Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
File: wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json)
Hash identifier: vmrZeLPNEAjOn8ohqr2E3ucYtAFe11JT0cpchk5tPRc=
Subject key identifier: EB:F3:66:29:74:A9:7D:A9:74:1E:F2:81:02:9B:4D:15:03:59:2D:DB
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial: 019D265EE25FB4700F23F9EBCB16D2DCA748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
Manifest number: 03A4
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: 1-R7GhRXNiriw0Ks0AljMCxJFfvg.roa (hash: Ihiuc6Mf8e5SU/BW0lz5dqzcLRdt90132uDC4V5qk3w=)
2: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: aufOQR+sR22p/pTJ/b1k5/lwMz+yYv2KOxgZ5kUn/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e2:5f:b4:70:0f:23:f9:eb:cb:16:d2:dc:a7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=ebf3662974a97da9741ef281029b4d1503592ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:5a:08:6c:6c:c2:38:86:d6:36:0c:20:a4:
36:64:1f:72:d7:4d:fb:ce:1e:e2:fb:47:0f:4e:b0:
53:d7:c9:89:14:97:80:f0:a0:ae:91:bb:42:51:fe:
4f:0d:3c:1b:51:52:22:c3:6f:d8:16:07:f4:07:83:
33:f6:a1:b6:50:31:ba:65:3b:66:2b:54:81:6c:70:
3b:88:ac:cc:14:f6:d9:fc:96:5e:bf:e2:aa:2d:58:
40:9b:3a:3f:3a:fa:62:6f:a2:e3:07:23:1a:a4:0d:
b0:a8:ad:5a:df:65:fe:7e:7c:65:c1:a0:4b:b9:4b:
1f:b4:61:db:3b:c1:2a:f8:86:b5:6b:3a:72:23:d5:
07:cb:38:97:a1:ca:89:8a:16:7d:59:ce:50:2f:73:
d8:92:f2:85:77:23:59:6f:66:95:e0:4d:e4:78:60:
b0:ed:ad:a2:52:58:45:25:e8:6d:2a:ec:78:b4:fa:
d4:44:ff:c7:f8:92:82:95:05:c7:17:d3:29:01:22:
e5:88:13:12:96:a6:af:cc:ac:66:24:8b:45:37:4d:
72:7d:4e:63:81:71:8e:5f:37:94:ac:9f:3e:37:10:
5e:ec:b4:9d:a2:c4:e1:ae:68:aa:32:02:59:ac:a7:
e1:12:76:6b:56:37:d2:1e:9b:05:5b:37:40:a2:20:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:66:29:74:A9:7D:A9:74:1E:F2:81:02:9B:4D:15:03:59:2D:DB
X509v3 Authority Key Identifier:
keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:99:64:a2:e5:80:ee:92:2d:1d:22:52:a3:69:3a:df:55:40:
08:fc:bc:e6:7b:d4:e0:8f:10:dd:5e:b6:c2:22:e9:69:d3:3e:
f8:e3:5b:3d:2c:84:f0:29:26:1b:6d:0f:fb:97:d7:20:45:e8:
52:ad:f6:7f:5f:d9:c7:7c:19:33:a5:df:96:9c:d9:07:88:c2:
db:5d:80:a7:b2:6b:b1:0a:e3:45:0c:98:be:da:6d:6c:dc:87:
b1:85:e5:cd:d7:d0:38:87:eb:16:0c:00:5f:d5:ac:2b:f3:09:
57:ee:96:14:99:d9:a6:a0:b7:07:6d:5a:d3:8f:54:9c:4d:02:
f5:d4:a0:6d:d6:ba:1b:7e:1a:e3:c8:ad:32:ba:09:4c:b9:5f:
de:b8:b9:b4:73:25:66:74:cc:57:be:23:7b:f7:02:de:af:a0:
37:e0:3c:cc:a2:3e:78:96:e6:be:e1:5b:2d:a8:72:87:f2:da:
68:f8:5d:c1:eb:d7:78:43:8b:07:82:c7:14:2a:35:ab:26:1a:
0b:ba:4f:28:68:e8:0c:a8:eb:4b:da:3b:83:2a:6b:78:93:0c:
ce:62:7a:6c:38:dd:07:2c:16:89:6d:c6:59:7a:c6:cc:31:33:
6d:61:3b:98:91:04:47:d3:6b:fb:2d:a2:f4:cd:2b:05:d5:c9:
f7:2e:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:57 2026 by rpki-client