Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: sEQxeSVyVldC+Ck4NYolbjDAjfXXjN4xU5TKzIgVgdE=
Subject key identifier: 37:74:1D:8D:CB:E7:C9:5C:51:F0:65:F1:84:3B:DB:0A:59:B8:56:03
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 019D29294ED495297E67CD9D9065A21D7A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:06 +0000
Manifest this update: Thu 26 Mar 2026 08:01:06 +0000
Manifest next update: Fri 27 Mar 2026 08:01:06 +0000
Files and hashes: 1: ch32gMkwgIvhncaw2j6_w1rWqBM.roa (hash: 2zNuBXW5TRNjyq7/jYrllStnRO2aSpxPfwq4qZw6++Y=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: qCL0v1en7U05DJFN+u5zcc0gYTHw5o8TdCSDUClvPso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4e:d4:95:29:7e:67:cd:9d:90:65:a2:1d:7a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Mar 26 08:01:06 2026 GMT
Not After : Mar 27 08:01:06 2026 GMT
Subject: CN=37741d8dcbe7c95c51f065f1843bdb0a59b85603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:5e:cc:bc:6c:01:b4:cd:a5:5b:ad:94:74:
0f:be:e2:62:51:c6:97:28:71:1b:d6:07:33:29:e0:
64:e3:de:32:c7:13:c8:f6:25:09:8d:f7:f6:62:1c:
2c:d0:37:b5:b1:06:ba:cc:30:17:1b:60:f7:6a:da:
eb:f5:4b:56:38:01:36:2e:d5:e3:dc:bd:77:49:75:
47:b2:a7:28:2e:f9:0c:2c:06:9a:85:76:8d:54:0c:
09:4a:72:5d:4d:55:62:13:bc:6e:8b:70:73:0e:a6:
82:a4:c8:da:22:9c:83:22:3c:11:f0:37:03:09:a0:
6b:11:66:79:b3:db:3a:ca:c2:61:00:79:b6:3f:65:
50:38:be:a7:06:a0:46:e1:ac:a7:33:82:6e:42:14:
3c:03:57:15:60:51:64:4d:7e:95:26:1a:ed:eb:fc:
73:d3:94:19:97:cc:36:99:f0:3a:e7:d4:bf:5f:c1:
2c:52:83:f9:50:2f:74:82:2f:63:7d:5f:f1:81:08:
51:84:01:d9:80:9f:e0:1c:d0:76:13:26:1b:e4:df:
91:07:a7:5b:58:85:2c:91:43:27:d8:46:b7:a0:c1:
3d:6b:31:8c:91:4f:69:fa:22:a3:d5:cb:68:e8:1e:
93:cb:0f:9d:1e:7e:11:09:e9:27:b5:09:27:eb:3d:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:1D:8D:CB:E7:C9:5C:51:F0:65:F1:84:3B:DB:0A:59:B8:56:03
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d2:dc:0a:48:6b:20:45:4f:34:f2:3c:0b:8f:30:41:68:39:
7a:2a:93:20:93:93:07:c8:7f:d8:4a:bb:5a:4d:be:e8:19:59:
cf:9f:a1:61:18:f1:2b:5a:db:fe:40:00:a2:c4:74:c4:0a:89:
dc:34:e2:b3:69:66:78:b8:97:91:9b:92:89:4f:7a:5e:c4:50:
dc:5e:bf:41:fe:8e:e3:90:82:75:a1:cb:77:c9:eb:fb:3a:33:
88:43:9d:4b:ed:fb:0e:75:ef:1b:e9:ab:52:20:0a:8b:41:7e:
49:e3:c5:4f:09:4d:f1:d2:ea:9d:c1:e9:f6:85:57:4d:0d:aa:
cb:7a:98:e2:67:38:f5:e3:1f:15:24:3e:75:eb:b5:9a:34:6f:
11:9a:76:5e:32:07:26:56:f3:5a:5a:88:6e:9a:55:03:58:19:
ff:98:c9:9e:eb:74:a3:61:02:9a:87:6e:4e:66:75:8a:ac:79:
89:dd:0f:81:f9:ee:3f:5a:a3:61:94:f9:79:97:88:ac:75:d6:
bb:29:84:af:de:95:5d:d4:34:75:e0:a5:4f:37:16:70:4b:9f:
4c:44:07:a2:ae:ac:f5:07:dd:28:25:4f:e3:45:0c:1c:45:0b:
cf:7e:c1:64:6d:ee:f6:27:10:6d:17:14:82:15:ec:7a:c9:94:
6c:78:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:11 2026 by rpki-client