Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: dfJlmGKcExuCKKM/U6sD1b9j/3P5foopILC6FulGkTE=
Subject key identifier: 0D:F5:BD:47:2B:6A:9D:24:F6:94:52:E8:20:4A:00:C6:6B:A1:A1:1D
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 019D39AE6D06601198F0D575FA611029B902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:25 +0000
Manifest this update: Sun 29 Mar 2026 13:00:25 +0000
Manifest next update: Mon 30 Mar 2026 13:00:25 +0000
Files and hashes: 1: 6V_G9gsVnZgMxjUsmipYSTZCa_Q.roa (hash: 8vwGqAEHUA9stliHzrXfudIca0hLWVZRYgeWkRbQdXU=)
2: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: OCCeMTGUQRns8duQq2qjAtxltNKgT2slO5MLp9qFnbE=)
3: jwxhR7P3jbNHcQy0YutNaHO3jkE.roa (hash: i8m3hyHSA+Y/TnrAHEYaj/Stv9BCwcsKeOlhfB0mCAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6d:06:60:11:98:f0:d5:75:fa:61:10:29:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Mar 29 13:00:25 2026 GMT
Not After : Mar 30 13:00:25 2026 GMT
Subject: CN=0df5bd472b6a9d24f69452e8204a00c66ba1a11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:1b:34:33:b2:fa:77:c5:8b:62:93:70:03:
73:4c:19:07:a4:a4:50:ef:0c:a6:dc:8e:27:5b:fb:
f7:13:64:1a:fb:9c:d3:98:5a:d4:72:95:17:93:a9:
57:57:82:56:48:0a:1b:2a:93:c3:04:64:bd:5c:74:
e2:21:68:11:fb:ea:52:47:e1:07:3a:08:09:53:35:
86:9a:8e:8d:05:e4:75:68:0a:d6:0a:fc:8d:8a:0f:
7b:23:6a:03:0d:5f:7c:14:0a:7a:90:90:c1:1f:96:
b4:37:c2:f4:0d:23:e8:5c:6b:00:00:e7:87:f0:00:
ac:5b:f0:36:c6:36:c1:58:7b:d0:77:c9:34:b8:4d:
d3:89:2b:3e:b1:83:e1:76:5c:95:f8:ff:86:a9:88:
aa:05:1a:57:85:b6:f7:e1:87:e1:9a:56:4e:aa:8d:
c6:d5:35:1f:e5:2b:06:ee:b6:58:17:56:54:6c:a3:
47:e0:84:ff:f4:58:ae:04:16:8e:c9:cf:29:11:0c:
75:08:ea:0c:73:c7:6b:ba:f5:3a:9b:de:b0:c7:1d:
63:d9:76:a3:d0:d4:cf:d2:94:3a:74:45:f2:22:80:
e7:de:6d:fa:27:d0:2c:81:59:6e:d2:1a:c8:da:59:
85:a6:69:13:b0:18:22:e3:74:e9:fa:95:cd:e8:2b:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:BD:47:2B:6A:9D:24:F6:94:52:E8:20:4A:00:C6:6B:A1:A1:1D
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:48:03:df:f0:62:41:0a:10:f9:bb:65:d2:ff:c2:3e:60:6c:
c8:76:7e:d0:85:5b:90:55:a8:8b:44:ed:68:15:36:21:46:6b:
2e:8c:29:0e:b2:d9:e6:ed:7d:51:51:52:e0:59:67:78:5a:74:
20:e5:52:df:07:af:1b:59:8a:07:2f:6b:be:33:7f:37:f8:22:
7a:04:8e:64:88:6e:1b:2e:9c:6a:4a:1a:a2:17:07:57:76:74:
9a:7c:10:1f:d5:b3:81:30:ca:8c:a8:cd:b9:dc:86:69:37:8a:
e4:c6:eb:63:3f:bf:b5:b8:f8:4b:8c:f6:e4:81:b5:13:8b:20:
b2:ee:18:7e:ae:32:31:4b:43:32:dd:8f:80:2a:99:63:aa:1d:
7c:a6:3e:49:fe:f2:fc:c6:0a:f8:30:3c:7f:92:40:b7:f0:3d:
13:ab:3f:8d:19:2d:ab:7c:fa:49:e7:73:9c:77:99:86:04:78:
8f:03:a9:d8:43:fd:e3:f2:d0:8c:7c:b9:c3:9a:9a:23:98:6e:
00:11:d9:03:f6:e1:3d:9b:2d:c9:04:e9:84:1b:c8:21:aa:b7:
64:b4:78:f3:7f:85:cd:0f:5e:82:d4:bf:f1:35:29:f3:2d:1c:
aa:bc:23:83:19:07:8b:9b:e5:de:cd:64:a3:2e:98:dd:29:67:
c3:b2:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:07 2026 by rpki-client