Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: Di5EOGFjlFWyb+F2rerTRcsQ1SILY9mm35ErLB5bQq4=
Subject key identifier: 08:4F:48:2D:C0:48:35:0E:A3:81:E5:88:3D:41:A3:D9:82:E4:45:36
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019D296197D0AFF68038AED079BC83CC5ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 0837
Signing time: Thu 26 Mar 2026 09:02:34 +0000
Manifest this update: Thu 26 Mar 2026 09:02:34 +0000
Manifest next update: Fri 27 Mar 2026 09:02:34 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: sQx3BOwasVixmiHXzl2jwQ3BXIJrI5MXs5A44AUH6Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:97:d0:af:f6:80:38:ae:d0:79:bc:83:cc:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Mar 26 09:02:34 2026 GMT
Not After : Mar 27 09:02:34 2026 GMT
Subject: CN=084f482dc048350ea381e5883d41a3d982e44536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:ae:c2:eb:cd:d4:4b:f0:87:b9:d9:e6:9e:
b6:7d:05:db:1a:dd:f7:20:77:d3:a4:aa:63:86:4d:
66:5a:b1:7c:86:99:e5:4d:59:98:3c:c6:59:7b:63:
37:07:21:ee:c9:0c:20:28:a6:79:02:0a:94:b4:60:
a3:ff:81:1e:c4:ca:99:df:6b:b1:ca:70:c6:54:c3:
ee:9d:27:64:a1:37:7d:6f:32:31:2f:12:35:14:35:
90:56:90:6a:32:db:73:55:20:a4:72:45:3f:8c:bc:
8e:61:64:1c:22:00:9c:3f:6e:2b:b3:9d:ac:a1:32:
07:3e:39:da:dd:8f:2b:e5:e0:45:d2:2a:1b:f6:12:
de:6e:e7:bd:23:b8:0d:1c:b5:d4:70:44:c1:5f:43:
87:18:c9:ad:09:4a:30:5c:f3:c3:7e:79:d7:61:3a:
ea:1e:29:8e:6d:d1:82:d4:71:be:27:71:a5:24:e8:
fe:f1:ee:95:d7:7d:51:16:40:42:bb:25:20:49:df:
a0:07:7d:96:54:95:fe:cd:fe:21:45:04:17:e3:e5:
c4:82:30:18:48:82:66:1d:d0:b7:72:90:dd:5e:bf:
7e:ae:30:ee:43:9c:5d:36:13:29:02:20:17:f8:44:
08:9b:18:a0:ab:e9:ea:9f:08:9e:ed:f9:38:b3:5c:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:48:2D:C0:48:35:0E:A3:81:E5:88:3D:41:A3:D9:82:E4:45:36
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:9d:1e:bf:d2:93:f0:57:b6:15:bf:df:9b:b5:b6:b7:16:
00:f7:01:9a:86:5e:3e:99:25:4a:a2:0b:5c:3a:d5:10:6a:7f:
97:98:af:95:57:fd:4c:d4:4d:46:69:09:53:8b:02:e1:a0:ec:
4d:ed:ea:50:4d:2a:a6:1a:30:3c:d0:d6:43:e3:df:dc:30:c8:
e3:ef:f7:2b:99:14:6b:32:78:98:f5:bf:d9:80:f6:9a:82:c1:
22:99:b5:45:3d:45:9f:ba:0d:45:16:d7:2a:2c:0b:84:2b:4c:
bb:af:a7:2f:aa:50:67:95:36:05:2d:df:ff:1f:06:dd:21:f1:
0a:bf:a5:d4:7d:c2:8a:11:db:e7:07:14:5b:09:ad:35:16:44:
74:bf:4a:65:f0:85:f5:cc:2d:02:ad:8e:99:68:71:1d:70:8c:
91:df:49:4f:81:79:21:c7:9f:84:89:f5:2d:55:f5:9f:38:e2:
df:89:15:42:de:7d:65:9c:3d:fa:87:8a:17:11:a5:d8:2f:30:
57:ec:5d:7c:91:25:37:e8:d6:f1:b7:8f:0c:ac:ed:0b:48:6f:
76:a0:56:5a:b2:a5:f1:69:94:d3:05:eb:d5:95:31:e1:59:4f:
d4:df:23:82:68:ae:3e:c2:8c:72:42:1e:17:41:03:3f:d8:80:
a6:fc:56:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:51 2026 by rpki-client