Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: u2k7h4Y0+QK4CIAmOnag5rUKiP/TG4VfBSI2deOUXqw=
Subject key identifier: 57:3B:0B:5D:8C:69:BF:F3:AA:C5:2B:84:54:00:CB:0C:3C:12:44:42
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 019D265F648520F36B249493EFD7C6853BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: 6-LYShGdtFu2Nyi-6m5NptYJBCw.roa (hash: pCChEGRh0lt/HCBsI0AnydKM37+rgJWloeeUpKn5NEc=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: 8L8F45UHERFugUtcw2vOQlrmE+fYc1ctKnJJlpce2gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:64:85:20:f3:6b:24:94:93:ef:d7:c6:85:3b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=573b0b5d8c69bff3aac52b845400cb0c3c124442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:98:31:e1:e0:00:8b:54:55:7c:0d:fe:78:
53:4e:7e:34:82:7e:d1:03:b1:5c:eb:4d:95:b8:b1:
2e:4b:b7:4a:c5:33:8a:b4:55:f6:2e:07:6f:dd:71:
4d:13:aa:65:98:64:56:ee:4e:22:69:b7:8c:21:df:
14:4a:7f:1b:4c:47:cc:6d:b2:e2:a1:75:c1:b4:ea:
23:30:4f:fb:67:bf:eb:3b:be:5b:65:1d:a2:d7:af:
2d:d2:f1:02:53:d9:08:40:fb:c7:a3:06:90:21:3a:
cd:90:f7:00:d4:6d:6c:1c:16:cc:e8:87:41:c0:04:
fd:a6:27:ae:29:6d:81:ff:1d:8e:12:ec:17:92:4a:
57:1e:27:52:45:87:fb:2f:f5:4e:06:03:f6:be:bf:
9e:fb:3f:ab:56:fd:f9:b0:57:26:91:6e:a5:36:d5:
6b:f7:fc:bc:06:9f:82:e8:bc:6d:b9:70:a6:13:13:
8c:8d:ff:3a:14:63:61:cf:8b:62:1a:0c:94:4f:b0:
8f:12:14:46:be:5e:16:d9:2e:64:cd:4e:6e:8a:ea:
58:2d:c2:14:ca:55:de:1e:e0:7c:c7:c8:50:36:7b:
77:fb:2e:0b:cb:a5:80:05:6b:f2:e1:e5:ee:f2:86:
f8:d9:31:5e:5d:a3:47:b1:8e:a3:3f:ac:45:c4:06:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:0B:5D:8C:69:BF:F3:AA:C5:2B:84:54:00:CB:0C:3C:12:44:42
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bb:f3:c8:c9:1d:df:00:42:c1:7b:4d:71:71:80:02:2c:78:
83:8d:b6:bb:a4:18:cf:ac:e1:4c:90:23:00:52:ca:ea:5b:f5:
05:10:5a:4f:8d:72:ef:7a:57:d0:dc:1e:85:e3:e7:15:8e:98:
f6:9c:eb:b7:cd:88:67:d0:52:92:17:58:1f:60:b4:cc:3b:dd:
a7:4b:99:62:52:7e:de:78:ab:47:d4:1e:16:76:f3:01:f0:08:
a8:c1:9f:a4:06:7e:aa:66:cc:6c:09:48:67:f0:06:9b:d1:c2:
45:80:c5:94:0e:ba:23:9f:23:e2:c7:e4:30:11:01:d6:6b:d1:
57:9d:ed:4a:65:0c:dd:05:15:50:0d:25:95:38:9b:26:0b:11:
33:ed:0a:a8:ea:86:c1:a6:d0:78:b1:20:0c:cb:4c:84:43:3a:
ea:cf:bd:6c:88:ea:b7:f7:9f:4c:7a:16:3f:aa:3b:3d:6f:95:
c1:01:ef:7f:e6:c3:5e:cc:99:6f:ae:ae:34:5d:25:39:22:a3:
9a:ba:da:79:80:ae:f8:19:fa:76:f4:61:93:24:70:be:1d:3e:
64:9d:05:b2:41:6b:44:7c:3d:e1:31:a7:9b:49:eb:39:42:7b:
5b:22:e1:59:8b:28:9e:c5:ee:1c:51:d7:86:e2:8d:fc:ab:87:
76:f5:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:59 2026 by rpki-client