Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: NK7pqlUz28QiGXvXcghXxcrrXfBNpbFZ2C4J5scoq8s=
Subject key identifier: A5:F9:13:D5:A9:6F:96:96:10:05:5A:A8:5F:88:4F:56:B4:15:5A:FA
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 019D27A894ABDEC2724BEA39217AEED53528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0DFC
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa (hash: vntZWOVkcSUsnEymKfN5wS2x8DI+HCyMmnVf/ey0knI=)
2: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: T7/ZSp5RU2dhW/XmsOYy4EZI2rhFIMyfngcvTZe7Nw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:94:ab:de:c2:72:4b:ea:39:21:7a:ee:d5:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=a5f913d5a96f969610055aa85f884f56b4155afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:9c:14:b2:02:fb:81:a9:89:0f:a0:8a:a8:
e7:bd:f6:7e:6f:64:96:62:d1:c7:22:81:02:27:5c:
86:58:c7:e5:aa:08:75:11:01:c2:48:e4:f8:54:ac:
5e:06:f7:0e:06:17:c6:cc:1b:0e:bb:32:01:3f:46:
22:21:42:09:f3:df:af:30:f2:1c:52:cb:7f:30:41:
e0:18:7a:1f:23:59:b6:79:18:1a:c4:b8:d4:1d:2c:
c2:d2:07:e4:29:64:4c:42:eb:45:c1:7d:74:64:8e:
be:ed:f5:91:11:65:d0:6c:a4:a0:73:06:53:55:c8:
0a:f6:45:25:e9:32:d8:c7:8d:a2:ab:4c:0b:6e:e6:
fe:29:e7:05:5e:92:50:c0:a8:d0:ee:4f:f1:2e:3e:
89:36:c1:7a:26:68:83:93:7d:e5:53:0e:11:6f:0c:
6c:9e:85:28:a5:67:f2:1d:53:3c:6e:a3:1c:55:d7:
20:20:e2:ab:41:19:20:f2:06:a2:6f:1e:70:cc:8a:
d0:66:8b:92:8c:94:2d:6a:80:e2:93:b6:fd:25:30:
77:5f:0d:48:f8:d7:eb:94:ab:9a:bc:b1:c8:1f:a9:
47:f7:96:d8:e7:16:37:f9:0d:f7:25:53:fb:b8:9b:
a1:dc:be:03:94:ff:f3:b1:22:8e:48:5e:bb:88:75:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:13:D5:A9:6F:96:96:10:05:5A:A8:5F:88:4F:56:B4:15:5A:FA
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d6:a9:5a:19:80:ab:28:3f:8a:e9:a0:d4:0a:b8:1b:e7:d4:
a4:28:ca:42:b3:48:43:7a:1b:c7:4c:55:eb:dd:8c:98:11:48:
e4:b2:8d:81:07:e5:fc:73:e6:b2:1b:b8:69:b4:88:ae:d7:2e:
d3:9a:55:2a:6c:cc:96:57:f4:55:35:e9:26:51:5f:13:d4:fc:
9b:85:d2:2e:4c:28:59:c2:de:13:16:3f:18:70:25:02:93:75:
17:6d:27:22:af:c6:f4:ad:f3:e8:fa:ff:ff:bc:63:a1:8d:1a:
a8:05:98:03:ce:8a:28:b4:02:6a:99:63:6a:00:d7:6a:31:31:
db:58:6f:2c:58:cd:f5:a7:e4:fb:33:63:33:f1:55:85:46:49:
d0:e2:77:ad:fd:97:95:ab:ae:04:80:0b:43:93:26:fb:d0:52:
60:f7:63:c2:e0:60:77:9e:72:53:8b:a0:2b:2a:53:97:f9:0c:
bb:73:73:f4:f3:15:d7:65:59:64:a0:99:3a:60:16:be:ea:20:
da:e2:3c:4d:53:96:91:59:75:bd:ac:4e:7b:96:2f:aa:e2:80:
8e:2b:d2:20:78:ff:a7:9b:f5:3b:ee:2d:79:7c:57:c8:53:42:
7f:62:84:ba:79:07:0c:9b:1e:12:62:dc:6b:c2:1b:e5:f6:2a:
ba:ba:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:48 2026 by rpki-client