Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: MBOBfto8HSaBO16qwSRh/3U+Cv2DYXnOaB5xXN3lr8c=
Subject key identifier: 48:ED:65:46:2C:C8:F3:61:3F:EE:CE:EA:51:AC:A2:CA:F0:AF:F3:16
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 019D26284BD3958973D65F1863B178DC2152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 09CA
Signing time: Wed 25 Mar 2026 18:01:08 +0000
Manifest this update: Wed 25 Mar 2026 18:01:08 +0000
Manifest next update: Thu 26 Mar 2026 18:01:08 +0000
Files and hashes: 1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: 4FsaX9UCiG/Vhz0EMAALT0NDo1wowvwhpZZ5euEJBLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:4b:d3:95:89:73:d6:5f:18:63:b1:78:dc:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Mar 25 18:01:08 2026 GMT
Not After : Mar 26 18:01:08 2026 GMT
Subject: CN=48ed65462cc8f3613feeceea51aca2caf0aff316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:d6:1f:c9:3a:91:1d:86:48:f3:17:cb:45:
99:53:2e:08:b4:06:02:f1:ee:c6:ec:aa:3e:3f:33:
c0:6f:dc:95:8d:b9:8e:b6:f6:48:d9:dd:74:e2:67:
62:42:18:25:6e:56:30:f5:54:37:0d:db:24:06:9a:
53:d8:e7:26:ca:16:63:73:bd:ed:01:3c:ab:9f:2b:
c0:0d:1b:a5:70:09:ab:98:a4:34:a5:f0:5b:12:96:
b8:ef:fa:82:89:55:a8:b1:ac:6e:e8:16:ef:8e:ea:
da:d3:b9:64:39:e1:3d:55:ac:c2:07:96:db:f3:92:
07:49:0f:71:3d:a7:ef:bb:09:7a:a5:2b:0e:ec:44:
7e:25:1f:fd:14:61:5d:5e:1a:9c:88:a9:60:a7:95:
ea:5b:cd:b9:cd:7f:37:3a:34:77:c0:cb:0e:62:5b:
62:2e:8a:69:c9:b2:97:30:01:0e:f7:5f:13:46:0d:
7e:63:25:0f:c8:d1:95:14:f9:d3:ae:03:f4:e1:43:
13:5e:62:86:de:96:1e:59:9d:80:cf:f1:2c:7b:bd:
d8:05:bb:13:8b:0b:f5:13:2d:1b:58:7b:8d:17:8f:
56:2c:ae:55:4d:e6:5f:88:ac:c2:68:e5:c4:a0:3d:
8b:7c:c3:68:fc:ec:ea:69:65:8b:5b:d6:2c:92:5f:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:ED:65:46:2C:C8:F3:61:3F:EE:CE:EA:51:AC:A2:CA:F0:AF:F3:16
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a2:0b:52:55:e7:4e:d4:2e:2c:30:6b:70:c6:a4:8a:ea:78:
bc:af:5a:e7:f2:5d:4f:b9:5a:a3:da:f2:e8:9e:cd:f7:a8:c4:
15:34:12:b9:7a:08:38:23:05:f5:c8:88:42:4e:d6:59:42:08:
e3:52:b7:b1:48:3a:21:b9:33:c5:8e:7b:58:5a:f7:05:60:e6:
ac:eb:9e:60:00:d2:98:11:d4:36:03:2e:33:6e:23:43:45:80:
a4:78:32:fb:7c:62:f1:c5:4e:f4:b9:38:61:2f:9c:56:f0:6b:
96:55:f5:e6:70:3d:85:0a:72:2e:f9:25:dd:70:41:6a:24:71:
4d:2b:a8:7b:ed:e8:ce:04:21:3a:cd:26:60:73:b0:b6:8e:25:
ab:04:3d:7d:4d:eb:56:9c:36:83:71:3a:b5:5a:a7:06:53:d8:
6b:2e:4d:7d:77:0a:a2:b9:47:09:93:4b:07:a6:f1:2f:80:66:
82:6c:a5:59:9c:c7:1c:a2:1a:69:5a:41:3c:ac:c2:76:ec:a0:
dc:7b:f4:ae:12:de:82:28:13:a2:1e:b1:b1:0a:fb:94:72:91:
49:c9:88:da:b7:98:c3:e5:22:92:27:fb:3e:7a:12:ce:33:33:
a1:21:12:15:74:6a:42:58:a5:55:aa:00:43:d7:55:31:29:2b:
2f:04:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:53 2026 by rpki-client