Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: JOSSBkWLSZ+YFbeLunoF0yoNKylpbOYdZounrj9J4s8=
Subject key identifier: 06:09:4A:7C:54:A4:45:81:EE:92:3C:72:F1:94:A3:9C:DA:CD:2E:F5
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 019CBEBB2E2A6D2821A08A831406401D0610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0920
Signing time: Thu 05 Mar 2026 16:01:03 +0000
Manifest this update: Thu 05 Mar 2026 16:01:03 +0000
Manifest next update: Fri 06 Mar 2026 16:01:03 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: xeLbr+PCQoPrCO799PR5jmgLYABYiAuC2RGAx/WYiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:bb:2e:2a:6d:28:21:a0:8a:83:14:06:40:1d:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Mar 5 16:01:03 2026 GMT
Not After : Mar 6 16:01:03 2026 GMT
Subject: CN=06094a7c54a44581ee923c72f194a39cdacd2ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:b2:cc:e7:05:ab:26:a5:b2:63:10:fe:7f:
5b:12:64:b2:e9:ac:e6:5f:e6:d8:2e:d3:48:be:60:
ab:27:51:e3:d8:ed:a0:bf:3c:f9:e6:0c:b4:d4:ad:
2b:c1:b5:16:55:f0:70:ec:f0:9b:46:e0:be:73:b0:
3d:b8:25:19:c1:91:b3:8c:e5:57:fb:38:72:2e:72:
d7:3a:3d:ca:d9:cc:fa:1a:35:e8:7c:0f:71:80:54:
81:26:e6:33:e7:57:e5:a0:25:c7:80:aa:93:a8:04:
05:ff:39:8d:9a:dd:eb:00:f3:77:7c:0d:e0:e0:01:
ca:78:2f:a0:a3:d7:fb:d2:02:b4:fd:97:d0:d2:86:
3e:e8:87:c6:49:6c:ca:d0:bf:6f:e6:eb:de:4c:39:
40:c4:05:80:8c:05:8a:85:f1:be:00:a7:92:46:f4:
97:d0:38:dc:50:74:eb:0e:4f:47:7c:c2:b9:32:c6:
d7:72:3e:b0:c0:62:6e:04:74:a5:83:6a:28:d5:55:
cc:37:7c:60:31:00:ec:95:c7:b8:9e:39:d1:47:54:
68:ca:f4:1b:08:6e:66:81:fe:3e:fa:95:ba:a9:fd:
b8:02:59:a8:97:7d:f1:d6:f0:5f:4a:47:06:c5:a4:
42:eb:b1:7a:c3:a1:35:72:ea:83:9f:b8:23:8b:9e:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:4A:7C:54:A4:45:81:EE:92:3C:72:F1:94:A3:9C:DA:CD:2E:F5
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ba:d9:78:67:dd:4b:c0:c3:af:95:05:b9:0b:4a:b3:49:4e:
df:da:9a:01:9f:bd:95:bd:c8:0c:da:3f:58:aa:39:33:03:37:
d8:b3:3e:86:95:d7:94:d1:1f:62:20:1a:f0:61:37:c6:35:3c:
de:d6:d9:da:3d:c1:f3:df:c8:9a:2e:1a:53:60:b7:4b:e8:6d:
47:9f:93:dd:68:7e:67:76:b6:7a:0a:aa:13:59:8d:ed:f1:e5:
30:c4:c5:40:6c:af:bf:5e:64:e2:82:4e:8e:4b:b7:33:fa:3c:
9f:48:ff:72:41:34:d1:03:e3:6b:42:18:fa:ba:32:e8:ce:d4:
b1:61:29:37:d6:85:64:3e:c3:2e:72:19:cb:de:b0:0f:a6:8d:
97:d2:42:9e:66:a5:0b:ea:ec:46:f2:9f:e5:0d:5b:05:b2:58:
9e:b5:50:9f:0e:07:4f:f0:30:b5:c7:1c:b3:15:79:c5:6d:31:
2c:d1:3a:c0:14:2d:20:61:b4:99:18:f0:2a:71:43:63:3e:75:
ba:77:39:d3:70:e5:d6:85:6d:e1:77:63:21:87:92:73:ba:99:
06:4a:46:8b:03:bf:4f:ac:35:1c:96:36:c2:3d:3f:53:e4:d5:
05:78:75:e6:77:e1:e6:5c:b7:0d:73:1e:2e:aa:6f:bd:54:37:
ea:12:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:22:06 2026 by rpki-client