Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier: YCksI7+28izu2um0BJU1K7wsFg4R4DZm1YWn3GyG7PM=
Subject key identifier: 9B:70:11:82:99:55:33:F3:AA:96:6C:25:5A:A6:1C:BA:1E:FD:07:2B
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 019D26CCC1FA571EED7913C2D90F1DBC4286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: LZ-6W0p7V-_FK2vNKbU1WckOSyQ.roa (hash: w9kLA3Gv8FlNVERrO2aaxlGZDvx7nVjiV7GPYUks7IM=)
2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: hLSvnzG1INXQKFX8hAwvdcSDI0veLVg3pWQqCfXDB/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c1:fa:57:1e:ed:79:13:c2:d9:0f:1d:bc:42:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=9b701182995533f3aa966c255aa61cba1efd072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:98:fc:95:2a:5f:a6:09:67:14:c6:b6:3f:
6b:20:bb:72:61:4d:63:c3:d2:38:9e:d2:50:0a:27:
45:88:49:8b:11:c1:0c:92:f4:c7:06:7c:69:4d:0e:
45:f9:98:0f:c3:44:90:62:b7:2a:c8:0a:97:e8:34:
46:59:db:68:99:2e:e1:70:25:87:5c:54:26:e1:88:
ad:ed:3a:f1:9e:23:45:c7:2f:2a:62:6b:87:57:38:
bd:14:ad:c1:25:6a:3c:09:e5:ca:30:37:60:e9:01:
44:db:59:c7:aa:aa:e3:5c:9d:0e:af:1c:f3:d6:f6:
66:7a:21:30:7d:61:ac:ca:ce:ee:30:d3:d9:44:12:
a9:f7:93:49:3e:b0:c5:b2:8b:ab:c4:91:c8:48:24:
db:84:3f:fc:76:00:e8:87:62:e7:e7:78:bd:2b:00:
82:da:64:66:4b:16:35:fd:31:99:0f:68:99:eb:5c:
54:9c:59:a9:ad:c6:e0:10:75:41:74:1a:8c:e3:4d:
c6:d0:45:bc:be:b4:9c:b4:aa:71:c9:23:d8:0a:21:
0f:b2:c9:9c:11:38:c7:3b:93:67:20:42:23:db:93:
96:f7:f3:6e:a5:83:64:9d:3b:0a:70:ac:f9:70:db:
94:94:e2:69:73:e8:ab:0b:d7:fd:be:95:62:e5:34:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:11:82:99:55:33:F3:AA:96:6C:25:5A:A6:1C:BA:1E:FD:07:2B
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:17:c1:83:72:d4:9c:bc:63:f2:ea:0b:d4:9c:3f:26:60:56:
57:eb:c8:b4:da:2b:62:d3:f3:1f:0f:14:26:bf:69:53:1a:d6:
5c:c6:a3:fc:1e:d4:43:8e:04:da:60:5e:86:7d:f0:33:c6:3c:
89:90:f0:79:31:06:33:8d:e9:61:05:4a:7e:bb:37:9c:73:19:
71:2e:24:17:78:8b:dd:e2:8f:9d:52:3e:1c:34:69:eb:58:d0:
ad:16:14:5f:5a:a8:74:06:4b:ff:69:e4:13:cf:6f:c3:04:30:
71:db:ca:17:77:5e:09:2e:bd:9e:6f:24:37:0b:72:76:51:55:
03:7d:4e:1b:c7:a4:85:ae:12:ad:c8:d0:25:fc:9b:a4:28:0c:
1b:6f:0b:05:d5:98:e5:56:7e:1d:e5:82:94:0b:c8:c0:34:5a:
03:06:5e:28:7e:d7:d6:fd:60:70:10:bf:a7:39:68:02:30:ef:
7a:de:69:44:ee:81:6d:a1:6e:7f:1c:ec:14:a7:64:5f:bd:ae:
7f:34:89:4e:82:99:15:e4:a0:f6:83:78:8e:92:95:8b:78:92:
4b:d4:c3:36:d1:4e:7b:7e:74:b5:7c:3b:9a:e8:ec:c8:42:93:
2d:60:89:b9:ce:47:10:77:e8:6e:89:19:6e:d2:1b:13:b1:74:
78:b0:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:22 2026 by rpki-client