Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: gjxnQGYifPMYndcUfBuVEmcQJ8J8/e6RzOsVJIvZvbk=
Subject key identifier: 2E:59:CF:34:62:8B:8E:D6:14:AD:17:96:DB:63:EA:7F:95:B9:61:9E
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 019D29CDBF5C3B284346AECFFC4EFCAA9121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:00:42 +0000
Manifest this update: Thu 26 Mar 2026 11:00:42 +0000
Manifest next update: Fri 27 Mar 2026 11:00:42 +0000
Files and hashes: 1: AaoD9e1Rc9A7OLbVCIZcDp6j6JM.roa (hash: ytSdeQxHuy+yxjmnJ8gqjABXw5mRmre0ka6vBBpW/Mk=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: eWE0+R1wqwudzluzRLEdiemSNdp10oZZJwSRVG9gUAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:bf:5c:3b:28:43:46:ae:cf:fc:4e:fc:aa:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Mar 26 11:00:42 2026 GMT
Not After : Mar 27 11:00:42 2026 GMT
Subject: CN=2e59cf34628b8ed614ad1796db63ea7f95b9619e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:7b:36:f4:8b:ef:2f:b9:20:a5:f8:ca:32:
75:59:17:42:2f:e7:02:be:01:90:b2:93:93:cf:ee:
b7:c0:c8:07:9b:9f:7c:2a:ee:eb:fb:40:ee:83:ab:
82:51:de:51:d7:90:da:27:b1:2f:04:6d:52:23:d8:
e9:67:3b:d7:ac:fa:96:eb:22:14:b7:99:fd:d4:03:
aa:12:ca:b0:73:a5:c3:04:02:b3:3c:3a:b7:d1:a4:
96:42:0f:ca:6d:ca:4c:8a:a8:03:ae:e8:85:ef:b7:
24:4f:eb:39:50:de:2f:6c:51:ac:3f:e3:6d:2a:a0:
72:f3:f7:6f:d7:c1:88:11:cf:16:f1:54:e9:c3:ff:
f4:f3:84:88:ac:ef:8b:5a:c3:24:45:03:38:b7:66:
cd:7b:47:72:20:2f:70:20:8f:34:58:23:68:df:91:
79:23:7f:3c:2e:73:52:2f:e7:6f:c8:f4:a0:aa:e1:
99:c2:d9:fc:dd:5e:45:de:ba:89:a3:23:77:77:ba:
5f:af:5b:2c:8a:27:10:6a:96:aa:a9:05:86:f2:4f:
f5:f9:ca:25:94:50:53:2f:22:b0:d1:0f:4a:36:51:
70:72:43:da:62:0a:ff:fe:e5:fb:a2:46:df:e5:65:
5b:13:26:71:67:7e:6e:66:8f:a9:76:09:3c:de:77:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:CF:34:62:8B:8E:D6:14:AD:17:96:DB:63:EA:7F:95:B9:61:9E
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:57:f0:55:41:1d:31:cc:a3:20:cf:dc:ef:e2:68:c0:fb:f9:
40:34:92:c4:01:16:01:ce:8f:86:a9:c4:f8:63:69:c1:ce:40:
44:ca:06:df:b8:70:84:c3:c6:58:2a:5e:9c:0a:56:d3:e1:d8:
a5:e1:66:94:80:c5:53:36:e1:86:82:0a:fa:ba:8a:ca:bf:84:
67:c5:5c:53:28:4f:ee:f1:b3:63:86:90:fd:2e:a2:b2:63:54:
c1:a2:74:23:22:59:03:a3:47:28:5b:9e:a5:18:32:b3:59:fc:
a9:1c:e5:0b:38:87:1e:8f:b5:6a:7e:22:bf:9a:96:ba:43:b3:
9a:67:2c:1d:76:c8:ac:69:1c:a9:3c:b6:e1:26:8b:a8:af:6b:
d8:e9:57:90:cf:22:b6:35:d7:96:a1:bc:fe:04:63:07:b5:59:
bb:08:8c:4c:08:f9:b0:1f:8c:1c:23:52:82:fc:d0:22:90:f1:
f0:20:49:42:97:a3:df:20:23:4b:f1:d0:31:c7:37:8d:6c:c1:
53:91:b9:9d:42:bd:d6:38:d7:86:71:74:c4:f5:1d:de:52:f2:
7d:64:db:73:b4:f1:09:c2:dc:d1:45:41:7a:73:c4:6a:2c:93:
99:d9:d1:4e:93:ac:13:b2:42:95:78:6b:51:5d:17:8c:6e:7f:
3d:c3:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:11 2026 by rpki-client