Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: VZRbY/cdROovOlqyIjbxcCPsVDJlAXjqiy+IzZctbUw=
Subject key identifier: 3A:1D:1D:0D:74:58:0E:B2:EE:48:CF:83:37:3A:14:9F:F4:17:F9:BB
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019D265F551BFCBB2AF0937FBB13DB458C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0AAF
Signing time: Wed 25 Mar 2026 19:01:14 +0000
Manifest this update: Wed 25 Mar 2026 19:01:14 +0000
Manifest next update: Thu 26 Mar 2026 19:01:14 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: A4xS9jSdaIs0jyg4Ixd2H5HC7lI/FM/yyRANyVaTYPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:55:1b:fc:bb:2a:f0:93:7f:bb:13:db:45:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Mar 25 19:01:14 2026 GMT
Not After : Mar 26 19:01:14 2026 GMT
Subject: CN=3a1d1d0d74580eb2ee48cf83373a149ff417f9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:00:27:53:9a:ca:89:9d:da:20:9a:e2:1a:
21:cd:28:8e:88:bb:c6:27:43:27:53:54:ba:b6:31:
68:8d:c7:d5:3c:c9:2b:59:6b:2b:2c:51:f6:61:68:
87:ae:6f:d0:d1:9c:be:cd:f6:64:6b:90:3a:6c:61:
51:0e:4f:34:c7:6d:79:cc:b7:29:76:83:ee:2c:29:
c1:3e:0f:b8:7e:74:92:c4:c0:d7:5a:ab:e7:45:09:
75:ac:bf:3d:95:21:b8:73:b8:3d:fb:e7:e0:ac:75:
3f:7c:ae:5b:55:59:76:84:27:45:72:3f:10:85:45:
9a:e6:ea:b7:68:0d:e0:d6:16:b6:dd:ad:f1:88:3f:
0e:87:7c:d4:f9:92:1a:1c:57:05:aa:34:e1:fc:ae:
1f:14:5b:df:f2:b6:a7:f0:3e:bb:c7:62:25:80:aa:
ef:3d:9d:85:bc:70:71:32:5d:9b:7d:da:76:d3:95:
12:a2:be:ac:dd:f5:e3:a8:ed:88:44:87:3d:cf:58:
33:e7:91:86:2c:dc:cd:88:21:cc:f1:ef:35:83:6d:
c0:5a:25:21:f8:1b:7f:76:b8:db:d8:1e:bb:11:20:
cc:88:34:32:e5:12:55:a9:b7:a1:e6:c7:a7:1e:b2:
48:84:98:4e:f0:31:92:a6:1d:e8:68:d5:f1:d8:3f:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:1D:0D:74:58:0E:B2:EE:48:CF:83:37:3A:14:9F:F4:17:F9:BB
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0f:12:d9:9e:23:c4:0c:38:9d:e6:9c:67:db:89:a3:f2:0e:
8f:cc:2f:53:44:71:ca:52:e5:d6:dd:7d:cc:99:2c:f1:fc:4a:
bd:8e:13:ec:cc:f5:4e:12:65:23:ba:c9:38:29:12:a3:0f:7a:
1a:53:40:7a:b9:99:45:6a:0d:3d:08:e2:2d:f6:19:1f:f3:af:
1c:96:f3:7c:26:1b:d5:2b:5a:9c:86:e7:92:21:51:26:48:bd:
12:c2:52:67:63:3d:98:f3:f6:e2:ab:56:fe:f4:df:c0:f0:b2:
a2:f2:5d:4d:09:c4:80:f7:73:0c:e5:27:b1:16:7f:ea:3b:4e:
18:ef:00:44:ee:17:ac:d7:c1:13:68:f5:cb:75:8c:81:a2:b7:
98:b4:5e:1e:a8:45:8a:34:dd:c9:29:bc:52:8b:8d:1e:a6:eb:
78:cf:ad:74:3b:7b:6a:2c:a2:11:2f:0e:8f:16:1b:74:3b:e7:
43:91:8e:47:06:16:31:f7:0b:2d:67:db:3e:59:56:f7:21:2f:
6c:94:2f:46:68:f1:53:0d:3f:65:9e:f2:dc:28:08:5f:0c:3d:
8f:f4:c1:d2:ca:60:54:22:6b:07:f9:4a:3f:06:ef:c7:fb:9e:
88:a0:49:45:49:da:5f:2b:79:59:c8:92:bd:cf:5c:be:67:52:
1f:a8:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:09 2026 by rpki-client