Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: puxC1sV47wxGFtqxphxEM8ivTY4Ta+WJb8rphOZUVSA=
Subject key identifier: CC:20:5C:D1:F8:21:25:0D:B1:4A:68:12:42:DA:AE:89:79:00:EE:B2
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 019D265F34EC312DA1AFC726C06B2E632917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 1835
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa (hash: uq4vQs4ODd9sCXDYk4Ut6c6LpnPmQWEBmYs07mf3VWY=)
2: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: 1cJyWzGJLH+GM/kdXruud4Okz5FDhqnx/wRcAVES4gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:34:ec:31:2d:a1:af:c7:26:c0:6b:2e:63:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=cc205cd1f821250db14a681242daae897900eeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:a6:c0:c9:48:ef:85:07:ac:13:c1:5e:02:
e7:a7:da:88:cc:5f:7e:35:b3:76:65:d0:79:8c:e3:
37:14:0f:81:f8:ea:2a:bd:44:6c:9a:b6:10:ba:27:
df:a1:0c:b3:b7:3f:87:39:d7:77:c4:7c:33:4e:db:
90:8a:13:d0:31:b2:e0:ec:77:a4:10:f1:c4:a5:58:
f9:16:44:84:a3:58:1e:22:79:bf:c1:2a:aa:98:62:
78:a5:64:bb:21:cc:35:80:1d:35:91:f6:f3:0c:2f:
c2:d5:0d:06:34:7a:8c:9d:53:f9:95:d2:2b:c2:11:
15:ce:7d:47:95:cb:ae:70:4f:f5:5e:c5:09:fb:60:
b9:ff:c3:f8:d8:49:e1:9c:6b:0d:8b:48:2e:1a:44:
6a:d2:e1:e5:68:48:8c:52:9b:79:5f:3b:b4:1b:40:
db:5b:25:75:5b:fc:1d:5c:b2:c1:89:d1:3a:56:16:
b1:a3:79:cb:02:57:81:54:80:4a:f7:6a:92:99:0a:
9c:81:09:e9:d7:6c:38:aa:41:ab:fd:fd:93:bc:c5:
62:17:93:bb:ed:c7:2a:84:37:05:8e:56:4e:2f:4c:
57:22:20:98:65:a0:a8:c3:72:08:4c:a0:04:a1:95:
76:d4:37:f6:2f:8f:1a:8d:b8:f3:0f:f0:d4:ed:16:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:5C:D1:F8:21:25:0D:B1:4A:68:12:42:DA:AE:89:79:00:EE:B2
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0e:dd:75:24:47:6a:8a:77:57:92:2b:1b:bd:e5:b2:a4:6c:
a9:4c:8d:3f:63:f4:3d:f6:bd:ff:f4:27:95:cf:6c:43:bc:b5:
aa:6b:38:2a:03:5a:57:aa:a8:ba:f1:d4:40:d4:73:53:02:be:
dd:97:0e:0f:94:a4:f1:fa:d9:20:a6:46:9e:6f:2d:ec:89:3b:
d3:8b:ca:35:16:f3:86:3f:15:d3:c8:88:1d:c7:89:97:6f:3c:
3b:22:00:1b:9c:4d:65:8c:f5:7e:7f:ff:26:44:3e:6f:df:d9:
07:46:40:2e:69:c3:58:24:5f:e7:b2:86:56:ea:07:5f:b9:e3:
59:71:75:98:0f:ee:80:2a:9d:06:16:a1:65:5f:ac:95:11:33:
32:8c:6c:a8:b0:d0:43:52:b7:fb:a7:50:9c:cf:b4:7b:15:d6:
c6:f0:8c:b5:c0:d9:2e:53:eb:a4:8b:7d:ec:eb:61:b8:c1:ab:
5c:2f:8c:bd:63:1a:82:23:f9:2b:2e:c3:01:fe:5e:c2:81:bd:
3a:73:ca:e5:e3:78:85:b1:17:a9:6e:2e:b9:f8:4a:47:34:4f:
4c:56:13:e4:68:6e:c8:a8:18:c5:f6:6c:87:06:e6:8d:56:b1:
cb:9d:2b:e6:ac:56:1a:75:27:f6:ff:d4:70:29:09:52:36:da:
4c:2f:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:44 2026 by rpki-client