Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File: wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier: /tJMvkE05/IuYofY6EVIskoHKW+qC0F3QQok5mpEQec=
Subject key identifier: E5:18:23:D8:59:51:AC:8A:AD:29:39:6E:61:EC:FB:85:BB:09:AE:71
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer: /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial: 019D29CEDE886EE0AC19CF09FCDC922A2673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 11:01:56 +0000
Manifest this update: Thu 26 Mar 2026 11:01:56 +0000
Manifest next update: Fri 27 Mar 2026 11:01:56 +0000
Files and hashes: 1: LJ5gZJSPzwjdTVggDFY4W_1l4w4.roa (hash: ik1OvlzeTsw4mzKCrPXBw8FurNhNyxucfV+IOGhqUhU=)
2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: 1wv0Gs+ae1+LADUr72ly6p3TCDFbRAk9rIJ8PGeJVF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:de:88:6e:e0:ac:19:cf:09:fc:dc:92:2a:26:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Validity
Not Before: Mar 26 11:01:56 2026 GMT
Not After : Mar 27 11:01:56 2026 GMT
Subject: CN=e51823d85951ac8aad29396e61ecfb85bb09ae71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:07:ce:e9:ab:01:23:c4:f4:d9:64:30:b8:
d3:57:15:92:0e:86:42:6b:80:35:e8:ad:d2:7e:e6:
61:ab:8a:16:bc:f9:d1:91:ca:60:4f:81:84:72:5b:
f8:cc:2c:7f:80:7c:c3:cb:de:16:7f:b3:e1:c2:67:
eb:30:66:37:4a:16:7f:82:2a:2a:5b:86:f9:f9:e1:
4a:45:a2:02:0f:b8:3d:06:0b:3b:44:cc:c3:bd:6d:
6e:ca:f4:b2:91:12:34:a5:61:72:e4:60:99:cb:ce:
a2:e7:e1:83:91:26:a1:d5:8c:16:cf:00:bc:da:74:
04:39:ba:9f:1b:8f:db:59:5a:dc:a9:85:ef:b2:f9:
56:66:26:60:84:63:3c:91:c6:0f:e3:3b:a1:61:cb:
0f:a4:28:57:90:18:91:58:a0:6f:1c:97:0b:0a:6f:
32:3d:67:a0:8b:4b:6f:b2:a5:e9:f2:3a:5c:53:42:
89:f1:3c:4a:16:81:c5:03:5c:d4:66:47:02:3c:c2:
67:42:ae:35:de:31:bb:68:b3:2c:25:1d:06:3f:cd:
99:84:9b:cf:e3:2b:7b:60:f1:15:df:cc:f3:84:19:
9f:d1:99:f8:59:72:66:01:db:e5:9e:d5:42:9b:57:
b9:66:36:89:55:ec:c6:af:49:ea:30:0a:8e:37:38:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:23:D8:59:51:AC:8A:AD:29:39:6E:61:EC:FB:85:BB:09:AE:71
X509v3 Authority Key Identifier:
keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6f:f2:d5:1d:49:e3:37:72:17:c6:5a:be:ff:93:8b:01:ac:
05:4f:73:d0:59:ac:90:ed:27:49:90:a8:0c:d8:a6:3d:92:37:
3e:26:19:0a:e6:a0:f8:46:76:ea:65:38:23:ba:d4:8b:05:04:
85:a0:1e:0c:42:25:a3:f3:86:ce:8c:18:4c:01:20:b4:1a:34:
40:a0:1c:d8:8b:45:9f:9f:91:dc:5b:49:d3:4f:07:46:a0:a9:
d9:b1:af:0d:b2:5b:8e:02:64:9e:f2:9a:81:d8:8b:97:89:a1:
c1:1c:ea:eb:e1:f0:02:b0:66:02:87:e4:91:e8:6a:99:2c:76:
12:35:1b:b2:c7:19:1e:c5:02:ab:fb:f1:af:44:25:79:f0:fc:
88:39:54:61:9f:17:ab:48:e8:ee:5c:6d:02:32:9d:6f:7b:09:
19:f9:40:f5:b0:e4:61:51:fb:7f:1f:0f:fc:7a:fa:62:93:fb:
25:f2:72:a7:38:a3:f6:ad:fe:d3:a4:69:89:02:29:8b:57:0a:
d3:1d:2f:07:9c:40:11:96:f8:6d:61:89:9e:5e:8d:2c:c9:b0:
a1:a1:1e:c1:22:4f:b6:01:8b:70:48:7a:09:60:50:37:ef:f9:
06:d9:cc:52:4b:f9:4b:eb:a8:ef:04:04:a2:d0:33:e6:0b:6f:
ae:5d:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:16 2026 by rpki-client