Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
File: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft (raw, json)
Hash identifier: KEqbeJFS2juDTKf2NBwiC2W73B1kXWR8isX/9R4swl8=
Subject key identifier: FD:D5:D7:58:03:B9:67:D1:2D:65:47:0D:61:D9:F1:FE:15:56:5C:15
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 019D29CDD116E120FDA8C91C3DE1C0C6885B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
Manifest number: 16A6
Signing time: Thu 26 Mar 2026 11:00:47 +0000
Manifest this update: Thu 26 Mar 2026 11:00:47 +0000
Manifest next update: Fri 27 Mar 2026 11:00:47 +0000
Files and hashes: 1: EC5zuekV6ffZvS8sEG5dT8I7z58.roa (hash: SkvprZ2AbqwrD6Q2wdsl02uL6GJA62sF8yMiWwIEPFQ=)
2: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl (hash: Tf6De/EInZAcvnyYJSjX4bRmiI2fZs8TEjBKHN53ktE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d1:16:e1:20:fd:a8:c9:1c:3d:e1:c0:c6:88:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Mar 26 11:00:47 2026 GMT
Not After : Mar 27 11:00:47 2026 GMT
Subject: CN=fdd5d75803b967d12d65470d61d9f1fe15565c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:c3:06:dc:84:7b:8a:84:a6:8b:d4:e8:f0:
a8:d5:37:eb:74:6a:4e:09:95:5a:a1:13:f7:f6:c5:
d0:08:49:93:15:9d:20:b7:c6:1a:63:70:4e:3b:b2:
ad:22:2c:af:54:3b:64:60:89:05:81:00:a8:cc:27:
d9:89:e2:e5:e9:03:5a:60:6b:2f:81:e1:0b:70:ab:
42:bb:65:d4:a0:98:b8:f8:9c:3b:9d:57:b9:ff:b7:
20:28:6a:e6:c5:44:5a:52:3d:94:87:3c:13:25:b9:
59:24:19:e4:fc:f3:2f:d5:05:62:9a:a8:13:de:90:
86:de:d0:62:c1:d4:b7:76:56:80:78:fd:af:c8:cb:
4e:be:64:1a:cf:e8:c2:ef:8a:c6:31:30:8a:b6:0a:
92:4d:42:ba:6f:2c:15:b3:cd:d5:4e:5a:cc:01:7f:
38:18:4b:5d:fc:d5:ea:f9:82:79:61:15:ba:0f:a5:
21:51:2f:e8:7f:16:b1:22:9b:3b:83:88:07:8c:a8:
b3:1a:c3:3a:40:6c:50:46:18:d9:82:50:77:23:df:
55:a1:a4:58:d3:e9:35:f5:54:c6:99:fb:4e:61:05:
82:9d:06:ca:7a:df:49:f3:d6:04:18:3d:90:cb:31:
72:56:a2:df:25:29:f9:54:35:c4:63:88:38:29:2a:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:D7:58:03:B9:67:D1:2D:65:47:0D:61:D9:F1:FE:15:56:5C:15
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e5:5b:21:f9:26:f4:97:45:65:f9:d0:a9:21:ff:a1:00:3c:
b2:9d:31:71:5c:ab:6a:4e:ab:23:34:e4:55:63:fe:00:71:be:
fd:68:e7:e2:7b:cf:a6:50:38:f2:7a:24:b4:6d:a4:9d:94:3e:
7d:ff:49:d9:e4:e9:67:8f:77:bf:7e:f0:fe:11:d4:dc:fd:df:
76:f3:02:1a:25:4a:c9:30:ff:cb:d6:ba:fe:94:15:2c:c4:0c:
87:7b:e3:1a:63:71:fe:c7:02:96:c3:3d:89:6b:20:61:8f:4c:
1a:e9:68:40:bd:4f:a3:cb:5c:43:92:11:a7:b0:17:fd:55:3a:
f1:cb:81:63:9f:4c:d5:6e:58:20:75:27:5e:dd:65:09:e2:3b:
21:ac:16:ee:54:c8:20:84:99:7f:ab:e2:5c:21:c1:e3:03:3d:
ea:18:c4:c8:c6:cf:1b:fa:ed:b8:1d:91:6f:a4:d2:fc:a7:ba:
c5:b5:61:01:93:66:78:bb:9e:2d:9a:f3:b2:99:e2:a2:0a:7b:
9c:8b:64:ca:c3:66:60:6a:4d:68:bf:5f:84:4b:da:29:4b:0c:
16:85:34:f1:40:d1:de:71:c1:8b:19:81:19:aa:8a:bd:6e:49:
4c:18:ae:10:ce:d9:fc:96:0b:90:af:c0:30:f1:e0:42:35:be:
84:e1:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:44 2026 by rpki-client