Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: tDPi+Bh5oULjn7y1sk026gKCuZzzRzWgZUMz5urp1zc=
Subject key identifier: 27:86:F7:92:5A:E8:93:6B:83:FE:F9:DC:60:D7:9D:EB:07:43:B0:9D
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 019D270463E73AF25802A3BF52C788E1AF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 151F
Signing time: Wed 25 Mar 2026 22:01:32 +0000
Manifest this update: Wed 25 Mar 2026 22:01:32 +0000
Manifest next update: Thu 26 Mar 2026 22:01:32 +0000
Files and hashes: 1: 8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa (hash: /ZabFzyJivcnbLtz1Of+Qh0KFPOxtwgBRMKumxY4Dq4=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: +gj4piBLbMeFP86/6BM8WJlIw5UNj9kQygCADa5vqDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:63:e7:3a:f2:58:02:a3:bf:52:c7:88:e1:af:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Mar 25 22:01:32 2026 GMT
Not After : Mar 26 22:01:32 2026 GMT
Subject: CN=2786f7925ae8936b83fef9dc60d79deb0743b09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:75:b1:77:e4:8c:3b:a7:7b:9d:99:53:78:
06:53:66:6f:08:7f:b5:55:50:bb:26:cd:2f:9e:46:
6e:51:c6:e2:f0:b4:3d:d6:4c:9e:4b:ed:37:ef:2b:
36:c1:4b:e9:ab:1f:5d:6f:18:41:33:01:76:79:e8:
dc:2c:75:27:d1:b6:6a:b0:92:db:57:98:7c:e2:82:
f2:1a:27:10:d1:dc:86:88:26:f7:3e:e0:04:26:0a:
80:ff:f6:2a:2e:e2:9e:e4:02:aa:09:bf:48:f0:41:
1d:f6:6d:ec:d6:d6:c6:50:b8:ac:1f:88:ce:6f:00:
e9:46:bb:1d:c3:b9:4d:c7:b0:e6:d3:f8:59:79:b3:
a4:a1:05:73:8b:6a:f0:51:cd:c4:db:89:0a:af:29:
b6:19:c5:3e:f4:e5:9e:75:3f:6c:b9:cd:2f:fc:b1:
58:86:6d:05:75:ae:ac:da:0e:87:30:07:23:3a:57:
4b:c7:d2:40:dc:d0:9d:a4:01:51:e1:5e:65:f2:f6:
b0:91:02:36:a5:b6:70:cd:4c:4f:c5:d4:57:65:3f:
f0:f8:58:62:53:de:42:6e:45:cb:47:a1:af:d6:0a:
56:bb:90:e8:52:8b:8b:9d:0e:71:34:52:19:f1:8c:
b6:c6:79:86:49:fa:53:9a:c3:e6:43:2c:ed:1a:e7:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:F7:92:5A:E8:93:6B:83:FE:F9:DC:60:D7:9D:EB:07:43:B0:9D
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:95:a7:ef:4b:0b:b7:f4:36:83:8a:37:cf:1f:4e:c8:de:
47:e4:a8:df:74:52:ff:39:d1:93:23:43:61:a8:31:51:aa:24:
70:6f:34:3c:48:74:89:65:53:66:26:f7:db:aa:e2:50:3c:39:
6b:c2:1f:e3:d5:ae:ee:20:e6:8a:9a:e7:cd:7f:0b:7b:69:6a:
19:68:bb:ba:25:08:07:bc:a2:2e:48:98:7b:80:5b:18:16:97:
3b:80:1d:c4:50:33:ec:b2:b0:03:e8:cd:a7:9a:11:72:55:d1:
d5:5c:b6:77:28:a3:c7:f2:77:1d:8a:ea:7f:7b:76:19:6c:ad:
5f:f5:43:d0:26:a6:1e:d1:95:64:6b:ce:f1:07:95:71:f5:28:
4c:be:0e:b0:a0:f8:38:e4:d2:02:bc:58:4b:7e:7f:39:58:e2:
8e:56:7e:53:63:29:6e:78:9b:01:19:55:b3:09:5a:cc:13:f2:
38:eb:f5:08:82:dc:b3:9e:75:e6:74:30:95:d2:50:48:f3:06:
d2:e9:b7:9e:65:7e:f4:56:1f:2e:ee:7c:71:eb:9c:ae:a3:ed:
fc:3b:6b:79:7b:36:37:dd:ec:46:4a:01:af:6e:27:c0:45:29:
ac:d5:a5:0a:c6:80:cc:b5:78:cc:e9:31:69:4e:44:22:5c:0c:
65:40:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:25 2026 by rpki-client