Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier: 8XO2yh6XlyOsHvQGLn4aUh7tWEtT+uFRJ9XWWg5KLwQ=
Subject key identifier: F7:7D:C8:98:2D:DD:F0:A2:4F:F1:1A:3D:E2:65:1F:AB:7D:37:9C:9B
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 019D33E3E220BD835654D1FCA3A053315FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number: 0BAD
Signing time: Sat 28 Mar 2026 10:01:05 +0000
Manifest this update: Sat 28 Mar 2026 10:01:05 +0000
Manifest next update: Sun 29 Mar 2026 10:01:05 +0000
Files and hashes: 1: Mkx5QqJBBdzFi4K_8jHAK9jxROo.roa (hash: /xYXG6nHZmfuKlJ26GtGjcJ2e4BfFGtrbLlscDJbCtk=)
2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: WMAgJJgRp2jLHce/YrdlmQ/FCnYf/m/Pva6nOTipa2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:e2:20:bd:83:56:54:d1:fc:a3:a0:53:31:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Mar 28 10:01:05 2026 GMT
Not After : Mar 29 10:01:05 2026 GMT
Subject: CN=f77dc8982dddf0a24ff11a3de2651fab7d379c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:df:6a:ec:74:3e:1f:69:e3:0d:cb:50:24:
4f:d8:15:74:37:97:d3:6d:a2:f7:a6:61:74:4e:ad:
49:7e:44:1c:75:c7:76:ea:79:e0:64:0e:c2:3f:e8:
03:fb:07:26:34:49:0a:d2:8f:e8:70:9a:7a:e1:05:
7b:aa:4a:cc:64:a0:87:1a:ee:1e:01:ee:7b:57:34:
e5:07:03:cc:2f:6c:6a:77:f3:6f:f7:2a:47:a4:35:
45:90:34:23:4f:22:94:ba:c6:cb:bf:48:93:2e:fc:
7b:9e:75:f4:e2:74:65:86:a3:6a:03:79:b0:5f:e6:
6d:b7:95:7a:07:c2:39:88:44:9c:6e:82:5b:a7:7a:
81:46:2e:e3:e6:d7:2b:2c:44:50:d2:d5:98:de:02:
d5:e9:bd:69:49:c6:5b:8e:14:c5:e0:c7:46:58:ef:
f0:00:e3:da:d5:dc:1c:21:46:fb:64:7d:33:de:46:
00:22:4c:01:81:e0:f6:01:c9:f7:da:6f:f0:63:45:
50:4f:2c:73:30:83:5a:41:9c:8c:c1:45:7d:22:17:
8a:3c:c0:aa:40:65:4d:43:d2:83:0a:5a:a5:54:42:
5c:91:fa:46:51:a0:ef:23:49:35:1c:cf:7c:8f:12:
f7:0b:23:d2:b8:8d:8c:a7:69:3b:3e:ac:f7:5b:13:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:C8:98:2D:DD:F0:A2:4F:F1:1A:3D:E2:65:1F:AB:7D:37:9C:9B
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:49:25:e1:9e:6f:fd:ad:99:be:c8:1b:f9:ea:77:b1:8e:e5:
3f:04:b2:cb:11:74:31:af:f1:ed:02:d9:49:d6:a2:1d:f0:3f:
6f:23:46:53:41:90:36:56:60:c7:ce:a2:f2:d4:a2:37:91:7e:
47:23:bf:cd:8e:7e:bc:a3:3d:60:1f:cd:f0:38:8a:d8:0c:f1:
26:47:a2:6a:73:2f:05:ac:30:89:16:3a:42:10:61:ce:67:98:
5e:ca:8e:d5:14:b4:e5:10:a1:d8:ca:83:46:ed:b0:61:df:41:
7c:ae:56:39:f3:8e:61:d4:5d:a4:6f:8e:f1:57:af:8b:e9:57:
7d:5f:03:7d:52:1a:23:73:6d:fe:e5:3f:88:9a:26:65:06:1c:
75:1a:bc:00:e2:62:3d:6a:50:a7:f0:88:9c:cb:0d:1b:11:09:
1f:ae:c1:79:92:aa:18:59:15:eb:dd:7e:8a:b0:dd:43:3c:ee:
6c:57:b0:da:8b:40:2e:a9:cf:f2:18:6f:21:c7:74:76:85:c9:
55:ff:dd:dc:6d:ce:c7:6c:dd:a8:8f:eb:bf:f8:17:bf:e4:3d:
b2:12:ec:61:84:91:53:db:53:25:04:9e:81:c4:25:d1:f2:42:
e8:27:f9:f3:49:1f:2d:3e:f2:b0:27:20:e9:ca:29:aa:25:53:
ba:45:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:24 2026 by rpki-client