Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
File: wvPozdMcgnmN3vk0AfKcfcqmr20.mft (raw, json)
Hash identifier: rA13Aj1rdWlLy3tH58Z46z9TLBwmTSZ6MpBmARrq6cU=
Subject key identifier: B1:6D:9E:DC:B5:A1:4F:44:3C:C2:73:AB:12:EB:FE:15:C7:DB:74:22
Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
Certificate issuer: /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Certificate serial: 019D29CE64EA4CB0D1F574114F02D790219A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
Manifest number: 0211
Signing time: Thu 26 Mar 2026 11:01:25 +0000
Manifest this update: Thu 26 Mar 2026 11:01:25 +0000
Manifest next update: Fri 27 Mar 2026 11:01:25 +0000
Files and hashes: 1: Gfv6VShJ4mT0fdnOqNJm0r4Kd0I.roa (hash: qUpgMPynY63Z9VUYkg3HECjUl6zX6JH95LZtBLn9SPc=)
2: wvPozdMcgnmN3vk0AfKcfcqmr20.crl (hash: v+j9FUwsg/knExr3JhomPQfasyZPHv0yqEIHLZEtl4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:64:ea:4c:b0:d1:f5:74:11:4f:02:d7:90:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Validity
Not Before: Mar 26 11:01:25 2026 GMT
Not After : Mar 27 11:01:25 2026 GMT
Subject: CN=b16d9edcb5a14f443cc273ab12ebfe15c7db7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:a7:4e:e3:60:36:f7:bd:21:00:e3:fa:71:
22:11:33:e0:30:76:3c:ae:29:48:63:5b:fd:20:76:
8c:2e:9c:e3:6b:0c:12:81:71:b9:f8:8f:e9:a1:f5:
0e:7b:ea:2a:c0:ef:77:fa:14:56:89:4c:87:8c:31:
10:6b:01:4e:44:a8:d6:ad:5e:d9:ac:58:c1:9c:f1:
39:10:60:cb:80:64:cc:14:71:05:08:31:1f:69:07:
ae:33:e1:35:e8:b6:18:44:63:77:b9:35:87:db:16:
ec:7f:fb:ae:72:d0:bc:d7:b7:d3:31:f4:0f:41:6f:
1e:8f:86:2a:72:7c:27:fa:11:02:43:87:92:27:db:
b5:fa:81:a6:04:ec:dc:10:db:99:b3:e7:ec:ec:6e:
c2:86:d4:bc:4a:1c:d0:e4:b9:f1:50:71:36:d6:49:
1f:ab:bf:f0:4a:df:cb:92:9d:9a:33:5e:5d:0f:0d:
a4:37:9b:b8:52:88:0c:0d:84:a9:bf:16:af:fe:4b:
9b:d6:da:69:8d:cc:f7:23:97:4b:88:2f:8e:c8:fc:
6b:1e:35:4a:1f:00:fe:bc:5c:12:4b:3d:ff:fe:c8:
0a:a5:ce:77:a0:a2:26:75:b3:7d:82:79:62:17:5a:
66:8d:7b:25:bc:25:05:92:09:ed:14:31:72:c8:8d:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:9E:DC:B5:A1:4F:44:3C:C2:73:AB:12:EB:FE:15:C7:DB:74:22
X509v3 Authority Key Identifier:
keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f5:7c:0a:80:b3:4b:91:54:d4:c3:36:77:bc:98:58:3d:a7:
de:0b:61:e9:68:5c:09:b1:96:2b:f7:ce:f0:25:9f:b9:32:2b:
76:e9:59:1f:5b:c4:93:bd:7c:5d:48:19:de:66:e5:47:fb:b9:
1d:2f:2d:74:23:aa:0b:f8:38:a8:e1:56:43:1e:ed:48:0b:2a:
2a:8c:46:91:24:23:1b:d7:6d:bf:0d:19:73:8a:8e:6b:f8:f2:
29:8d:3c:08:53:c5:2f:3f:c0:5c:2b:71:51:bb:e8:d3:6d:cf:
7a:70:1b:40:fe:36:6b:89:9d:6d:98:d0:b6:87:70:bb:2f:34:
91:a3:ab:cb:f0:77:f0:45:dc:ab:65:be:81:59:05:22:82:12:
8e:18:8a:81:c2:87:d3:a0:43:4d:c1:c3:c8:9e:8e:c1:1a:a8:
93:94:ca:6d:c5:5d:eb:33:98:04:ca:f2:1c:f1:8c:6d:2e:eb:
04:c5:76:86:b9:e6:59:3a:62:cb:3b:c8:e4:58:50:bf:5b:bf:
4b:06:67:5b:aa:1d:7e:c9:e9:f3:e8:5e:0c:2f:f5:8b:4b:9e:
93:20:c4:2d:4a:5f:b6:b1:24:22:18:1c:c2:f2:e2:62:44:83:
46:c7:65:a1:b0:5a:a7:c7:98:84:d1:2c:af:29:ab:1a:ef:a0:
f3:ad:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:02 2026 by rpki-client