Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: WCcJVBpVo/J9+60FCf5y1wNRLHd1u2/wEpgZDxuhVf4=
Subject key identifier: C3:23:4C:9D:0B:32:E8:26:7E:4A:72:CA:E7:23:43:B6:6E:F1:F6:C3
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019D28845DEE47C5FF13A3CB362385C18B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 05:00:56 +0000
Manifest this update: Thu 26 Mar 2026 05:00:56 +0000
Manifest next update: Fri 27 Mar 2026 05:00:56 +0000
Files and hashes: 1: iTxkGMwghR3F8OYGNZTj6Coxz2o.roa (hash: 3IWO290f4BpEo42cnDH0C8gpXxBNeOVm/2imb34ZTKI=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: RA07/FPZZJn4rNHwJ3C1wqIyFeS+T+fQx+osO2B1VoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5d:ee:47:c5:ff:13:a3:cb:36:23:85:c1:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Mar 26 05:00:56 2026 GMT
Not After : Mar 27 05:00:56 2026 GMT
Subject: CN=c3234c9d0b32e8267e4a72cae72343b66ef1f6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:5e:1c:48:ce:43:a8:cd:62:6c:28:9d:8e:
30:fb:f4:93:5c:e6:00:91:3d:fb:74:6c:bb:54:cd:
cf:d6:85:bd:d2:ac:77:fc:56:f3:f1:54:59:90:5c:
75:a4:f7:37:a0:e0:c7:37:e6:ec:a1:7b:3a:8f:ba:
a8:90:9f:8f:11:53:58:a1:7b:92:64:9f:3d:f0:f1:
94:1e:db:eb:a0:c3:c7:9d:64:27:35:01:5b:e2:58:
31:e5:63:ec:73:c5:35:c8:bc:d4:df:4e:84:f3:6c:
1b:23:ea:b2:71:75:8d:fa:8e:51:b4:41:b9:bf:85:
cd:80:58:ac:59:81:54:7d:a6:74:3b:2f:b0:1f:cd:
e4:e6:bd:11:7c:fb:85:a1:dd:29:03:4b:ad:76:bf:
f5:3b:d3:61:45:91:80:0a:3b:5f:e4:9d:2e:7b:3c:
3f:23:19:1c:e2:8e:ba:28:35:4a:66:42:49:f1:76:
a5:60:36:a8:1c:bd:43:d9:91:5b:18:a7:0a:6f:1b:
41:86:61:a6:fc:e6:1f:a6:ca:1b:33:f5:35:69:a2:
da:51:46:ea:d8:25:94:2c:c8:11:43:84:69:2b:3f:
20:0e:e5:5f:6a:73:c1:7a:5c:c9:43:0b:15:04:d5:
3f:29:bd:d2:fd:70:60:93:d9:35:fd:36:e3:83:24:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:4C:9D:0B:32:E8:26:7E:4A:72:CA:E7:23:43:B6:6E:F1:F6:C3
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:1b:cb:f4:36:0d:5e:f4:fc:aa:98:6b:df:31:23:e0:b9:
53:0f:04:28:0c:87:b8:81:7d:6e:87:bb:ab:dc:cd:76:ff:69:
c4:5e:9d:00:52:62:55:d3:e4:13:da:bd:11:d5:15:b0:ee:76:
bd:0c:9d:a5:13:cd:e0:5a:1e:38:a0:99:b8:fd:35:ae:2e:5b:
8c:23:88:98:6c:20:dd:c3:2b:50:86:dc:a7:47:d6:b7:93:f8:
5e:c7:7b:47:2f:83:35:f5:be:07:a4:ef:98:20:c4:48:7d:d1:
a5:83:78:07:bd:d4:95:02:61:67:71:a3:ed:bb:36:f5:b4:b6:
39:d2:f9:56:95:76:5d:0c:3b:23:d6:68:13:3b:ca:8a:e3:ba:
b9:18:ad:0f:5e:23:2c:fd:e7:f9:15:9b:3f:45:5b:f5:4d:f3:
d4:04:55:16:b3:75:d4:b9:f0:cb:45:c2:b9:76:a6:7c:60:fa:
d8:f1:b4:0e:69:37:b7:57:0f:a7:90:05:57:a8:24:fd:db:62:
ac:3d:d0:cd:d5:1f:ef:f7:f3:d4:92:22:52:ca:40:3e:47:db:
29:28:43:f3:fe:94:0a:16:ab:9b:88:a8:e8:ed:e8:fc:57:7a:
d3:3b:24:0c:91:55:65:8c:15:9a:82:09:67:2f:22:5a:83:b0:
3a:a5:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:04 2026 by rpki-client