Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier: BdMIEij7zRiZqOCwm4SuWAOkXf+soZyhR9nRWKwSXhQ=
Subject key identifier: A6:5C:63:62:04:CE:B7:6F:7A:04:A0:39:8A:A3:6B:56:27:2B:D3:B0
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019D27048F67E986FB186BFF04E7BC2E7372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number: 0192
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
2: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: Eg4k9sesOHdTvj6rk3dkT37ufOrFwedcBToiih8V1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8f:67:e9:86:fb:18:6b:ff:04:e7:bc:2e:73:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=a65c636204ceb76f7a04a0398aa36b56272bd3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:c6:fc:c7:3f:db:27:38:4d:3a:77:eb:2d:
c2:cd:27:a1:3b:a4:e3:7e:f0:44:55:4d:65:d3:fe:
8b:1e:c1:47:a2:c2:7b:82:fd:e0:2e:ec:70:09:07:
5d:f5:5f:c8:dd:3e:20:fc:87:38:e7:ed:92:18:a4:
b3:70:d0:88:ae:f4:52:ea:ef:94:38:f5:d0:3c:4f:
92:7e:4e:2e:d3:58:83:2c:3e:64:49:50:f8:31:53:
69:c4:ff:ff:17:36:52:bb:1b:54:d1:83:b3:af:47:
dc:40:6c:26:35:b8:6f:75:05:88:32:9e:b9:91:8c:
e2:e3:02:40:21:ef:58:48:3e:d2:bb:8c:52:b2:72:
ef:0a:36:b1:3f:2e:24:8e:ac:d7:ea:40:b9:35:68:
5f:f0:11:76:5f:6b:9d:0b:6b:b7:2a:a3:11:22:cb:
65:bc:00:a2:2f:c9:13:c8:80:db:f8:8f:d3:9b:16:
f4:7b:2d:49:29:2d:8e:87:06:92:04:d8:78:ee:33:
12:7c:6c:63:a4:a8:94:11:3b:df:6c:76:b2:1a:04:
f2:a1:88:e0:06:06:bb:2a:f3:b0:1c:4c:19:04:43:
36:b5:e1:53:c5:31:9f:92:bb:75:ac:9e:fd:5a:e4:
69:bb:6d:4f:bf:4e:bc:df:a2:98:f2:28:95:0c:dd:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:63:62:04:CE:B7:6F:7A:04:A0:39:8A:A3:6B:56:27:2B:D3:B0
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:58:2a:bd:26:19:84:8c:92:2b:2d:44:3e:87:28:db:1d:e1:
f9:f6:64:4b:bf:47:96:b1:6f:74:da:31:bb:61:87:17:63:7e:
aa:96:22:19:90:d9:4d:41:26:19:ac:1d:dc:fc:4f:06:d7:f2:
97:f2:ea:9f:5d:0b:33:20:77:e4:c9:61:d2:68:7d:0e:68:14:
da:da:e7:c5:02:21:73:7e:ef:b6:72:3d:e2:4e:d7:6e:05:dd:
c9:a9:ac:1f:d9:41:5f:ab:9d:eb:bf:66:3b:ed:c7:0d:1f:4f:
e2:96:1e:75:75:24:9d:3d:67:90:91:85:84:95:a9:82:0c:6c:
b8:be:b3:6f:7d:d9:68:b8:23:b0:29:b8:92:ab:1b:b7:0d:d2:
f4:cb:61:21:9b:69:d6:3c:2d:63:2c:c1:f6:4d:f6:64:93:dd:
fe:42:a6:d7:e1:94:e2:53:f7:27:95:86:20:12:5a:bf:04:ed:
ad:fa:91:da:ff:22:db:a6:b8:7e:81:5f:74:68:3c:66:f0:af:
26:fb:57:61:09:87:34:43:cc:73:6f:d2:4c:61:a4:8b:c1:2f:
9b:20:ed:5e:81:af:6c:42:83:06:03:fc:54:36:dc:94:b0:a1:
1a:6b:86:55:ef:61:e3:a4:59:b6:85:cf:bf:a5:95:c3:46:19:
94:82:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:35 2026 by rpki-client