Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: JliQG4kRN9jL1ch/ba/tW9muqKUcLFkatc2W3iJRAEc=
Subject key identifier: 20:93:48:2B:EE:33:FE:C3:9E:EA:1B:4E:89:EB:5A:AA:62:FA:93:74
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 019CE47ED61B73F76853D4060B6543B9587C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 054A
Signing time: Fri 13 Mar 2026 00:00:43 +0000
Manifest this update: Fri 13 Mar 2026 00:00:43 +0000
Manifest next update: Sat 14 Mar 2026 00:00:43 +0000
Files and hashes: 1: 5RryIGVI4D8yV9FJRN0qOChCYEE.roa (hash: ZXZohq24aG1ejohkX4O2iDPWcy5mbU13m+Vqo0/udR8=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: EA2elRq0HEAvJTNfVSz2BHhcaID2b6sfOePplMCALt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:d6:1b:73:f7:68:53:d4:06:0b:65:43:b9:58:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Mar 13 00:00:43 2026 GMT
Not After : Mar 14 00:00:43 2026 GMT
Subject: CN=2093482bee33fec39eea1b4e89eb5aaa62fa9374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:ec:cf:ab:02:0e:81:1a:97:84:be:ef:21:
dd:8f:c0:c1:66:3e:be:0d:d4:5b:c4:fc:d1:fd:9a:
09:a0:28:e8:3a:91:4a:6e:77:93:d7:b8:e1:2d:f1:
f8:bd:a3:1a:0b:8d:9c:07:dd:79:98:2a:9a:ed:55:
69:92:fe:89:b8:b0:35:9b:05:a2:42:8b:a9:7c:76:
f1:18:00:c3:52:e9:c1:34:48:55:64:ae:4f:21:4d:
f1:80:69:58:70:41:5e:73:b0:e2:6b:cf:a2:d0:c3:
1c:f5:8c:f6:7f:03:b6:22:6e:ff:32:f1:e0:0f:0f:
d6:bd:27:2c:ac:f2:7c:5c:76:89:12:a2:b1:08:bf:
5a:e9:c2:40:eb:ee:24:5a:8a:3d:d6:b7:a7:26:50:
f7:1d:1b:28:02:c4:62:c7:81:c4:12:ff:9d:e9:8c:
05:53:94:77:a9:8d:21:89:aa:68:4d:36:2b:aa:9b:
10:15:ba:10:3b:e9:9c:4c:2c:74:30:75:7e:d0:59:
7c:f8:7b:30:d8:eb:2e:b1:5f:26:35:28:19:7f:6f:
10:7a:47:96:aa:17:fe:c6:86:47:66:8e:f6:f4:73:
a9:2f:4e:08:b4:fc:f3:23:38:0b:c5:5e:e4:fd:72:
c0:45:cf:59:79:56:6f:c5:61:53:f8:d0:d5:32:c5:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:48:2B:EE:33:FE:C3:9E:EA:1B:4E:89:EB:5A:AA:62:FA:93:74
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:50:bd:38:83:dd:83:41:a7:40:34:2d:f4:6a:f6:88:80:71:
12:98:87:ca:85:05:97:52:1a:a0:cb:b4:6b:0b:5c:fb:29:0e:
b2:c6:a3:8e:f4:f5:2e:19:1e:dc:44:34:96:b4:1d:bc:d9:7e:
f6:9a:c3:77:a1:3c:16:f2:76:d3:d1:c1:53:0e:4d:ec:e9:e4:
77:94:e4:53:49:07:e9:6e:24:95:ff:4e:3e:22:f5:43:13:8a:
c3:69:ff:fa:e8:37:b3:fa:67:47:05:b3:68:f7:8a:47:74:1a:
cd:70:7a:fb:60:04:7f:a3:a1:44:bc:fb:e3:ed:65:a7:0a:3a:
72:3c:3d:5b:b4:b5:80:d5:bf:09:09:71:16:f1:ff:f5:e0:c4:
0c:98:7e:0c:87:f0:9d:4f:be:2e:d9:2b:41:64:05:17:0c:b5:
4d:24:dd:ac:25:38:d0:72:70:5c:5e:c8:b0:48:99:6e:8a:f5:
11:4e:1e:45:f8:2b:d8:01:63:db:c0:66:c3:75:0d:d7:dd:6c:
d3:d6:9c:44:b5:58:7c:4a:1b:14:43:92:3f:08:58:a1:8a:f8:
cd:da:49:f8:05:34:1c:d6:25:86:ee:d8:da:aa:5d:e6:16:71:
f9:b1:de:d1:41:78:47:45:b8:5f:40:05:43:8c:81:a6:fa:8e:
e6:d4:73:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:28:37 2026 by rpki-client