Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File: wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier: 1IW60zW15B+JFYVgl5PWvNF1LIMoexA/EKdAi+oaqnE=
Subject key identifier: 0B:E9:17:E5:DF:39:B4:CC:1E:06:21:EA:6B:7F:E4:B0:37:66:70:7A
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial: 019D2A72AF96024D756117DE55D7630D98D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 14:00:52 +0000
Manifest this update: Thu 26 Mar 2026 14:00:52 +0000
Manifest next update: Fri 27 Mar 2026 14:00:52 +0000
Files and hashes: 1: KvzDHgVmpEkdkjHPk99sFJrY1zs.roa (hash: l/TyURMCTytuEA/n9GPaS9YbOV/gxZwZ/TqXXQqrbdc=)
2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: 6Z70lQecZi63q7lMiEt+jIw5Ya9tJCGBmcsj5YCeFCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:af:96:02:4d:75:61:17:de:55:d7:63:0d:98:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Validity
Not Before: Mar 26 14:00:52 2026 GMT
Not After : Mar 27 14:00:52 2026 GMT
Subject: CN=0be917e5df39b4cc1e0621ea6b7fe4b03766707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:1d:86:e4:aa:6f:1c:44:44:13:90:ed:51:
c3:e3:30:24:b6:f9:d8:91:6d:47:d9:c9:01:7f:ca:
c8:91:61:f4:d4:37:e7:63:c6:30:51:b9:72:fd:4b:
f3:62:0c:f9:32:8c:25:1b:05:53:f9:ae:0a:c8:63:
e1:50:bf:1b:ff:cf:40:2f:f1:bb:46:1d:62:02:c5:
87:b7:59:4b:f8:98:64:f6:7e:c9:8c:fb:93:24:aa:
94:5d:5e:37:c4:1e:ea:cb:ca:56:ce:6c:67:46:6d:
66:3c:15:9f:41:fb:fc:b4:6b:9b:53:72:6a:21:48:
86:0f:b3:7d:4a:89:f5:1e:66:6f:9f:0e:ba:02:9a:
4c:f2:0e:32:39:e6:cc:c7:ec:43:f0:a3:64:87:22:
3e:92:32:e7:5c:b9:1d:b4:e3:90:46:0c:22:3e:29:
74:cc:77:60:25:b0:9f:14:cf:36:7c:92:ba:36:f8:
aa:26:02:97:c4:b8:bc:86:06:0a:5c:ad:db:5a:de:
89:de:2a:7a:c4:0d:8e:e5:9a:18:44:b0:9e:f3:52:
70:df:86:6a:86:70:31:c3:02:25:f5:63:d9:17:f8:
db:68:71:a0:19:8a:25:9f:22:20:c2:b7:a7:8f:1b:
41:1d:c8:19:2b:e5:1f:4e:7f:64:e6:3d:d7:63:7b:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E9:17:E5:DF:39:B4:CC:1E:06:21:EA:6B:7F:E4:B0:37:66:70:7A
X509v3 Authority Key Identifier:
keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a4:63:e6:9c:0f:eb:27:85:4b:7b:37:f1:30:a8:33:53:a1:
c0:f0:2b:38:b1:cb:13:9a:86:53:df:a4:78:5c:61:e8:67:32:
34:f4:49:07:37:66:91:3b:29:14:1e:dd:e5:39:5e:7d:3a:de:
84:53:0e:51:b1:24:15:9e:51:39:71:2e:8f:75:16:96:cd:f8:
9a:27:35:e0:37:e3:fa:41:f0:70:21:f0:78:fb:b2:1e:eb:e0:
5b:0d:fb:13:58:80:0c:44:81:a2:f5:fa:6e:83:04:80:04:f0:
5d:6e:fd:3a:8d:f8:5c:7c:82:ee:80:e4:cb:58:77:b6:c1:2b:
9c:83:70:d6:5e:4d:59:de:40:72:67:00:fa:d4:0d:ee:51:42:
0f:a9:24:bf:41:ae:a5:55:9e:4a:ba:a9:ea:fc:f7:22:f5:bb:
c7:1d:fb:93:75:c0:74:33:e8:60:e1:53:4a:1f:cd:ab:05:95:
7b:5b:ac:d6:5a:a1:5a:e9:4d:50:72:29:62:cc:96:92:8a:01:
14:11:35:b2:b8:67:f5:23:81:91:70:cd:f5:0e:1b:e0:e7:87:
31:bc:e0:f9:20:b9:9a:fd:a4:05:9a:ca:c9:78:f7:9d:75:88:
78:d3:b3:01:87:0e:c2:63:9c:61:af:e8:e5:d0:fd:f1:0e:c1:
36:a8:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:57 2026 by rpki-client