Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: 4bNc4LnpCuSIPOpTiS6AnLp8tA4wN/Il72cgNFmpOmM=
Subject key identifier: A9:C8:A8:9C:3C:53:F1:12:2D:7B:22:B0:09:05:A3:FA:96:07:2E:64
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 019D277225670D1F53A0F6A08EBDCC7D7B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0F67
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: 4bQ3DVIcXcKUiFmG5oHF6-JBJfw.roa (hash: OLz4ZIfxwyF5VVW3+IHUfqxoYFlnc0ssX7TuBteE4qA=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: dPTcX+epZlMak2GonjgwqeyIU4CeBVHn+Es/Zo51pRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:25:67:0d:1f:53:a0:f6:a0:8e:bd:cc:7d:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=a9c8a89c3c53f1122d7b22b00905a3fa96072e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:c9:ae:0f:a5:75:42:f4:9b:3f:bf:fe:1c:
86:c9:88:26:d7:43:ce:95:55:ee:bc:a9:4f:0e:b9:
70:ac:fe:12:53:4f:3d:50:7b:a8:58:f6:58:d7:c0:
fe:58:24:b3:2e:02:ee:35:64:86:bd:59:35:38:67:
ec:c9:d2:e5:e4:34:c9:7d:f9:4c:f5:ab:4b:e1:51:
f5:0a:d2:c8:1c:4d:a7:6b:5d:8d:37:92:7a:d4:80:
21:e5:b4:ae:ef:26:9c:fb:2f:c9:20:64:10:ed:96:
dd:d2:20:98:96:0b:24:5d:1a:03:53:63:38:f0:12:
87:24:c8:90:ed:d0:30:6f:30:f3:60:86:ee:0e:8d:
8e:04:c5:a4:bd:37:87:c6:36:cb:6f:9c:11:f6:4c:
29:d2:e2:b7:1c:a1:41:0e:34:f6:12:df:41:4f:f8:
56:5a:9b:a4:ea:0f:e9:86:df:00:fc:b7:d6:00:0e:
05:5d:b7:4f:a3:ed:1d:24:6b:66:5d:6c:a7:b5:fa:
39:1d:d5:c9:a9:97:2c:d1:4f:07:ce:de:86:a3:83:
db:3e:92:79:d1:1c:81:bd:8c:0d:fd:b6:d2:44:1c:
11:84:2f:81:86:39:ca:33:dd:26:15:1c:71:56:e0:
c4:1d:25:f6:fe:43:f7:0d:51:22:0a:91:5c:90:5a:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C8:A8:9C:3C:53:F1:12:2D:7B:22:B0:09:05:A3:FA:96:07:2E:64
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9c:09:5c:cb:99:b0:a8:12:df:fd:4d:1a:0c:a3:5a:7d:61:
e7:c5:d1:5c:9e:64:7c:e9:96:7f:8f:e1:79:1b:06:f8:f3:4d:
f4:41:34:29:06:ba:17:aa:0c:b5:0b:fd:1b:83:96:fc:cc:c2:
96:03:ff:a9:7d:69:0a:c8:78:69:62:a4:53:7f:80:20:7a:7d:
24:06:25:fa:2a:d2:9e:39:be:c0:d9:fa:db:06:d4:41:16:65:
15:90:cd:42:7a:e8:c5:1b:ec:88:6c:dc:1d:16:62:e0:44:a9:
a1:4a:2b:df:d6:dc:4a:a0:bd:20:10:cb:b4:6e:18:e4:1b:30:
aa:a8:3b:56:b4:15:99:1a:7e:6e:d8:5b:8d:6d:3b:f9:90:54:
d7:3b:a3:86:e1:53:47:e5:a7:5a:df:62:e7:fb:63:34:20:21:
bd:ae:84:44:67:de:8a:3a:a6:9d:3f:63:c8:55:3a:4f:9e:31:
7a:b7:b7:61:fc:97:59:b9:4d:57:61:71:b2:2a:49:46:d2:c0:
75:8b:fc:d6:26:45:13:88:d9:c8:cd:44:68:46:d8:71:f5:9e:
c6:41:a4:12:4e:9b:8a:73:fe:c8:ec:d5:ab:b1:67:b1:54:81:
0d:02:23:8f:92:ab:97:d2:fc:05:c0:a0:74:dc:50:a8:8c:fc:
8c:fc:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:33 2026 by rpki-client