Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
File: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft (raw, json)
Hash identifier: xrMDaDeZfG43UdlAGeVVY25vjomgipRdyJqtA4CdeHc=
Subject key identifier: 9A:F2:27:5B:2D:25:93:04:6A:82:03:86:B6:67:00:3D:FF:59:71:17
Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8
Certificate serial: 019D25838227E53D60380E96011FCF75D14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
Manifest number: 02E7
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: TEXm9KrsMUEKUPk1jEnmZgD0IK0.roa (hash: eO/8L9pLcpErOVloeSJcO/Ypgo8LgxO3Ojcx2J5Fa8g=)
2: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl (hash: l/KXP7yxgnubTXouKAzTxTBKVzczAw8mUpcG761L194=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:82:27:e5:3d:60:38:0e:96:01:1f:cf:75:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=9af2275b2d2593046a820386b667003dff597117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:ad:1d:3c:e3:d4:9a:eb:01:9b:72:37:b9:
60:ea:28:81:7b:b0:f4:74:9f:42:be:77:26:2c:e7:
b8:75:c8:32:4e:0f:e2:b4:34:e6:ca:88:e8:15:9d:
db:5f:c2:13:c9:5f:8c:aa:49:29:e0:d2:c1:ea:6a:
ba:37:8b:ee:18:4b:50:9e:32:58:dd:c6:d0:d8:9d:
7c:44:9b:e8:b0:33:45:d1:f3:a6:22:b2:f6:ec:1d:
fb:52:a9:dd:64:1e:1e:59:e3:33:77:32:4e:53:1d:
a2:0d:33:e1:24:c2:1d:31:b0:0b:55:61:00:44:bf:
83:a1:fd:8f:45:a2:d9:66:cf:fb:5f:40:f9:db:1c:
28:7a:66:44:52:32:0c:cd:30:b5:e6:c8:5b:dc:61:
5c:9d:fc:4f:37:19:41:5f:23:e9:81:b0:fb:2e:66:
57:32:d8:9c:c1:f9:33:a7:a7:75:5e:6a:32:01:f2:
b1:79:5c:28:41:bd:bf:2f:47:78:17:5f:46:e8:89:
e7:a0:ef:68:67:bd:00:c2:51:ee:23:d1:9f:97:45:
50:70:74:fc:94:24:a5:44:99:20:e9:b4:26:03:9c:
af:17:d1:ac:8e:fe:4e:5d:f8:15:ed:f8:01:39:27:
72:a9:d2:30:9f:24:9a:a6:5a:ee:99:bf:29:88:d4:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:27:5B:2D:25:93:04:6A:82:03:86:B6:67:00:3D:FF:59:71:17
X509v3 Authority Key Identifier:
keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e8:a8:2b:de:22:5f:0a:79:99:89:24:6f:61:10:85:09:e7:
4b:f2:68:99:c4:ec:74:91:8f:19:d5:e5:96:25:8b:19:d9:b7:
c7:bb:d8:25:63:cc:ba:dd:1e:20:af:32:74:8c:ee:11:43:e8:
42:9e:2b:fc:ad:9e:45:ea:d3:5c:5d:65:29:55:a1:b7:01:63:
1f:b7:48:31:3c:5a:16:e4:39:3b:53:88:99:bf:83:4b:44:22:
30:26:a0:5b:47:65:00:22:78:08:a9:09:25:40:f1:63:b7:3a:
ca:4b:5f:d5:3c:a7:81:03:86:d9:45:b5:49:e6:12:86:da:e8:
13:6e:0f:fc:1f:83:e2:80:71:8a:ee:73:3c:18:c0:df:ba:1b:
4d:4a:46:56:4c:09:e6:27:ca:77:33:e0:ff:0c:c9:79:da:4b:
49:ba:c7:6f:4b:93:6f:d0:94:51:49:54:41:8e:68:cf:5d:74:
6b:08:5a:21:a0:94:3f:6d:db:88:78:7c:9b:3e:21:96:92:0b:
f8:cd:a6:29:86:2e:e6:08:47:4c:76:04:0d:8f:66:b2:2f:97:
7b:56:d0:90:a4:d3:b9:9d:de:98:d8:6e:21:e6:2e:d4:3a:83:
a1:a4:60:40:b5:a7:e7:de:ff:01:42:b1:18:b3:bd:79:de:a5:
71:53:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:51 2026 by rpki-client