Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
File: Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json)
Hash identifier: XvAiwFSf/wuUXgq5rnaFFE8t/QXfC7IP5FFJkoBXcjI=
Subject key identifier: 3E:45:AA:98:A3:A0:F3:9E:F0:A3:F8:7E:0F:4F:72:89:AF:F8:EE:9A
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Certificate issuer: /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial: 019D38D329BAA83D93DEEC8785173AE0CE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
Manifest number: 0685
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: gPaH538CC98j3+Rbj3r4FOpeFCc9dzrX68NlW6SVclg=)
2: _QT3lMVu1JStai6T69WGgwqn7ys.roa (hash: oNv+STRTc8dSmd+O/sB61KNG7rpMHLNG/eCHfujsdBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:29:ba:a8:3d:93:de:ec:87:85:17:3a:e0:ce:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=3e45aa98a3a0f39ef0a3f87e0f4f7289aff8ee9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:b6:62:8b:dc:3f:fe:c8:02:ba:25:c0:f5:
49:0d:d1:0d:c7:dd:7b:38:50:84:b4:26:ef:fc:76:
29:95:3c:ee:0e:c1:2a:43:d1:e2:69:57:82:59:8f:
85:c3:76:44:c3:60:21:16:fd:46:22:23:1d:36:44:
64:dd:67:75:d0:cc:f9:d3:a0:e2:df:0e:89:38:ec:
97:13:62:62:33:98:fe:9d:e1:ad:88:11:0e:20:a8:
14:aa:57:73:dc:3d:9d:e2:4d:69:48:a5:96:eb:01:
95:d7:0c:0b:a4:ab:43:89:9e:52:d7:6d:30:cf:eb:
e7:76:9f:1d:24:2e:49:78:f1:61:d6:92:6f:5b:3a:
da:a5:7e:e3:ec:4b:ae:07:cb:47:fb:f8:73:4d:93:
cb:84:70:96:ad:6c:c7:f9:a2:dd:10:ca:9c:7d:93:
a8:26:06:c0:87:76:5a:2b:9c:39:9a:14:29:54:83:
bd:d6:37:ef:24:08:4b:1c:f3:26:6c:50:f4:da:bb:
a4:1b:30:48:e1:1f:ec:e5:29:7e:4a:60:fe:20:27:
25:0e:b3:ba:b5:f5:86:82:32:9f:f3:a0:3c:ae:f0:
67:2b:d1:39:a5:83:d8:68:85:5f:29:55:e6:cc:b0:
66:7d:e5:6d:37:de:cf:b1:b1:91:f5:20:31:9b:26:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:AA:98:A3:A0:F3:9E:F0:A3:F8:7E:0F:4F:72:89:AF:F8:EE:9A
X509v3 Authority Key Identifier:
keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:88:f8:6c:f8:a5:e2:9e:9b:92:14:33:46:ad:30:47:31:a9:
40:c6:e5:f3:f5:f8:59:a9:94:e0:64:cc:3b:9f:21:00:fe:d4:
8d:f8:84:95:be:c2:ad:be:ac:33:0b:b2:f3:c6:20:99:94:3c:
27:38:19:ea:2e:68:20:1c:9b:47:3e:26:dd:c3:96:60:ec:b9:
e3:5d:59:a6:2e:9d:72:a4:94:1e:f0:28:d4:f9:c8:fa:23:02:
9b:cf:cd:02:40:b4:cb:57:7e:c5:2c:30:10:43:1c:75:53:b3:
3b:e3:a8:23:ed:e1:09:17:8e:f1:e4:e4:98:55:5a:e4:aa:67:
ce:47:14:88:ce:1c:01:cf:3c:b7:fa:53:71:07:0a:53:03:23:
79:ed:06:e2:c6:da:d5:53:3b:85:24:1b:fa:68:d5:f0:d3:8f:
26:77:21:79:7c:90:35:76:83:a3:b5:9a:ac:01:75:e2:0b:7a:
70:bc:e2:32:44:2f:74:fe:cb:6c:84:92:05:fa:1b:cb:a4:22:
51:8b:70:0d:0a:de:5d:13:9a:dd:e7:57:d0:6f:c5:b6:04:51:
67:59:02:57:3a:b5:46:bb:fd:dd:31:c6:3a:3b:2c:58:7c:30:
0c:f3:97:2c:94:c4:9c:d3:a3:0c:ff:44:e4:a7:b2:f7:f6:59:
fc:8e:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:32 2026 by rpki-client