Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
File: wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft (raw, json)
Hash identifier: W8F+QuVqYRVzwppc2dqKmhZeGOSWBeI/WKaPAc2RDao=
Subject key identifier: 47:F8:D6:56:3C:07:B6:79:C5:A8:4E:6F:50:A1:8D:99:7D:42:19:29
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 019D2628720E6F02C806C07CF0BAED56E2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:17 +0000
Manifest this update: Wed 25 Mar 2026 18:01:17 +0000
Manifest next update: Thu 26 Mar 2026 18:01:17 +0000
Files and hashes: 1: 6QZ4R2A_br-AcMpCIptaGsFZuKI.roa (hash: gZhODUJ4vU2+zNho/O0be2JHcSYu+xewzTmC2xtBHn8=)
2: E4duTqIaMUC_PH3sfa1zQAUEVFs.roa (hash: 9NCC7QMqphIaXml0T1PxuYd+QPPMSSE78/Qddy/z5U0=)
3: Es-P_bdxjcTCOpzJlBfusPdxWF8.roa (hash: 3Ormem72O/mCAM9pP5kCR7lMJ8Mol6CBrDFrWlq7SlQ=)
4: RBwtXgNp1Q4LCtej7liwA1uRHL8.roa (hash: jeL1xkGCboYpk4S8u1rJoAKAp1kQKkdexLIj48FRokw=)
5: wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl (hash: LP1Grv2Vty5bycHC9l6gxp6YWRabKznVv0D2MdJk5Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:72:0e:6f:02:c8:06:c0:7c:f0:ba:ed:56:e2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Mar 25 18:01:17 2026 GMT
Not After : Mar 26 18:01:17 2026 GMT
Subject: CN=47f8d6563c07b679c5a84e6f50a18d997d421929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:55:56:84:f4:af:2c:0c:51:a1:af:2c:d4:
53:98:b2:b6:a0:a0:11:b7:91:db:00:fd:2a:a9:43:
60:f5:63:18:d2:fe:8d:70:ce:c8:aa:f4:20:4a:cd:
51:86:b6:b8:93:27:a9:dd:ec:58:a3:90:ba:51:be:
f2:66:42:29:f8:1c:9e:e3:64:fa:ab:8b:73:d7:ff:
f8:c2:26:7d:e6:5c:b7:82:ab:fe:3f:cd:ed:eb:89:
c9:fb:b7:74:b2:b8:a7:10:ea:e9:5b:b3:23:d8:45:
9c:b1:b8:86:f9:fe:7d:17:19:8e:cd:ab:09:8e:c5:
7b:03:97:c8:93:ec:2d:6c:18:2d:27:f6:00:d3:9b:
27:f3:dc:8c:43:a5:6c:e6:ae:56:0e:c1:56:dd:30:
e6:d1:39:0b:90:c2:29:af:95:34:98:d7:0d:2e:fe:
4e:08:9f:f8:c5:02:95:63:26:f6:7d:2b:38:52:f8:
a3:05:fd:f0:10:af:c8:9c:91:d9:5c:96:a4:0d:95:
1c:73:bd:3e:bf:1c:df:dc:aa:57:11:18:80:ab:1d:
24:2c:1b:6f:d9:e4:a8:96:52:26:14:04:66:74:ce:
41:47:9b:89:a9:e8:c7:e2:c1:d3:13:d7:bf:2b:8c:
7d:ff:33:1f:6d:2d:e9:5a:3d:d2:03:2c:a0:66:bf:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F8:D6:56:3C:07:B6:79:C5:A8:4E:6F:50:A1:8D:99:7D:42:19:29
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:12:b0:ca:fe:8d:02:eb:2f:a8:f0:3e:72:d8:f2:14:50:
cd:67:f7:b5:95:19:98:62:be:ae:c2:04:25:2f:b0:bd:0c:a1:
c9:fa:b6:75:13:97:59:84:7e:c1:d2:8d:bd:b0:65:8b:68:c4:
62:67:31:5e:4d:b1:37:07:3c:e6:c9:6e:ab:c0:6b:5c:f3:ce:
87:38:35:3d:9e:a2:17:a1:9a:a6:b0:32:7f:96:ad:2f:55:9c:
85:13:7d:5c:9d:4a:5d:74:6e:03:6a:25:89:fc:dc:a7:a9:4d:
74:c0:4d:e4:85:57:39:55:0c:e0:ef:c7:27:6a:4b:03:8e:4f:
3b:c5:38:24:65:6a:d3:6b:74:8e:c1:9b:b2:e9:8a:a3:2a:1a:
46:55:18:22:a2:42:d0:b5:6c:e2:87:d3:a5:a2:70:09:b4:bd:
f5:6f:ca:28:08:64:8f:06:f4:7c:06:02:2d:49:1a:8c:5e:e3:
7c:92:52:2e:42:af:de:96:12:24:61:1d:91:19:8d:7b:1f:7d:
c1:d3:24:e1:99:13:38:d3:45:84:01:63:c9:fc:b3:28:46:fc:
09:ba:d0:0e:ae:33:69:48:36:15:8c:a2:5e:8e:12:aa:89:51:
a5:a7:c8:a5:a1:22:32:9c:2a:6c:fe:4f:61:e2:5c:67:1a:8e:
3a:d5:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:55 2026 by rpki-client