Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: w7ExngTuX9U3K8ObfmCoWvYifPA9pKjpMWy0Srr00S4=
Subject key identifier: 9A:68:FC:0F:AF:CB:F2:74:29:6F:70:86:53:1A:F6:2F:B9:A4:FA:DC
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 019D265EEF2D119670065A915A895F96D3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:00:48 +0000
Manifest this update: Wed 25 Mar 2026 19:00:48 +0000
Manifest next update: Thu 26 Mar 2026 19:00:48 +0000
Files and hashes: 1: be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa (hash: iWxHjwfuXSnOXM+4EBopGhWz6sGJ/Fj0z8QWrUeSyfM=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: wTnE2bxGQ0fhfD8MYsEpISfa95wni9SLQ7j1GpqCbdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ef:2d:11:96:70:06:5a:91:5a:89:5f:96:d3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Mar 25 19:00:48 2026 GMT
Not After : Mar 26 19:00:48 2026 GMT
Subject: CN=9a68fc0fafcbf274296f7086531af62fb9a4fadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:4a:48:84:73:26:33:e5:53:69:6f:11:9f:
c0:9c:f3:6c:ac:9b:21:83:b2:a3:dc:c0:9e:a1:12:
3d:a6:bd:aa:e1:16:59:2a:54:ac:4d:cd:c7:9a:3b:
36:5e:d8:41:e7:80:b0:2f:1c:de:b1:8b:ef:3a:1a:
6e:4a:ff:e4:30:b7:9f:cd:81:83:f4:2d:5f:62:65:
db:26:e9:ba:fa:06:6f:7b:3a:7a:b2:66:d2:73:2c:
e8:28:68:be:9e:a4:69:58:dc:10:6d:47:4c:39:f2:
fe:3b:9a:21:57:68:a6:d7:cc:66:2e:1c:3a:ce:0b:
0c:b8:df:eb:07:52:2d:0c:24:1a:57:13:49:31:7c:
61:8e:43:c3:7d:13:04:51:8a:1b:c5:b9:09:9f:b7:
81:e3:90:dd:b2:96:e6:96:ab:15:5d:e1:db:6f:7f:
48:49:56:cc:9d:5f:a3:f2:c6:21:fb:fb:34:c3:b9:
e8:b5:32:1b:25:2f:a7:4d:4a:74:ff:50:4e:08:4c:
1b:af:e9:59:61:db:61:cb:02:57:a2:ef:f5:dc:4c:
f3:2c:a7:b8:0d:78:cb:35:aa:de:30:1a:59:b5:48:
6d:25:ec:38:79:50:2d:59:59:08:94:c3:37:13:68:
d7:27:7e:6a:1c:b1:e2:46:fe:70:35:61:14:e9:a1:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:68:FC:0F:AF:CB:F2:74:29:6F:70:86:53:1A:F6:2F:B9:A4:FA:DC
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ee:77:75:30:9d:fa:98:f3:a6:b2:50:e1:f3:9e:07:b0:6b:
eb:48:98:06:7e:33:40:61:91:77:86:bf:b4:f9:27:51:5f:01:
ae:74:fc:97:7a:90:4b:b9:a8:0a:47:75:b0:26:16:eb:11:8a:
aa:5e:13:6a:d7:b0:d3:6b:a4:74:a8:56:40:61:6d:f1:93:69:
36:95:39:4c:67:e9:03:58:b5:bf:56:53:d2:dc:61:82:28:c8:
ae:ab:47:6a:54:f9:af:80:8c:d9:d9:84:b0:8e:e0:70:f0:32:
1b:51:a0:e1:3a:54:31:73:7d:2e:99:d7:db:1e:cd:74:6e:bf:
01:24:89:4b:02:b3:20:88:56:ce:f1:86:1e:40:78:cd:bd:c7:
4f:c1:67:6b:28:b0:c1:b9:69:70:c8:d1:79:41:ba:02:95:36:
f8:67:59:38:48:5e:d1:4c:20:e8:20:c9:ee:4e:11:90:0c:cf:
5d:61:a3:93:5a:02:de:e4:5d:44:a5:e7:5c:2b:d5:1e:f7:fb:
d1:b9:e0:d4:6d:a4:c0:27:ba:bf:16:9e:59:6f:49:b2:53:63:
d2:f0:78:38:b0:25:ba:d1:84:d2:2c:20:26:6d:57:54:00:68:
2d:6e:a9:b3:e2:f9:db:40:bc:3b:10:e4:a8:2d:1f:07:c4:6f:
0a:61:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:29 2026 by rpki-client