Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier: 0FSujVtFELfLfb+c3XoH8qBXinQRtM2rydEv0b4YfrY=
Subject key identifier: 52:3D:44:09:60:78:E6:83:70:6A:53:36:81:D9:94:3F:8E:84:F0:61
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial: 019D28BB57D5851B0355C9CAD84AD41B95DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number: 0436
Signing time: Thu 26 Mar 2026 06:00:59 +0000
Manifest this update: Thu 26 Mar 2026 06:00:59 +0000
Manifest next update: Fri 27 Mar 2026 06:00:59 +0000
Files and hashes: 1: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: 9JDm8JudgvS5Hd9JBjpn1EQJOJLCK0v6U9kOnUtsxEo=)
2: m6n5IdDCaj0-A-YgZFlUqaEncFY.roa (hash: cxBAKtW14WwE7esOxfQvIIjXHk/GahU8AilWvcmMPAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:57:d5:85:1b:03:55:c9:ca:d8:4a:d4:1b:95:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
Validity
Not Before: Mar 26 06:00:59 2026 GMT
Not After : Mar 27 06:00:59 2026 GMT
Subject: CN=523d44096078e683706a533681d9943f8e84f061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:db:76:eb:19:e5:41:5c:c8:76:2e:ce:64:
1b:d0:c3:91:c0:2f:bd:6a:48:3c:0f:9f:5e:fb:1e:
59:78:14:25:4e:b5:e0:67:0a:a0:30:3d:66:e1:80:
60:5c:36:8c:46:5d:93:96:89:c1:07:9e:d1:99:96:
9f:53:85:e8:27:b6:cb:27:6e:b3:17:9d:ac:ac:2a:
57:06:dc:c2:50:fd:97:d6:0e:87:5f:14:8c:89:81:
24:b9:6f:52:3a:5a:53:50:8d:78:46:47:2f:34:50:
ae:09:eb:d2:51:14:a6:e3:52:1a:05:5e:31:6d:51:
c1:ba:5c:db:2c:1f:65:02:90:2f:89:4c:23:11:7e:
95:64:19:ea:4e:b6:b3:d8:9e:b3:87:24:6e:0d:dd:
58:a5:cd:86:db:44:e3:1f:53:38:42:bb:f0:5e:df:
67:1d:ec:6c:8b:d7:23:71:4c:cd:41:fe:45:94:3e:
ea:00:79:6c:36:3a:c5:b3:fb:85:01:e3:92:93:d8:
d6:94:94:8f:f1:dc:ef:38:93:fd:18:f0:c7:7c:9f:
18:2d:06:4e:ee:81:d3:5f:74:51:f9:15:df:8f:3b:
81:4f:02:2e:0f:26:fd:5d:5d:21:a8:d8:4d:9d:c8:
f7:e6:a7:95:96:1f:9b:72:3c:7e:a9:cf:0a:b5:07:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3D:44:09:60:78:E6:83:70:6A:53:36:81:D9:94:3F:8E:84:F0:61
X509v3 Authority Key Identifier:
keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c2:0f:5f:e0:87:85:c8:b1:1a:0b:4e:30:92:fa:9a:dc:22:
58:87:97:54:af:f4:f8:40:37:00:ce:5e:88:7a:1c:0d:7f:35:
4c:77:41:77:98:bb:61:d2:d7:c2:33:1f:24:48:fc:b8:4f:16:
1b:f3:d0:b7:42:24:e7:e1:79:13:bd:cf:f1:a4:01:1e:ed:d4:
fc:8d:20:9d:b3:b6:8e:69:4b:71:54:d0:17:22:7a:ac:c0:d7:
00:0c:25:84:d0:be:9b:02:71:50:dd:cc:55:cd:3c:15:8c:12:
46:53:55:8d:f8:68:31:4c:df:e8:37:4e:6f:d4:cf:e9:e6:cc:
a1:2d:72:fe:82:3f:19:df:58:4e:b6:02:72:c5:e4:b8:a8:95:
84:37:c7:e8:0d:04:07:76:c6:fc:f1:30:8d:25:0f:9d:a4:fc:
a9:d1:de:c2:2f:94:3c:5e:70:e8:f7:af:cc:46:61:5b:83:aa:
cc:df:95:4f:c9:fe:db:73:00:1c:2c:bd:93:82:16:97:3c:8e:
a6:be:9c:d0:2b:07:2c:fe:86:e3:10:52:7c:db:b4:f0:f4:d0:
ec:a0:93:6f:c4:e5:da:36:fb:ba:3b:3b:1e:09:b0:e7:d3:3c:
59:b0:e8:81:3c:44:00:fe:fc:99:b6:67:84:9a:58:82:01:b6:
79:42:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:17 2026 by rpki-client