Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File: WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier: rvXzXF9cDyJ4o5km7utQbFADy6XmIzp1wQoC3FboHGU=
Subject key identifier: CE:31:6C:FA:F4:34:7E:A8:9E:78:FA:C1:B3:12:20:75:B9:BC:37:34
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 019D273AB4EC846D4ACE98D86D565A392B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: ZBsX6hcZ8481T/lAzO5mcBK1SulDgWx3HMCX5wMWTvc=)
2: r9Mcr5UDzWdIgeL8kqJ0bGMMVmw.roa (hash: 6WGd0CgD9hacqiqe9ZbfPd53REDLfBpVe+xRlENuS3E=)
3: wye8DmlYkdaQC1jq2FD5iM2DhEY.roa (hash: mjAPnFxN50juugPjJtBivCThtWn3b1yEogIYi0ZrGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b4:ec:84:6d:4a:ce:98:d8:6d:56:5a:39:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=ce316cfaf4347ea89e78fac1b3122075b9bc3734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:d9:20:6d:60:5c:02:26:08:f5:48:71:cc:
f4:d2:83:87:9d:5e:9b:7b:9e:de:fe:14:bd:e6:bb:
14:35:f5:85:cc:f3:ef:bb:58:6a:a3:e8:22:d8:c1:
4d:a5:2c:fd:b6:b8:33:7f:79:bd:5c:9b:45:0e:22:
8c:50:53:53:3f:99:a3:42:9c:3d:be:9d:5e:90:44:
dc:fc:be:e3:b0:80:9c:37:32:5d:8f:ea:fa:a9:00:
ff:dd:3c:86:09:61:e8:86:26:46:3f:dc:c8:c4:fb:
20:c8:c0:00:d5:87:ab:47:93:bf:d7:29:1e:44:94:
98:4e:2e:30:7a:be:57:89:f3:3f:a5:4d:72:a0:b6:
85:c1:9e:b0:04:c3:21:ff:f1:48:d1:9d:0b:66:f2:
eb:6b:e4:24:00:54:86:c4:7d:2a:87:90:df:52:98:
ed:25:9d:00:fe:a5:76:81:eb:33:ec:35:2d:a0:ce:
47:7a:08:8d:54:2c:85:68:e2:f1:da:ad:ff:27:12:
ae:97:cd:13:21:28:e0:5c:0b:64:60:f9:38:b1:b8:
8a:56:32:ed:55:a3:45:da:6a:08:dc:3c:20:3a:10:
12:e3:e4:5e:49:4e:a5:25:05:b5:aa:b5:fb:81:e0:
83:cb:1a:75:c9:22:ce:e1:16:e9:32:0d:58:1d:22:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:31:6C:FA:F4:34:7E:A8:9E:78:FA:C1:B3:12:20:75:B9:BC:37:34
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:90:0f:95:bc:b5:8d:c4:dc:a3:6d:40:e8:8c:b3:9e:ed:e0:
a0:12:dd:95:b3:e4:7a:3a:27:bf:a5:4b:f4:ca:0d:a8:24:5b:
32:5b:e9:76:1d:d8:a8:9d:c6:6d:9f:ea:38:96:f9:57:71:3f:
84:1e:8e:1d:01:a9:ea:56:ff:56:29:65:4d:7c:af:f9:4f:8a:
ca:21:90:cb:28:ee:9b:1b:e2:d3:19:d7:ed:fc:2a:0c:eb:bd:
2f:c1:78:f6:33:1a:5a:1e:80:e0:b7:5b:4d:e8:e7:23:f4:3b:
0d:bf:7f:a8:be:a4:e0:54:95:6d:18:f5:86:2d:8f:67:99:90:
c9:4c:76:bf:a8:7b:59:c8:2d:53:ad:cc:3a:65:0d:b4:ab:80:
82:31:13:d3:db:b0:ff:f5:15:14:78:49:a0:ee:25:70:3f:01:
78:11:3b:8b:4d:ce:d0:f7:c5:04:9a:cb:b1:fe:0b:01:cb:87:
83:60:52:e0:67:f7:99:83:e8:5e:1e:8d:11:4e:c0:c2:2a:59:
d5:a6:a2:43:70:e2:7e:a1:38:43:d3:e4:12:a7:a7:99:d9:19:
27:93:a8:6f:83:aa:dc:80:ad:fe:34:0b:e3:fc:3c:ec:41:7f:
cd:ae:51:57:6c:55:f2:fc:12:25:0d:35:b3:34:33:8f:d1:da:
41:05:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:25 2026 by rpki-client