Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: TfewpJ5DRTVLGuXG8XRVYVneG9jcprlPe9gJwZ/GnxI=
Subject key identifier: BC:B0:AC:D0:73:84:6A:16:2E:3C:3E:B4:1A:22:E9:30:1B:6D:CF:1F
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019D39782D157BB3E0DAEDE65450865945EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 16AA
Signing time: Sun 29 Mar 2026 12:01:10 +0000
Manifest this update: Sun 29 Mar 2026 12:01:10 +0000
Manifest next update: Mon 30 Mar 2026 12:01:10 +0000
Files and hashes: 1: 2fDUlbNk_TjJfNmL8k7Qpaq_A4k.roa (hash: AoEFyUvMFK7WBCJaTliv+GG29q2nziZw8E359o15zN8=)
2: gMvc_sE40m271NPynEOBrQzKYWQ.roa (hash: OeLSYnjbKMmBS4VGXJ744NmGmYrVy7bxB46xBnCaSmA=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: /YXGI/55sDUPHyAW5NAwLCJ56XaIxgNPL1ZmwLObL90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:2d:15:7b:b3:e0:da:ed:e6:54:50:86:59:45:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Mar 29 12:01:10 2026 GMT
Not After : Mar 30 12:01:10 2026 GMT
Subject: CN=bcb0acd073846a162e3c3eb41a22e9301b6dcf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:43:71:5d:f1:08:78:85:ed:45:d5:fc:d9:
22:3e:85:8a:d1:93:5e:ac:17:49:80:19:41:b5:d7:
55:e7:0c:57:04:df:40:4f:ec:c0:1d:f2:34:15:03:
d4:81:8f:d4:46:ad:6c:90:06:59:34:9c:68:f6:bb:
b8:6b:e9:f2:26:95:91:58:d9:bc:ff:c6:a9:b4:a5:
95:dd:42:12:99:e5:a2:a4:f7:99:3e:f1:2b:f6:bc:
4f:d0:a7:47:ad:ae:4a:ee:c9:54:e6:25:9b:f0:7c:
b5:ec:51:3d:c1:e5:5e:03:eb:70:2d:d4:e2:57:bb:
68:9a:ee:75:1a:67:62:0c:07:74:d8:2b:be:18:3f:
09:6e:87:59:d5:c6:f3:2e:ee:c0:68:d9:2b:c7:a1:
04:46:6b:b5:6c:27:47:86:5a:d5:e0:a3:e6:06:24:
58:d6:19:58:79:9c:30:50:74:67:a0:f6:38:7c:03:
7f:f7:2b:93:53:52:c0:c0:e2:4f:71:f5:34:66:bb:
51:c7:5d:ea:6a:81:4c:30:0a:82:3b:91:78:01:ee:
ea:24:c0:0b:46:5e:19:32:7f:db:91:a8:28:ea:07:
7c:65:45:05:db:83:5d:b0:60:59:d9:c7:c8:b2:3b:
23:2d:4f:7a:42:30:1d:6e:d1:1d:b9:f9:33:82:2d:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:AC:D0:73:84:6A:16:2E:3C:3E:B4:1A:22:E9:30:1B:6D:CF:1F
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e5:25:f3:13:c2:51:a2:90:72:1c:89:2b:29:73:78:0d:9f:
a6:00:7f:d2:09:37:18:eb:b4:98:ef:dc:86:5f:3d:58:11:47:
a6:80:fc:6a:6e:73:67:8e:75:e3:53:35:26:ad:54:7f:77:82:
aa:48:cd:ee:6b:8d:34:de:68:ec:0f:fb:82:a0:99:96:70:d6:
9c:81:6f:1a:db:3b:2e:12:52:61:da:77:75:cc:f4:7a:83:6e:
44:67:99:92:3c:c5:de:9d:ed:d5:e2:ef:87:77:24:91:fd:fc:
f7:98:50:cd:e0:1f:9b:ef:c1:12:cf:9b:9b:fb:5c:3f:f7:9b:
30:12:1b:cf:3b:e0:1f:de:98:23:9d:38:70:f4:4e:98:e7:d7:
60:dc:94:cf:e8:e5:da:08:e7:f4:95:5a:6a:a9:14:12:8f:5a:
ad:64:c4:e5:ad:ad:8a:82:01:12:8e:95:fe:b8:43:02:5c:12:
75:43:dd:26:f5:71:fa:c3:e5:35:2f:7a:a1:5a:dc:68:6b:09:
42:34:63:6a:ca:15:ca:00:ce:b1:9a:0d:86:ca:1f:85:f0:db:
e1:64:83:44:61:00:41:dc:59:71:b0:71:e5:c2:70:3f:73:83:
ee:30:50:ae:ad:c4:8d:21:b0:d9:c2:38:12:66:01:e5:52:a2:
bd:64:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:41 2026 by rpki-client