Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: +ViDeRKwBLDVxmZmI6U2Czfo9zwB4wd1plv46gISiWw=
Subject key identifier: 46:98:AC:48:82:AD:A5:9C:98:51:72:EF:7E:2F:78:17:7A:3C:0C:01
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019D37C092B84B34379C8A6E4125B213F3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 04E0
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: gokgh42dRWcaSI4iaXBSdCcdn1FdWlqIxMj49WNl3Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:92:b8:4b:34:37:9c:8a:6e:41:25:b2:13:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=4698ac4882ada59c985172ef7e2f78177a3c0c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:07:40:45:81:81:ed:de:31:9b:45:38:bb:
e9:a0:be:db:71:b4:31:39:3d:af:29:bc:19:dc:01:
0f:0d:c5:7f:c7:9e:c9:c0:5e:7f:39:42:b7:0d:7a:
9a:d7:35:53:f2:a7:0c:eb:e7:2e:e3:39:e7:42:3e:
17:59:1b:4b:17:21:15:2e:88:65:68:6f:c8:70:90:
49:fb:77:ab:86:10:0a:0d:39:71:8f:0e:5d:2d:ee:
f0:e6:bd:a1:51:32:f7:8c:19:19:94:9e:7e:81:6b:
14:64:82:cc:e0:69:e3:9a:c5:72:6d:a4:76:c9:fd:
c5:63:b2:79:c4:8b:d3:26:87:4d:ab:5e:24:1a:d1:
8e:41:62:1e:8d:01:98:64:90:60:97:df:b2:bf:b8:
ed:21:82:07:a3:b1:4c:c7:72:5a:41:0d:40:d9:dd:
07:43:f0:ad:db:88:97:d9:ca:22:17:7a:10:16:fb:
98:7a:65:cf:1b:a1:ff:e3:87:bb:f4:cf:ef:6b:98:
19:c0:42:ab:8b:06:a7:e1:9b:ea:f7:23:7c:0c:d5:
11:23:06:18:c4:7d:74:9d:f3:34:31:f1:47:f2:ca:
62:fc:5a:94:be:31:1e:a5:be:e4:c3:fc:50:74:54:
07:8a:f1:1b:1c:3e:b4:f9:b2:4e:7d:df:73:91:a8:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:AC:48:82:AD:A5:9C:98:51:72:EF:7E:2F:78:17:7A:3C:0C:01
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:38:77:38:cc:41:68:5e:e3:64:31:aa:76:bc:fb:76:25:6f:
c5:41:fe:40:24:e7:e9:48:c6:5e:a2:1c:b1:e7:57:3a:e6:cd:
e7:c7:26:ca:e3:74:3f:d9:ae:75:bc:5d:c4:70:07:ef:2d:6e:
9c:d1:69:32:b9:d6:15:31:25:a0:57:bd:ca:3c:4d:fb:1f:2c:
58:6d:32:59:6a:fe:9c:a5:2b:3f:00:db:0a:40:c8:9a:8d:47:
6f:ea:28:d8:ed:f8:63:fb:9b:81:4a:0e:b0:93:4c:ef:96:b6:
18:b8:c1:ee:78:c1:74:d9:a2:d7:d5:b2:49:d2:37:a7:d5:61:
d5:93:54:60:49:b7:b8:ee:48:76:7d:01:af:d4:2c:84:bb:68:
08:e2:f8:11:3a:cc:88:65:21:ec:d2:56:fd:09:ba:da:7f:12:
26:9c:3a:d5:9d:18:d2:c2:39:5a:87:43:2d:0c:1b:73:74:ef:
26:a1:d3:fb:02:a1:d1:e2:57:f8:78:21:65:f6:62:89:9d:10:
07:e5:fb:9f:df:06:b5:d0:b0:83:0e:4e:1b:28:b6:38:cb:76:
a8:f9:37:4e:18:15:68:0d:ae:53:9e:db:ca:4f:bc:c7:9e:8f:
26:6e:d0:1c:9d:09:0c:70:0d:80:e9:d7:91:fc:09:1a:98:53:
e8:96:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:48 2026 by rpki-client