Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File: wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier: M6mbzJK5bban0wsdmVVd2t/nOMp3baAHc7lrklcdsmg=
Subject key identifier: 41:0A:1D:44:04:70:2E:25:B0:60:7A:FD:C3:E0:08:53:5A:BE:08:A7
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial: 019D2704BCB5B1A361AE03054E97FDBF10FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number: 12A2
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: oQepNcyAV3n8LUNhG2lmlku6ctQ.roa (hash: 57EPoHIct+eDALqqvem38LPIDDYzx2hlHTQeuMM95dE=)
2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: RDc0L0vEoZ0LDCEXjoQok91aBxgwYI2Tnpt/QecCRKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bc:b5:b1:a3:61:ae:03:05:4e:97:fd:bf:10:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=410a1d4404702e25b0607afdc3e008535abe08a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:53:b3:6f:b1:b2:de:b1:aa:e2:60:ba:d8:
f7:9c:1a:5a:24:34:4a:aa:82:20:81:d0:20:ab:e7:
fa:bb:d9:22:f4:b9:a3:fe:0a:df:12:10:8e:c4:bb:
49:ba:89:fd:be:fa:4f:3f:d0:bc:d3:06:d6:87:c1:
3a:72:50:6e:ac:e8:64:f2:b8:f1:fe:ec:96:8e:39:
f8:19:0b:11:71:bf:30:2e:d6:ba:da:d8:b1:4f:59:
e1:ab:fb:1c:09:31:42:86:3c:18:23:f1:f3:42:5d:
90:ef:d1:93:db:46:e3:55:e6:0d:1f:7f:cc:5c:09:
68:74:a1:45:31:80:3c:62:19:3c:2d:cd:4f:b5:e2:
37:f9:a5:33:56:6f:30:a8:51:d6:32:5d:55:d4:db:
87:ea:a6:35:cd:3f:6b:63:b1:79:f0:de:d8:47:d1:
af:de:69:32:1b:bc:60:17:fc:7c:dc:0e:7c:6d:33:
50:78:3c:e3:2c:80:25:56:54:5f:91:9e:4a:1a:95:
4c:cc:3e:e6:ca:10:05:d0:92:b2:60:0d:29:2f:9a:
f9:a7:98:6d:bd:ca:be:92:c3:c1:f2:35:d2:b1:cf:
21:46:6f:4d:2d:0f:b6:c3:f7:fd:0b:9b:34:ab:8a:
5f:4e:6d:cd:18:02:7a:50:d9:c2:71:57:e8:83:9a:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:1D:44:04:70:2E:25:B0:60:7A:FD:C3:E0:08:53:5A:BE:08:A7
X509v3 Authority Key Identifier:
keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:99:98:8c:62:1e:32:84:9f:6a:61:77:a7:7a:74:10:7b:26:
a2:0b:bc:9f:64:4b:70:3d:b5:f3:9e:dc:44:a6:4f:65:dc:03:
b6:5f:b1:06:3c:ee:c1:99:fa:a8:47:17:5a:8f:3c:30:7c:94:
2c:ec:8b:13:a9:bc:a0:2d:c2:6a:56:90:a2:37:a7:af:f5:c7:
63:7b:65:78:4c:92:96:c3:61:d3:73:dd:9e:da:56:09:3c:02:
8c:3b:eb:eb:4e:8c:eb:80:13:d0:12:e3:d3:24:ce:cf:57:04:
db:ff:c4:e8:c4:b2:10:da:15:13:00:ad:30:9d:58:16:63:9c:
04:4b:d8:37:41:6e:c5:84:b4:a8:bd:fe:e3:af:b5:66:72:05:
32:a1:14:ef:3a:ad:58:ad:96:a3:f0:3c:f1:9b:16:11:51:ab:
5c:c4:09:5f:e0:44:63:89:5f:45:e3:40:a1:80:b6:0d:f1:44:
d1:91:84:97:66:28:04:2f:7a:09:18:42:d0:69:90:09:cf:2a:
90:7e:bc:c5:32:67:6e:ab:a3:89:36:c8:ae:44:34:70:83:7b:
4a:9b:1a:b7:06:57:f6:98:06:22:02:70:2f:45:7b:fd:ad:da:
5c:e8:57:68:70:6b:50:54:98:e8:fb:97:98:39:8c:f8:e4:d1:
f7:91:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:45 2026 by rpki-client