Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier: S3HXVis4aBa1Zj89MuwXwsjl9SVptfvYbRqms32fZAc=
Subject key identifier: 3B:73:E5:E5:8E:35:1D:B7:C8:03:68:B2:E7:D1:D2:CA:8B:5D:69:A1
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 019D378996EEA3C827322179646F12182B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number: 0682
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: rNCgVq7jcbxrYI/4Y0EFTGp+iw5MvXKhssgpcsCC7CY=)
2: yXtUNYm9UJDhZ6FworfWme9OQyo.roa (hash: rr8EZy6xf85lv5Hhtm/H3eXN/QDSdw1UbOFotOK3AWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:96:ee:a3:c8:27:32:21:79:64:6f:12:18:2b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=3b73e5e58e351db7c80368b2e7d1d2ca8b5d69a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:6f:fc:af:93:1b:54:72:de:67:15:0e:87:
c0:5b:de:30:e3:aa:60:c8:3d:eb:af:54:76:52:e7:
8c:74:1a:16:a0:76:cc:4f:ec:6e:ca:b5:b2:7a:18:
30:a0:7f:6e:cf:21:39:c8:19:c8:86:7c:69:8c:15:
67:41:48:3f:9e:ec:bf:d3:9d:b1:95:fd:8d:72:06:
ff:31:5e:b5:92:5e:aa:1a:63:42:07:54:8b:d4:17:
fe:af:7c:06:6d:2a:37:48:7d:d2:44:05:84:da:75:
96:5f:03:33:7c:47:ec:1b:24:11:98:02:26:90:02:
a9:90:ea:f8:1e:3e:b0:4c:66:d4:8d:71:a8:d0:b8:
52:45:f3:80:19:38:9c:b3:d4:8f:26:80:49:28:fa:
11:09:80:2a:d4:d2:59:d6:58:c8:e0:87:b9:50:f4:
31:56:fe:c8:b8:3f:93:29:44:57:f4:b5:96:b5:db:
ee:c2:f7:bf:62:19:76:6b:3a:4a:d9:9d:16:51:d7:
b7:3f:9d:36:7a:31:8b:4b:7d:b5:90:73:f7:67:84:
a9:0a:ec:f9:53:cb:37:21:b3:39:7a:5d:89:b0:ce:
77:dd:7f:a1:b6:f7:27:a8:62:5f:77:9f:3f:e7:21:
0e:a1:7c:4a:cb:1a:a2:3e:11:44:63:2f:eb:a1:5f:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:E5:E5:8E:35:1D:B7:C8:03:68:B2:E7:D1:D2:CA:8B:5D:69:A1
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:56:53:20:27:f7:70:cf:fa:f2:e4:ff:fc:07:99:c6:ca:9c:
3b:04:6a:8d:81:62:21:82:a6:13:d6:00:3e:7c:42:6c:d8:b7:
b6:1d:e9:19:78:dc:b6:4d:a2:a1:87:21:cf:2c:b2:12:21:78:
1d:3a:97:3e:0e:66:1a:12:52:9b:ba:c1:2a:5e:5d:b0:e4:8c:
8d:61:79:24:32:1a:c8:2a:b4:17:35:b7:b5:2c:9b:95:38:70:
28:08:b2:61:43:0d:68:48:10:9f:1b:3e:dc:a3:75:0e:0d:e1:
08:ff:c5:24:7b:78:ae:ea:69:d5:a5:c9:a6:0a:68:44:cc:04:
94:34:17:98:19:1e:6e:97:15:38:16:07:c1:5f:43:ad:af:30:
29:b3:87:78:f4:86:ba:35:df:04:86:b8:4e:89:c7:f6:ff:c3:
8e:a0:0c:9e:4d:49:1d:4a:21:e1:c1:4d:1b:1b:e7:2d:b0:1c:
25:c8:35:06:22:39:52:6d:37:11:8f:a7:a0:d4:73:19:66:20:
18:b9:f3:25:59:9c:04:e3:7c:bb:6c:ac:55:61:d6:74:9b:05:
cd:be:8e:14:9d:1b:52:0c:af:ae:59:33:d0:62:98:ed:c5:b4:
22:ed:33:a2:e1:75:5e:f7:6a:0b:59:57:fa:92:ba:10:e5:c9:
83:02:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:30 2026 by rpki-client