Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: XrXtndFLpd6hzep+vqJHkhHyXDZTzKD9+qgtsSa4Ous=
Subject key identifier: 9F:DE:1E:07:60:02:D8:7A:A2:89:AE:1A:D1:9E:A8:8C:04:18:A7:2F
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 019D2960CCA73970A0982EBAC7ABCF6DFC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:01:42 +0000
Manifest this update: Thu 26 Mar 2026 09:01:42 +0000
Manifest next update: Fri 27 Mar 2026 09:01:42 +0000
Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: pdNpQm9dYbSmi50Qpgb5vO34a6bGCMzqdGmWWfzTTQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:cc:a7:39:70:a0:98:2e:ba:c7:ab:cf:6d:fc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Mar 26 09:01:42 2026 GMT
Not After : Mar 27 09:01:42 2026 GMT
Subject: CN=9fde1e076002d87aa289ae1ad19ea88c0418a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:48:21:1a:f1:0a:8f:36:87:7f:2f:59:79:
39:02:82:ff:a8:a1:25:0a:dd:e5:6a:d3:a1:c1:df:
b6:6d:9f:35:45:18:24:59:44:9a:31:2c:c3:f4:cb:
37:f5:d2:bc:3c:ef:7d:3e:39:91:fe:db:bd:2c:65:
1d:e1:a2:b6:90:f0:28:9f:5e:33:82:06:f3:d4:65:
ae:26:6e:0b:59:46:0c:80:05:6c:47:f5:19:bc:2a:
b7:fb:8f:35:e5:19:c4:bd:27:36:72:c4:fe:88:de:
3b:ce:a4:f3:b8:54:7f:e2:a9:3b:30:b0:bc:d4:ed:
47:83:8b:9f:4b:84:dd:2d:46:70:f0:7c:8e:33:db:
36:ab:ce:8a:54:e2:7f:c9:b1:4b:27:af:69:68:1e:
2b:06:f4:99:af:5b:41:81:83:10:27:f5:c8:07:d3:
3a:fe:1f:3f:7f:05:7a:b7:e0:f9:76:f4:05:a7:59:
70:17:ee:3f:0b:7a:ae:89:93:b6:ff:f7:88:08:a4:
73:39:3a:78:2f:03:2e:84:4f:a1:5f:4e:f0:4d:9d:
46:9a:3b:48:cd:7e:30:11:29:29:f3:83:06:0f:be:
c0:a6:77:17:c8:61:4a:ae:cc:2d:42:77:47:a8:a3:
58:df:e4:1f:70:ce:57:ec:d6:0e:79:f3:65:65:69:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:1E:07:60:02:D8:7A:A2:89:AE:1A:D1:9E:A8:8C:04:18:A7:2F
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:4d:e4:1f:d7:4e:44:87:24:1d:75:68:cf:70:f5:ae:b6:
23:09:a4:d1:42:32:e9:e8:aa:43:05:6e:e9:e9:9c:fd:a3:0b:
6d:a8:6d:75:41:11:9a:50:d8:6f:08:44:28:75:54:89:ed:c0:
ef:3c:77:22:59:54:f1:49:99:69:df:48:b3:16:9d:95:36:59:
e9:26:ef:f2:e4:d1:28:0d:ad:54:bf:da:07:13:8c:db:4b:bf:
42:14:f9:d5:d9:31:9a:ee:05:f0:cb:2c:f4:1a:39:d2:79:f2:
70:9b:da:4c:51:6b:5d:a5:c6:53:40:06:a9:35:7f:db:49:48:
d2:23:0e:f8:11:4b:df:c2:c7:52:b9:a4:da:9e:18:d0:74:48:
d6:ff:68:ab:a8:32:8a:2e:7b:44:53:2c:f6:99:aa:71:d1:c4:
a2:47:c5:5f:e5:f0:b0:14:13:cc:16:6b:fa:b7:ec:71:ff:18:
82:fd:45:f7:bd:db:c4:06:7f:19:cc:52:e2:b3:b4:aa:ee:c7:
ab:57:4a:6c:aa:16:03:c2:81:1d:d3:c3:ae:63:c5:f3:e2:50:
8d:d3:bc:85:71:76:b6:6d:ec:73:36:c8:c7:39:c6:0e:79:5d:
1e:e8:0a:cc:28:f7:66:bf:a8:91:b9:3c:ab:fa:9e:61:57:e2:
d9:bf:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:14 2026 by rpki-client