
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft
File: wV2l51mD4hnpvXXA63aa3WpcPxQ.mft (raw, json)
Hash identifier: 70pemkmb/KbukfiiN9m5vUSauKYIeXOgA62KtO+P0pU=
Subject key identifier: 0C:BB:9A:8F:28:78:35:4C:4D:6C:8B:AD:95:4F:88:12:5C:18:8A:99
Authority key identifier: C1:5D:A5:E7:59:83:E2:19:E9:BD:75:C0:EB:76:9A:DD:6A:5C:3F:14
Certificate issuer: /CN=c15da5e75983e219e9bd75c0eb769add6a5c3f14
Certificate serial: 019D3451D918715BD217893F8D9FC7FA94AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV2l51mD4hnpvXXA63aa3WpcPxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft
Manifest number: 39
Signing time: Sat 28 Mar 2026 12:01:12 +0000
Manifest this update: Sat 28 Mar 2026 12:01:12 +0000
Manifest next update: Sun 29 Mar 2026 12:01:12 +0000
Files and hashes: 1: snyH0AH5dVgKf4UFPj1sRloyJL4.roa (hash: lYWkmS4ke6/CVFVLZxKpdxT0VNDZAvbyhDNV2kGc7Pk=)
2: wV2l51mD4hnpvXXA63aa3WpcPxQ.crl (hash: brVLwjk9znYj1LG/UNZkOl2IzgqRLiO5wV3Zf/Vy1ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV2l51mD4hnpvXXA63aa3WpcPxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:d9:18:71:5b:d2:17:89:3f:8d:9f:c7:fa:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15da5e75983e219e9bd75c0eb769add6a5c3f14
Validity
Not Before: Mar 28 12:01:12 2026 GMT
Not After : Mar 29 12:01:12 2026 GMT
Subject: CN=0cbb9a8f2878354c4d6c8bad954f88125c188a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:a2:ee:6c:1e:cc:b6:b0:67:dc:0f:e6:66:
93:82:80:3b:55:b1:19:ef:1b:3f:af:93:3c:74:49:
d9:dc:e1:43:36:45:85:60:78:9e:0d:77:45:1e:75:
5f:c1:4e:0d:5a:0b:3d:94:fe:3f:7b:1e:58:b2:66:
03:c1:31:3e:37:53:3d:d9:97:a5:51:2d:4a:71:57:
94:ea:cf:20:f8:c0:48:f2:b8:5f:38:1f:20:d8:a7:
25:4a:60:68:f9:9d:95:0e:42:ab:23:e1:01:25:db:
51:b6:3e:f8:88:ff:b4:a4:a8:77:61:19:19:0c:b1:
3a:47:84:41:3f:da:00:42:14:db:a9:70:ac:c2:e2:
84:75:70:c1:b2:d9:06:03:e7:ff:77:a7:20:2e:d8:
8b:e3:6f:a8:32:98:8e:3a:b0:52:a5:74:00:4a:a0:
77:a0:0c:32:42:96:da:70:5f:23:7a:38:13:dd:f8:
51:81:d7:2f:63:fd:86:7e:fc:53:57:5e:ac:99:0d:
c7:bf:e2:05:e7:58:c1:65:86:6a:bd:1e:bb:e9:5e:
82:5e:f4:1e:28:43:5b:d9:f2:51:97:23:a8:68:e1:
7b:4d:dc:09:fe:33:ca:e3:10:98:2b:fc:6d:7c:6c:
3e:ea:27:99:45:bd:93:04:a0:bb:4f:57:f4:de:85:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:9A:8F:28:78:35:4C:4D:6C:8B:AD:95:4F:88:12:5C:18:8A:99
X509v3 Authority Key Identifier:
keyid:C1:5D:A5:E7:59:83:E2:19:E9:BD:75:C0:EB:76:9A:DD:6A:5C:3F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV2l51mD4hnpvXXA63aa3WpcPxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b1:9c:62:7d:d4:94:90:72:66:d7:96:6f:9d:b9:2c:69:0c:
c5:5a:c3:e3:f3:08:06:03:de:2d:6e:22:80:08:c7:39:be:5b:
70:76:e3:ca:0e:50:c3:86:78:8e:72:93:2d:03:9b:45:7a:d5:
f3:57:e1:4e:2c:2f:a7:41:87:f6:3e:e4:43:ca:de:16:76:9d:
b8:0a:2b:fb:15:f2:cb:76:b5:32:41:72:ea:e5:8f:7a:ec:47:
c2:19:5c:f4:b8:b2:dd:6d:a0:14:ff:0f:38:81:c6:5f:6e:b7:
d7:49:9d:57:ad:78:36:9c:92:b2:94:bc:cd:ae:85:15:69:fc:
fa:2f:8e:0e:35:f0:40:5a:0e:2f:ea:0c:db:d9:4c:30:d6:2a:
a7:06:f3:42:a9:25:cf:32:fc:04:bd:80:c3:ae:f3:dd:e3:e0:
04:13:c7:40:23:a9:24:c7:4e:53:8d:90:df:71:97:d1:73:94:
96:08:81:87:22:ef:92:03:26:2f:16:bf:8b:cc:23:e4:25:10:
ac:cc:3e:71:6a:c7:0b:05:e7:d1:ac:40:51:3d:41:30:8c:dd:
c8:ce:20:10:b3:46:6a:f9:39:58:36:97:ed:c3:7a:2a:3b:8b:
da:31:32:c7:ed:2e:1b:2b:64:c4:8d:b8:90:eb:a7:d4:1d:e2:
7f:ec:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:50 2026 by rpki-client