Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: Rf6MK10J9tCnStL4qczuomaiD3TYxHhyLITFo/+UIRM=
Subject key identifier: 7A:02:47:36:70:82:D0:F9:6F:BD:8A:BD:6F:C9:CA:47:C7:6B:FA:A3
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019D2816EB54BB3F2B0D95248E56775FC897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: g/zN27FWL8S8UddiBNKGn2P75Ru2Cdb+ONvUWPqbm0w=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:eb:54:bb:3f:2b:0d:95:24:8e:56:77:5f:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=7a0247367082d0f96fbd8abd6fc9ca47c76bfaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:a0:0c:b4:58:b2:4e:20:72:a4:19:38:6e:
e4:bd:5c:6f:cf:e1:bb:25:6c:b9:75:e2:75:a2:4e:
b5:65:c9:98:0d:92:09:00:c7:07:02:08:06:f2:9b:
04:7e:86:e4:06:10:7d:2e:7c:05:4b:f5:ce:34:64:
6c:89:e3:ea:96:47:b2:93:27:2a:a0:47:e2:9c:69:
48:90:ba:65:07:bd:64:cd:71:28:69:7d:88:f0:2e:
b7:29:b4:21:96:c5:a4:9b:a0:d1:05:33:7f:75:a4:
71:bf:a6:16:1d:46:6d:20:65:8a:b8:26:1d:bc:03:
b5:df:5b:64:67:da:d1:d3:50:d7:ce:8f:24:a8:51:
c2:12:d3:71:2d:d3:10:09:18:27:6b:d4:6f:50:f5:
76:a1:fd:ad:21:93:6a:57:9e:c6:de:55:2a:f5:4e:
37:5d:08:93:0f:30:2e:9a:a7:62:00:e4:21:27:a2:
9a:30:d9:e3:c9:92:6d:c9:86:8b:b0:56:a9:29:6b:
6e:b1:a3:2c:9f:f2:8e:0f:3b:52:76:dd:77:e5:a5:
47:05:69:1c:b9:ef:b7:ca:0e:50:48:e9:cc:3e:71:
ea:d0:2f:6f:42:66:d4:33:33:31:75:ca:5c:9e:7a:
55:5b:57:32:22:42:15:43:88:08:0d:e7:2b:87:a7:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:47:36:70:82:D0:F9:6F:BD:8A:BD:6F:C9:CA:47:C7:6B:FA:A3
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b3:be:cd:1b:bc:d1:ac:6e:27:d1:a2:99:97:01:3a:5b:8d:
ae:9a:36:96:a7:6a:00:9a:cf:2e:17:cd:ed:f8:fd:a8:92:84:
bb:04:28:63:f0:c1:cd:33:fd:9c:7e:8d:7b:35:ce:1c:68:de:
58:95:7b:de:8d:d9:c8:8e:81:21:33:33:dc:12:54:7e:47:87:
f5:ad:2a:72:cf:fc:f9:ba:e9:23:bb:16:46:11:cc:bc:a1:24:
e6:f1:b8:4f:e8:77:d8:7b:3c:fa:1c:32:ff:af:30:40:b8:44:
79:01:7b:53:7a:e4:99:39:3b:f3:0e:57:1f:a5:c0:5a:39:45:
b4:b8:55:3c:a7:8a:89:7d:e3:c9:d9:be:9e:f4:52:d5:cf:39:
ce:c5:5c:8c:d3:60:73:86:aa:11:e1:62:a3:ef:fe:90:93:a0:
95:b1:b9:fa:ac:16:a9:8c:48:c5:0a:da:db:35:57:40:6f:d6:
0b:56:0a:10:18:5f:2e:60:cb:fd:a6:7d:17:06:b4:57:60:11:
72:03:d7:3e:7d:40:7f:ed:b9:7d:48:2b:43:3c:cc:72:4e:22:
0a:0c:25:f7:4c:65:82:2d:39:28:e9:f9:eb:5e:0c:37:55:4d:
08:19:44:a2:f6:9d:a5:01:f9:f8:00:36:01:e3:ba:7b:de:2d:
38:bf:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:27 2026 by rpki-client