Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: /rYT8zDo8NbzJTqex02lquMuBP+aNz9W48ZYlmP1mt8=
Subject key identifier: FB:53:1F:3C:4D:33:9B:AE:35:A5:27:D3:4A:71:9F:63:CA:12:3B:E2
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 019D29971DC3E5A428B9EC8B72855DB68A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1897
Signing time: Thu 26 Mar 2026 10:01:02 +0000
Manifest this update: Thu 26 Mar 2026 10:01:02 +0000
Manifest next update: Fri 27 Mar 2026 10:01:02 +0000
Files and hashes: 1: VIJwQfnhHs3GHlmC403kclYI19k.roa (hash: pBGpIGY8oZecekT32agQOuUVvcZzYj8n135ZMBKxfjM=)
2: v0t-x1ezAOQzRGxbJKUbHeC0HN4.roa (hash: NklbdNXJrdH3kXOcwc9Kb/YETkdY+vXKTqyupumOkFo=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: KBJ83q07F6XVlIj+I0yW6KDAQlBuO6AHKmsOCwETZd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:1d:c3:e5:a4:28:b9:ec:8b:72:85:5d:b6:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Mar 26 10:01:02 2026 GMT
Not After : Mar 27 10:01:02 2026 GMT
Subject: CN=fb531f3c4d339bae35a527d34a719f63ca123be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:27:ba:9a:00:d4:0c:6c:e3:4e:1e:a3:9a:
d5:cc:79:c1:e2:6e:4c:d7:dd:68:b7:6b:f9:7f:97:
a0:26:8d:ee:8d:67:35:84:62:a8:38:de:a6:fa:f5:
ab:8f:13:e4:5c:f2:1e:0b:e9:ee:95:38:30:6b:02:
f0:4a:85:3e:8e:3d:d5:44:fc:07:6f:d6:77:61:6b:
96:23:9e:df:5a:2a:3e:89:59:a9:c4:ae:f7:a3:e8:
71:0d:4e:fc:19:ae:74:c9:4f:7c:2c:cf:7e:e3:6c:
c5:8d:78:ed:23:8a:2a:61:6f:ff:5f:35:ca:2b:ca:
8f:0b:1a:09:11:7b:31:e2:11:8b:f9:da:db:65:90:
f3:e9:12:ed:22:57:00:3e:c0:83:31:2a:20:54:ed:
68:70:1c:ad:c3:a3:d6:d2:fc:ff:a6:db:ea:0c:f7:
a7:e3:65:bd:a0:fe:e8:1b:21:85:27:a6:74:14:69:
1a:39:ba:dc:91:bf:ed:d2:3f:17:03:8d:ab:41:2e:
fc:7e:a7:bc:eb:71:9c:0f:7a:b4:d3:cd:27:b1:d5:
09:00:ff:08:29:9e:07:ab:46:4e:f4:61:ee:5f:75:
44:3a:0b:10:74:75:92:99:bf:f0:3c:bf:41:ce:40:
84:cd:21:a0:fa:c6:ea:05:72:57:48:ee:69:6e:32:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:1F:3C:4D:33:9B:AE:35:A5:27:D3:4A:71:9F:63:CA:12:3B:E2
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c0:2e:25:92:31:ec:c1:db:6b:c6:65:c6:78:09:54:d3:4b:
21:35:a4:fc:18:a7:92:14:8b:ed:f4:ce:81:fb:dd:6c:54:2b:
a2:46:a5:8a:19:24:cf:4b:a5:78:0e:cd:0d:69:4a:c0:09:8e:
41:22:3e:5e:00:9c:38:21:19:e9:6d:78:04:5b:3b:37:27:b8:
20:16:07:fe:e5:b5:d1:c6:56:b4:5e:9d:76:27:a9:a1:95:0b:
47:53:3b:2e:e7:56:82:10:b2:90:e8:0b:60:ad:04:1c:fd:26:
8a:5c:95:28:dd:fc:d2:6a:d6:54:4e:79:01:c1:74:b7:4f:21:
b1:bd:c7:99:21:d8:1c:dc:01:9f:e8:18:a6:bf:64:da:d4:0d:
6a:05:6d:34:60:7a:1b:9f:5b:4e:1d:86:b1:ce:f1:44:25:5c:
33:10:bb:bc:d7:fc:38:28:96:b6:47:71:c4:34:5a:79:07:87:
27:ce:1c:13:24:1b:19:6a:62:84:12:1d:ab:c3:1a:fd:ea:ea:
39:e5:cd:c0:6a:40:4b:78:75:b0:9c:d6:14:e1:be:a8:89:8c:
d4:dd:81:63:6d:03:d7:9b:22:35:e1:02:1d:26:01:ae:f9:5f:
43:87:76:61:ca:f9:99:6d:4d:d5:59:2a:da:9f:87:3c:05:de:
b4:13:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:48 2026 by rpki-client