:57:39:c7:6d:74:92:70:50:03:c6:ea:95:66:
05:3a:17:98:2a:1e:39:cf:a5:0c:71:bf:e3:a6:6a:
5d:2b:70:3a:6c:47:d8:4c:04:08:8a:63:87:87:0b:
d2:72:21:f1:3a:a0:20:c6:9a:ed:6d:f5:64:ee:3e:
88:ce:53:e2:b6:23:33:b9:2f:40:62:a1:09:6c:62:
1e:f2:a5:9b:dc:bb:15:24:e5:86:19:3f:87:6f:8f:
ec:56:b3:94:ab:11:13:19:ef:f4:37:4f:be:f9:b3:
7c:b1:09:29:00:5a:6b:28:ee:12:ec:91:14:fe:ab:
dc:53:0e:f3:cc:c8:43:63:b3:e7:af:00:bf:93:04:
07:f5:d2:58:dd:26:c5:f6:fb:6c:c4:e7:4e:0f:dd:
ab:ef:df:75:00:20:9a:d8:73:4c:9d:9c:69:70:4d:
3f:7f:d3:cc:da:af:0e:db:78:7c:7d:a5:a1:32:64:
30:1f:7f:2b:71:ba:b2:e8:6b:d1:36:64:ad:d8:13:
d1:e6:24:81:40:7d:cb:b0:cb:a0:bf:6a:6b:16:ce:
61:61:64:e8:a1:51:b7:89:9d:64:23:5c:99:28:a0:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:F3:E6:81:52:67:8B:66:31:79:16:D8:97:13:42:B8:DD:A8:1B
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a2:5d:dd:50:90:b4:4e:0b:51:b1:c1:cb:d9:0b:98:e9:5e:
18:39:1f:8b:35:5f:fd:06:53:64:03:fe:56:de:14:08:bc:c8:
54:bb:3e:5f:3a:49:af:b1:b7:8b:3b:87:25:25:e9:05:7e:e3:
6f:68:64:07:88:a0:07:c0:4d:70:a9:39:89:b6:45:4b:a3:f7:
b6:a5:55:a1:cd:72:05:95:9a:3a:50:cd:48:4c:28:b9:5a:5d:
32:53:df:8b:b1:64:3a:07:60:ba:bd:20:42:7a:63:a6:16:26:
18:7e:96:d2:3c:b3:15:e2:da:d1:d1:44:9f:ba:db:e4:56:f0:
2d:45:37:23:99:cc:1b:d3:5c:1e:a1:ba:f6:ca:95:51:68:a5:
bd:bc:52:70:2c:85:a4:9b:6c:e2:32:3f:c3:32:55:93:4d:aa:
6f:f2:fb:54:9f:76:85:31:4b:1f:9d:da:e8:39:9d:b4:12:db:
fb:e3:80:22:4c:7c:00:e4:d6:cd:f1:83:a0:b0:fd:d1:a7:d9:
b6:a4:28:ec:69:1a:7e:37:92:70:a8:28:40:da:70:c7:1d:06:
a3:7c:9b:dc:35:e2:37:bb:21:6a:74:a0:1a:d8:1a:a7:a9:cd:
a4:c4:92:ec:b7:2d:d3:2b:00:3c:0f:43:8a:07:55:f9:8b:32:
fc:bd:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:48 2026 by rpki-client