Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File: wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier: 5i80+M2Vh2X2rDyJJ11q/hfep3zeVV/8USt0pQgii70=
Subject key identifier: BB:34:45:C9:9C:05:16:C1:AC:FD:79:86:F3:79:0D:DC:6D:F0:05:8B
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer: /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial: 019D382EA21A76CF2CF1FB4D8ED1154658EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa (hash: y8rSEBRdZoC/DsraWGFCwBOgPT4J+IhEzX382mx+Nv0=)
2: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: a+KK1Vu32nG64dYMq0xO5t1MLI3EHx+22SF7htzWMTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a2:1a:76:cf:2c:f1:fb:4d:8e:d1:15:46:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=bb3445c99c0516c1acfd7986f3790ddc6df0058b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:ba:a5:78:b6:eb:b0:e6:08:ab:50:67:1e:
4f:17:ab:be:29:a2:2f:ff:e6:9a:19:67:f8:41:cf:
3b:05:2c:c4:64:41:5d:8d:c0:c9:e9:49:9e:8e:af:
10:e5:73:2c:b2:ba:a9:35:92:9b:d4:eb:9d:5e:7e:
fd:7b:d2:72:85:84:e9:b3:76:e6:8a:ba:80:b1:f2:
c4:0f:df:1a:bc:df:94:5b:67:b5:83:88:59:e9:f4:
6b:7b:02:e1:3e:89:be:2b:40:4c:6c:2a:16:95:7e:
c4:94:34:a2:50:fa:87:36:bf:5f:52:7d:c1:72:43:
7d:bf:27:4e:bd:de:30:6e:25:13:59:02:80:35:50:
c5:50:b3:3c:27:15:40:46:6a:d6:c4:c9:3a:29:a8:
c9:a8:47:9b:ca:81:31:98:bf:a1:9e:c2:47:fe:4a:
40:cb:09:47:49:b8:99:87:78:30:d2:28:59:e5:55:
1d:60:0f:ed:a8:19:69:16:1b:54:ed:61:b3:21:0f:
80:c3:25:3d:b6:e0:3e:6f:ac:df:ab:14:cf:fd:34:
9c:da:f1:fc:6d:a4:54:72:74:4b:69:8b:1f:58:f2:
e9:06:ac:9e:9f:80:b1:47:b7:e5:9b:64:e1:1c:47:
9a:e1:d0:2b:74:f1:5f:da:70:c4:b3:c5:0c:cd:00:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:45:C9:9C:05:16:C1:AC:FD:79:86:F3:79:0D:DC:6D:F0:05:8B
X509v3 Authority Key Identifier:
keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:34:92:46:fd:d9:57:bd:d7:2e:5e:c9:5d:30:70:0f:30:
60:e4:84:ed:60:eb:bb:9c:dd:eb:d8:84:e0:7c:a9:d1:a2:1b:
01:dc:d9:2b:17:7f:24:c4:fd:a8:a2:cc:b6:31:97:3d:43:03:
35:24:db:0a:97:ee:d7:d0:ab:a9:d5:3a:3e:8c:ef:52:e5:6d:
86:14:6c:eb:b3:e4:38:be:b9:57:08:fd:55:d8:48:ed:20:93:
7a:3c:9c:32:fc:c6:cb:ff:54:29:27:2c:bb:07:28:b4:c0:e9:
0a:ef:fc:a7:76:2e:32:a4:30:9f:4e:56:35:ac:ef:d2:bc:fb:
08:d5:37:92:dc:8d:22:4f:5f:d4:a8:92:46:f1:be:8e:f0:cc:
cd:bc:9b:40:b5:af:93:f9:4e:f9:43:d3:44:1d:fa:de:d1:57:
92:ae:98:3a:c7:e8:20:6b:a8:9f:9f:40:65:35:b3:5f:a4:ae:
f4:8c:26:e6:d4:ef:39:fa:15:12:64:be:2b:53:b6:9c:d3:37:
4e:c9:38:8d:00:38:6a:c7:cd:45:2f:ff:c1:b1:d8:71:ad:e8:
37:34:0a:f5:03:f7:0e:fc:29:f3:8c:e9:10:ce:94:0c:91:48:
a6:a9:8e:59:df:28:77:0d:0a:9c:3b:49:39:38:56:e8:f1:ab:
b3:77:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:42 2026 by rpki-client