Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: BtgpY0rc9MICaZVOcaSrN05kQ+BrOmQQjc7ejtVMycc=
Subject key identifier: 9C:0B:98:80:10:AD:DD:92:80:C8:AC:1F:2C:77:8D:A5:54:04:1D:BE
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019D2A72B165A9FA53EA44214E238176F912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 0916
Signing time: Thu 26 Mar 2026 14:00:52 +0000
Manifest this update: Thu 26 Mar 2026 14:00:52 +0000
Manifest next update: Fri 27 Mar 2026 14:00:52 +0000
Files and hashes: 1: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (hash: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww=)
2: edt0xmZ0bSGmPNiLP1d_zAw05s8.roa (hash: j624gLbIQ30d5sWbalA5dsbX8f1xaNen+6AY5gXhfxY=)
3: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (hash: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: uPpz90+GTYVU/kG4YyTOLfpOIjTII3GB4u0BWCTttMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b1:65:a9:fa:53:ea:44:21:4e:23:81:76:f9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Mar 26 14:00:52 2026 GMT
Not After : Mar 27 14:00:52 2026 GMT
Subject: CN=9c0b988010addd9280c8ac1f2c778da554041dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:9f:6c:b8:d5:a1:67:02:58:b9:d9:3d:f8:
ac:e2:57:2f:34:c7:fd:3b:95:29:24:d5:ed:2c:a6:
fd:04:ee:0f:de:45:3b:d6:d7:cd:16:6b:e4:04:a1:
34:b3:22:9e:0b:8d:4c:ae:07:03:79:57:34:06:38:
56:8d:aa:5f:1e:1a:ad:d7:c1:e6:68:5d:5c:e6:59:
c7:f3:1b:55:70:c4:d1:17:cb:83:88:43:b1:83:68:
96:45:a4:66:d8:b6:f6:85:ab:4c:a2:9f:24:0a:e7:
38:40:8a:52:70:e5:af:0a:af:4a:53:e3:e7:77:4f:
c6:c6:b9:09:2d:ff:b9:b1:54:81:a6:ce:d2:98:8b:
ab:20:e7:2f:1a:31:df:7d:3e:35:03:9f:d8:d5:86:
66:eb:92:50:79:ce:8c:20:8d:2e:3f:a6:96:11:31:
91:a9:65:6d:d7:88:a0:f9:b5:97:9e:63:32:6f:96:
a3:2d:37:b6:46:6e:c3:f0:e6:84:f3:49:fb:c5:61:
c7:57:b4:32:34:d2:8b:84:a3:a5:08:71:dd:f5:5b:
26:f9:8c:d0:54:81:a3:3a:26:82:98:3e:62:32:37:
b0:3a:23:87:93:09:53:fd:12:3c:91:c1:9e:84:03:
85:a8:94:40:cd:80:0f:6b:f2:b1:9e:35:21:87:c4:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0B:98:80:10:AD:DD:92:80:C8:AC:1F:2C:77:8D:A5:54:04:1D:BE
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8d:1a:63:49:de:b8:00:fa:42:4a:9e:f5:dd:44:bf:6e:80:
15:3e:a1:23:7a:87:45:bf:07:60:cd:97:7c:a8:1f:80:3c:f1:
26:67:0f:23:f3:5f:d4:82:a1:71:5d:94:c3:ab:96:ac:9c:eb:
70:24:51:02:c1:3d:d2:ce:4f:7f:a3:15:3c:e2:17:5d:07:ab:
f8:7c:bd:7d:fe:d0:de:5a:49:46:cb:37:8e:89:d9:23:e1:10:
d0:b4:b1:94:ac:81:47:b7:af:b0:35:00:a1:96:b1:91:14:0d:
a7:2b:40:da:84:06:71:d6:68:cf:d3:2c:97:aa:91:e1:0b:e0:
7d:7e:ac:a7:a4:ac:32:0d:07:e5:2e:de:e7:83:d0:fb:22:e3:
38:c5:1a:fa:b8:2c:1b:48:81:e7:b3:c2:10:d6:1d:60:3b:97:
bf:d3:1e:63:ec:a1:a1:ac:31:95:3b:84:d6:48:40:55:75:dd:
f0:dd:a8:67:04:d9:4b:e4:df:46:35:01:cd:1d:42:05:69:93:
a8:68:8f:11:98:b9:fe:3b:fd:75:e6:7c:7c:ff:c4:60:f3:ad:
fd:37:0f:17:80:13:43:6d:42:f7:39:f2:cd:e8:ea:af:8a:30:
ab:75:c3:2c:08:de:98:7b:db:a4:77:4e:70:56:ad:d6:ea:f0:
33:ff:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:34 2026 by rpki-client