Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
File: wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json)
Hash identifier: rseXTMQmvgdOD9siDw345CqVZstgtghM1KdvEbeUiRA=
Subject key identifier: 83:AA:4E:C7:81:29:12:0A:88:63:EF:97:AB:B3:0E:94:2B:F5:8D:F0
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial: 019D2703C6ABBB23FA974B87D3146D0EFDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
Manifest number: 0598
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: CBU14gZu_1qsi75R7hrvSmuj54o.roa (hash: 9hAgFc1Ht8EZP3iYR8ynDcxgH4YhjqI6F0AQHVc/49w=)
2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: IKny973T2K3a90gtmGs7tKfoIl+ufUDvn+DiHqzCmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c6:ab:bb:23:fa:97:4b:87:d3:14:6d:0e:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=83aa4ec78129120a8863ef97abb30e942bf58df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:22:97:c4:92:4b:0d:fd:fa:fe:43:22:b6:
ca:c8:48:34:c2:2e:c0:ba:4c:25:04:94:44:a4:40:
c8:ca:42:e8:b1:e5:e3:04:30:2b:95:bd:60:1e:37:
41:9f:10:c2:a5:81:f1:ba:da:1a:a9:11:4b:7b:b5:
bf:f3:9b:ce:8c:b4:2a:5b:e1:cb:a1:d5:17:be:1b:
31:c1:38:98:54:d8:4f:3b:53:39:6d:e8:14:c0:8b:
94:0f:fa:55:9a:7d:8d:1e:0b:36:b1:f5:96:93:8c:
4c:a1:02:22:2f:b0:b1:bb:49:0b:d4:07:47:4b:a7:
46:83:86:b6:98:0a:47:09:7a:89:14:57:09:ee:44:
80:f2:50:ca:87:8f:72:d9:05:2f:ab:3f:91:09:1b:
12:e9:47:a7:c4:d9:12:db:0e:bf:18:dd:11:67:13:
6e:93:ae:2d:39:94:ab:6d:7d:4d:ba:69:77:91:35:
bf:5b:6f:47:bd:b5:0e:f6:fa:81:c5:87:32:eb:48:
96:2e:b1:e7:66:ba:72:de:27:dc:64:40:8f:b1:56:
be:ac:3f:92:55:d1:75:d5:29:a0:c1:99:65:ac:d6:
3a:69:aa:a4:3f:98:ac:67:08:b1:87:f8:c8:cd:98:
41:c3:a8:ae:36:ba:7f:60:9a:75:3c:79:b3:8c:f6:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:4E:C7:81:29:12:0A:88:63:EF:97:AB:B3:0E:94:2B:F5:8D:F0
X509v3 Authority Key Identifier:
keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:81:30:68:5e:06:b6:b2:52:2f:9f:34:72:ac:69:14:94:96:
a2:f8:7a:ad:ea:ae:9d:18:06:80:c9:71:fd:2a:4c:38:72:58:
e7:6c:f6:b2:e4:c7:1f:40:bf:65:9d:d4:3c:ac:3e:99:06:5f:
93:99:7b:54:d7:26:3c:29:b1:56:87:42:07:9b:51:54:d0:7b:
41:5d:df:72:4f:3a:73:35:86:87:2f:45:14:21:96:7e:3b:26:
6a:da:49:06:1d:5a:1b:4d:3e:de:d3:01:21:a3:06:08:c3:df:
49:fc:d2:ec:e2:8b:47:31:5b:71:19:d6:16:12:39:df:ca:01:
95:a4:51:e8:7a:fa:84:98:d7:4d:46:9d:aa:01:6a:85:c2:34:
e9:3c:c8:67:0e:75:dd:58:8c:34:7a:fc:bf:41:84:ec:16:9a:
61:68:86:c4:ae:69:9a:3f:45:6e:ca:ee:f2:81:ea:ec:d8:44:
04:a8:b9:0c:78:f5:79:f8:6e:01:39:9a:6e:b5:58:5d:fa:6a:
51:ab:ef:af:21:88:eb:73:c7:c8:12:56:1a:cc:20:51:1c:3f:
ef:f3:33:68:25:d7:c3:1a:e1:39:71:c3:b8:3f:b0:7a:ee:4c:
76:ee:76:3d:b1:35:f5:ac:e6:7d:fa:57:f0:cf:e1:ae:2e:64:
4b:d5:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:35 2026 by rpki-client