
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.mft
File: wk0dEKV0Xfho1slnsAehVscj8MY.mft (raw, json)
Hash identifier: RNSFNbBcZGbYBhYUG6i2MsS6GpCL+JpbfGtvQ6DOSOE=
Subject key identifier: B9:F9:99:2F:2A:16:BB:C1:90:E7:35:A5:54:03:A5:72:F1:9B:05:44
Authority key identifier: C2:4D:1D:10:A5:74:5D:F8:68:D6:C9:67:B0:07:A1:56:C7:23:F0:C6
Certificate issuer: /CN=c24d1d10a5745df868d6c967b007a156c723f0c6
Certificate serial: 019D38D2D43866987E8B14654AFC6C9E3087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0dEKV0Xfho1slnsAehVscj8MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.mft
Manifest number: 7E
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: cLE7A5ERUJ4lAaSk1pMn6XXf4B0.roa (hash: qVCp3QCWBQiOuI+XY+asaXOeDfzdXjqFdqeYsE7cNPE=)
2: wk0dEKV0Xfho1slnsAehVscj8MY.crl (hash: ozmEB5KBtKyXmbK6kumPXP93eNE/kyjYrn8BBMez7IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0dEKV0Xfho1slnsAehVscj8MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d4:38:66:98:7e:8b:14:65:4a:fc:6c:9e:30:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1d10a5745df868d6c967b007a156c723f0c6
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=b9f9992f2a16bbc190e735a55403a572f19b0544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:46:c2:ee:3f:54:f9:4c:1a:57:5f:de:8c:
28:4a:cc:4c:65:09:ae:6e:49:2d:ef:93:40:83:6c:
a5:a9:ce:95:95:c3:74:b5:4e:cb:80:68:a9:37:3d:
c1:e1:ab:b3:93:eb:d6:de:f7:f4:c7:bf:56:90:b2:
0b:6c:c7:30:e3:e6:68:be:fd:39:dc:0b:9c:5e:d1:
2d:65:07:65:fa:8a:a1:88:21:89:61:d1:51:0c:26:
1c:cb:f1:d7:21:ad:19:00:b2:3c:6b:e8:06:d1:0c:
5c:6e:30:bf:2a:01:31:9a:0a:d0:a5:dd:5f:f5:31:
65:e0:5d:f5:90:b0:16:33:a9:43:62:9b:3b:3f:4f:
b3:9d:23:83:1c:9c:12:41:85:77:39:63:cb:37:84:
fa:76:ad:74:bb:60:6c:72:e1:c9:f2:0a:65:76:4f:
02:ad:9e:cc:8c:b2:a1:5e:c2:f4:0c:2f:99:60:ff:
09:6e:27:b0:ae:cc:cb:88:5a:15:9e:df:12:b7:92:
e5:66:c0:81:60:0f:d4:96:d5:3c:10:35:39:6c:07:
8f:a5:25:ce:27:3e:a2:6f:d0:08:03:c4:a5:d6:66:
a9:15:72:d4:82:5b:82:d0:2b:1f:a4:7b:5f:61:f9:
98:3c:59:65:cc:17:51:1e:f6:6a:70:19:92:48:dd:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:99:2F:2A:16:BB:C1:90:E7:35:A5:54:03:A5:72:F1:9B:05:44
X509v3 Authority Key Identifier:
keyid:C2:4D:1D:10:A5:74:5D:F8:68:D6:C9:67:B0:07:A1:56:C7:23:F0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0dEKV0Xfho1slnsAehVscj8MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/73060f-7f01-43e9-837a-284a7781ed1d/1/wk0dEKV0Xfho1slnsAehVscj8MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:51:4b:bf:41:2c:43:72:a6:d3:08:ec:41:13:87:4f:06:1a:
b7:84:4c:4a:47:22:33:77:79:ca:57:4d:08:51:fe:54:01:ea:
f1:77:dc:0f:48:71:ed:4c:9f:bd:05:2c:14:7a:9b:76:ef:35:
44:01:d9:65:ef:4b:86:07:29:75:c8:4e:a6:33:bd:8e:89:9e:
4a:0c:c6:01:73:d4:1c:08:00:95:53:a3:8b:ae:ce:1a:67:3b:
9b:0b:c1:26:d3:bd:49:b6:df:a1:69:5e:9c:7d:3b:9b:1d:07:
0f:60:93:d2:76:d5:16:d7:1c:1c:8d:0e:e9:a8:00:a4:12:11:
81:56:a5:05:22:b8:ff:5d:fc:b1:20:65:3b:0f:f2:6e:50:c2:
cc:26:51:87:ec:ef:ac:c2:fc:0b:1c:73:de:12:3c:f8:b4:f5:
c0:ba:1a:a4:d2:8d:55:eb:64:91:6b:35:1e:08:0c:80:62:6f:
f9:5e:4c:d3:8f:db:06:20:da:a5:70:ce:5f:39:01:c3:0c:68:
c5:8c:b3:f7:48:bb:be:26:3a:4f:cc:4c:c0:44:0d:48:1c:52:
d9:31:66:16:32:1b:0a:33:01:c8:ab:36:ed:84:25:d6:97:c8:
2a:b8:df:9e:8c:7c:db:b9:f0:89:96:cc:68:67:0f:00:49:b8:
7d:53:8b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:24 2026 by rpki-client