Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: hs6dWPsg06ABxeVNicRBzqsvMpMFTAewshVI3fKhxwc=
Subject key identifier: 6C:F2:1A:88:C4:FE:6F:91:6B:99:BA:79:A3:77:6A:A0:3A:DD:10:78
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019D24A77ABD1C08580AF1CCF61B80609DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0D06
Signing time: Wed 25 Mar 2026 11:00:48 +0000
Manifest this update: Wed 25 Mar 2026 11:00:48 +0000
Manifest next update: Thu 26 Mar 2026 11:00:48 +0000
Files and hashes: 1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: M9Pc+L42x0CjGPeApHpkegkcdmLK1mmZg0uzInm0o1E=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:7a:bd:1c:08:58:0a:f1:cc:f6:1b:80:60:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Mar 25 11:00:48 2026 GMT
Not After : Mar 26 11:00:48 2026 GMT
Subject: CN=6cf21a88c4fe6f916b99ba79a3776aa03add1078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:12:2e:79:9c:f4:2b:35:9f:7e:e2:ec:f8:
99:71:ea:c3:53:a3:0b:64:f0:35:0c:87:2a:de:07:
2a:2e:07:a8:c7:21:d9:84:82:d5:3c:ce:10:a7:c9:
4a:a7:8d:75:4f:90:1b:75:80:42:11:82:6a:62:8d:
5f:e9:ce:bf:9f:6a:ef:9c:99:76:0a:bc:31:a4:69:
05:1b:79:c9:08:65:2e:bf:f0:8f:62:88:ad:3c:eb:
fd:27:5c:69:f2:79:26:98:61:ab:86:fe:b4:a3:58:
31:cc:6c:d4:ce:95:44:a2:98:77:96:14:10:fe:05:
09:6c:4c:64:e2:cc:92:fd:63:37:fc:96:6e:2b:91:
50:cb:11:80:82:ca:52:a2:4c:8a:09:a1:15:b4:37:
a6:ab:24:5f:dd:47:08:43:35:3e:7b:34:d9:65:57:
99:d6:bd:e7:8b:dd:40:73:cf:b0:42:ac:cf:ea:e6:
ec:1c:37:e7:a3:e4:2d:9d:15:cb:9e:0d:c6:a5:0f:
c8:46:69:32:a8:73:01:45:5d:ca:00:73:a1:f4:93:
0e:fd:7d:8e:d0:e3:58:16:6f:eb:be:e5:28:f7:32:
eb:83:ee:f7:b8:5b:83:c0:f4:e1:c7:bc:1d:e2:10:
d8:6f:bd:d9:e0:4f:78:05:a7:44:51:08:26:2b:34:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:1A:88:C4:FE:6F:91:6B:99:BA:79:A3:77:6A:A0:3A:DD:10:78
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:ce:76:95:f2:02:01:9c:f2:61:9c:60:8e:39:d0:e2:a5:
37:ba:89:43:a7:aa:f6:55:bb:c9:9f:10:0c:f2:5e:24:10:35:
6e:44:ed:54:b9:c5:4f:db:59:31:d9:6f:0f:a0:51:1a:f8:a8:
cb:56:73:00:87:48:0b:d9:83:74:a2:0f:90:1e:3a:57:a6:3b:
47:c5:59:a5:b0:75:af:25:27:41:94:da:fa:39:df:c4:69:80:
7e:6c:41:60:f2:0a:2f:88:59:3d:a0:be:00:b0:4d:b8:82:ce:
77:2e:5e:5e:8e:11:fe:e5:50:cb:8e:65:a8:c2:e9:9f:28:b1:
cb:4b:c1:85:68:29:82:1a:65:8e:c8:c6:35:1e:fb:0d:74:f2:
e3:a0:5d:c9:a1:99:5f:17:2e:c8:df:70:ab:7e:73:c9:aa:ab:
7f:5f:38:5a:af:69:f1:71:23:bc:82:34:43:9e:01:6f:5f:29:
d9:5a:66:19:0e:5a:b1:d1:8e:70:ef:5c:36:e6:4e:95:c1:7d:
2b:01:54:f6:e9:f8:6e:66:e1:14:2f:65:bd:a7:92:5f:42:75:
df:8b:97:af:cd:90:32:7d:50:37:2a:27:2f:cc:9b:81:8a:db:
c8:67:ef:15:a8:4a:44:b6:23:1a:dc:20:c8:73:a4:23:42:a9:
22:1c:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:56 2026 by rpki-client