Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: 0hMBM2WyiL1oKNH4r2n5motyP+eUc0lzD+jYxH1EzXc=
Subject key identifier: 86:A8:03:BA:90:FB:9A:7B:09:DC:A7:55:BF:D2:2E:4C:76:C1:E0:C8
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019D265F2C289AFC5EF4DB9FE03FE7B6DD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: D0pWNgbK/gjMTHL7epqHAXncWNh1N+00FlUKeB6Nt4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2c:28:9a:fc:5e:f4:db:9f:e0:3f:e7:b6:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=86a803ba90fb9a7b09dca755bfd22e4c76c1e0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:1f:7f:93:a7:7b:8d:6b:34:7f:39:22:84:
09:85:2b:21:dc:6a:72:15:af:66:b6:91:d8:94:5b:
c5:96:e0:9e:6f:3f:9b:45:e7:43:af:fc:34:ad:9d:
6a:66:8f:5f:7a:63:a0:f8:de:1e:86:fc:28:c0:e0:
1d:eb:a7:40:c8:01:39:5f:10:a0:5d:3a:c0:c0:a2:
0a:42:29:94:2e:fd:53:9c:88:a5:6c:0b:69:85:2f:
24:44:52:c9:c6:3f:48:1a:fa:3e:f9:24:dc:0d:82:
24:42:be:13:25:ae:0a:05:73:d0:50:81:37:c1:fd:
be:0c:38:c9:6d:44:c0:3b:9b:c0:7f:38:99:98:b0:
f7:11:f1:96:56:00:38:53:d8:26:a4:50:71:a2:4c:
fd:f1:64:fd:64:30:11:c0:1a:bc:f0:92:97:18:89:
6a:2c:25:22:a7:fb:66:1c:be:3b:be:f4:b2:84:dc:
cd:37:c8:f7:66:13:76:39:32:77:0b:a1:fc:a9:bc:
12:f2:f4:56:d8:e4:e9:08:b9:19:21:87:de:36:30:
77:4e:53:f2:e5:ff:52:a7:ad:da:41:3c:db:9b:75:
e6:a0:7f:0a:f8:d6:93:6e:d5:15:4c:8d:1e:16:4b:
3e:b2:8f:66:a5:1e:35:e6:26:69:51:09:7b:27:c5:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:03:BA:90:FB:9A:7B:09:DC:A7:55:BF:D2:2E:4C:76:C1:E0:C8
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:7c:c8:c1:85:81:f4:bf:33:bc:31:0f:d4:8e:de:73:af:
35:d3:25:9b:e5:5b:3b:b3:a0:a4:43:80:ab:fa:c4:98:da:a8:
77:8d:a6:dd:0b:54:ef:8e:74:37:46:9f:76:79:ae:83:9b:a0:
74:68:c6:e3:17:79:ca:cf:49:4b:76:e9:7c:25:f2:ea:d2:b7:
3b:ad:d6:33:29:6b:1d:35:07:87:2d:33:86:b1:34:a4:0b:ef:
b5:5e:42:6f:aa:24:0d:ce:c4:e6:3c:65:ba:8f:f7:40:75:16:
0a:29:28:d5:eb:bf:82:c5:63:eb:4d:76:97:9c:20:83:66:ba:
a4:31:d4:35:5f:a3:00:cc:67:0f:ba:5b:28:d3:d2:07:be:7d:
e4:3a:4c:c8:20:22:ef:b3:1d:35:ee:fc:0b:77:b7:32:26:55:
6f:a2:db:8d:31:2f:7b:c8:62:78:b6:e9:ac:8d:1d:74:e9:dc:
ed:c2:a9:17:fd:de:43:26:60:f7:8c:04:fa:c8:5c:d6:b2:1c:
27:ca:15:94:2b:75:06:0c:a0:00:30:c5:d7:35:5f:de:e0:06:
d8:30:33:38:19:5e:66:3e:70:a7:b0:b5:da:3f:95:65:c5:08:
75:cc:44:9e:db:f8:ee:6e:75:bb:c6:ef:97:76:9e:8c:17:f7:
99:43:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:54 2026 by rpki-client