Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: fBpf2bYkWKlMG4SQAeN4AflHwuVzPNJZjxmEjQbGSCU=
Subject key identifier: 2B:E5:4E:D6:0C:42:D7:75:AB:0F:D3:6C:1A:A1:F1:D0:E2:1E:86:DD
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019D2816AAE09EABD6DB5D5FD7BBF13FA5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:07 +0000
Manifest this update: Thu 26 Mar 2026 03:01:07 +0000
Manifest next update: Fri 27 Mar 2026 03:01:07 +0000
Files and hashes: 1: WrB_6nEScPqneHKwQCA6QB4d4QA.roa (hash: 85wjB4Jt2bkwpAvi6/jsQd4XiX94VRI5UhSDcmPSSb0=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: RQO5mwfOeHvVWrx7WS1HsrI+T1NauaPrcuVJldmRm2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:aa:e0:9e:ab:d6:db:5d:5f:d7:bb:f1:3f:a5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Mar 26 03:01:07 2026 GMT
Not After : Mar 27 03:01:07 2026 GMT
Subject: CN=2be54ed60c42d775ab0fd36c1aa1f1d0e21e86dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d2:ea:2e:58:d7:cb:ac:bd:8d:f9:fe:0b:45:
dd:25:8c:70:52:16:a3:07:e8:e3:7f:51:50:fe:76:
18:34:d0:f9:45:46:9e:5a:12:e7:26:d0:a4:3d:cc:
1e:b6:4e:10:73:ae:28:54:ee:3b:2d:26:69:28:01:
9a:cb:01:80:a5:0d:d6:1b:73:11:79:f6:5a:de:8d:
77:4b:34:4a:09:90:f4:91:fa:da:53:4c:04:80:25:
9e:b5:06:0c:55:ac:45:24:43:e8:ae:d0:bd:ba:0f:
eb:70:cf:ac:07:59:a4:c2:29:97:58:d9:d2:00:85:
3d:fc:52:66:04:e4:7f:62:57:46:d3:8b:17:ee:96:
2e:56:05:1a:95:b5:b0:3b:1c:1d:e1:f6:6f:a7:5d:
58:1d:d0:53:c9:9e:84:14:a7:8c:76:af:bc:9a:eb:
61:a6:cc:f4:76:c6:76:98:36:6b:d1:10:33:34:e2:
1d:d9:2d:77:ff:30:21:bb:0f:3b:22:57:8b:7c:a5:
a7:05:93:b5:dd:f7:a2:ed:e5:88:a9:28:93:8c:43:
99:f7:84:ce:9e:64:0b:d0:89:30:3b:b7:47:05:54:
03:b6:50:ed:ac:93:e5:49:ec:69:77:b4:6f:f3:f5:
ec:d1:d7:01:c6:0b:39:fe:ec:fb:d0:35:01:e2:df:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:4E:D6:0C:42:D7:75:AB:0F:D3:6C:1A:A1:F1:D0:E2:1E:86:DD
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:b8:83:dc:25:a8:15:55:cd:07:f6:11:d1:f1:43:18:87:
0c:55:ac:02:f9:2e:cf:b7:07:3f:c8:34:79:6a:0b:7f:ed:53:
b0:58:4f:59:61:4c:20:4f:ee:1f:a0:30:93:fd:ba:73:b6:81:
38:61:22:79:42:44:3c:8a:2d:09:6b:81:80:d6:7c:74:b2:85:
d9:44:f7:17:0d:0d:d9:b1:6d:ed:8b:f3:b6:f3:6e:29:20:c0:
20:72:4e:ec:d2:3d:d7:d3:1b:64:da:00:af:fa:e1:47:84:22:
9f:c0:17:51:b4:d0:d5:d2:5a:9a:55:56:ff:b7:09:be:39:de:
0d:bf:a6:81:a2:a5:ca:c6:51:93:f5:e9:3e:a7:ca:5c:18:95:
3c:4e:8b:e4:03:f5:8b:42:e1:b6:e7:d8:44:cd:90:39:d6:33:
a3:b9:ac:b8:6c:31:13:20:6d:83:69:e1:e8:31:ba:04:d8:5d:
51:85:63:4e:40:18:e4:b6:39:31:a6:08:fb:3f:c2:c4:49:9d:
16:7c:67:59:43:5c:ec:be:1c:bc:38:03:e9:cf:17:10:56:ac:
93:d8:f9:1f:f2:cf:ca:a6:c7:60:3b:66:ee:0d:61:f0:25:b7:
97:ef:95:11:b2:b9:42:f1:a4:47:d1:e2:9a:25:8c:22:d7:3f:
79:81:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:17 2026 by rpki-client