Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: kb/gEYkR8Ba4FdRbGehdE8aPL+JFFdkzNsUoVTvwWGk=
Subject key identifier: 17:03:FF:24:D6:4F:3E:4D:B8:CB:20:D7:0D:21:59:D6:B5:8C:76:3F
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 019D254C53C90634A89CA726F09DA1C54852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 14:00:52 +0000
Manifest this update: Wed 25 Mar 2026 14:00:52 +0000
Manifest next update: Thu 26 Mar 2026 14:00:52 +0000
Files and hashes: 1: T8QJHByEv64H0gjF7HGRIrb9vjE.roa (hash: HQO3K4fGqybXPG44yT3CoGrtf4JzDzj7i8w8Wh7zPMc=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: nL1CDJSi2smE+tegSJchFaOR5RDtyE7/xY52tvK5egk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:53:c9:06:34:a8:9c:a7:26:f0:9d:a1:c5:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Mar 25 14:00:52 2026 GMT
Not After : Mar 26 14:00:52 2026 GMT
Subject: CN=1703ff24d64f3e4db8cb20d70d2159d6b58c763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:12:9c:76:6d:17:a0:c4:fd:bb:60:f4:77:
7d:b9:71:36:5b:60:e7:f6:a5:f3:c8:ef:e1:2e:08:
fc:86:54:d9:2c:56:c6:1b:ff:13:80:b5:66:9f:20:
ff:9c:e4:6d:51:b5:49:e5:36:34:24:24:5b:d1:06:
1b:2e:90:75:63:23:2e:6e:0d:90:5a:b7:52:81:60:
4a:5e:3b:2e:ea:ca:00:fe:60:53:e4:e0:67:ca:4e:
90:f3:05:00:87:ae:3e:66:d5:36:5f:3b:bc:dc:e6:
6a:a0:0f:fa:52:9c:2d:53:48:69:45:a3:61:ff:44:
36:55:77:54:45:15:ad:d8:ea:5f:17:11:4a:d3:8e:
c3:0e:90:1d:f8:f5:b4:9f:50:5b:33:93:a5:02:81:
66:d6:5e:1a:29:32:4e:48:8e:f1:88:5e:52:8a:f2:
13:99:4a:2a:40:3f:25:be:ea:8c:57:30:9a:8f:48:
51:93:d6:cb:2c:96:16:da:ed:08:98:fa:c4:9a:87:
3f:a6:f9:e9:1b:3c:f9:c8:98:44:b9:75:1a:c0:1e:
74:cc:69:f2:a9:75:c3:f8:88:71:19:9f:5c:6a:38:
a6:47:70:6c:eb:88:b3:62:a3:e3:ed:be:73:3f:af:
1f:cf:af:fc:fa:85:28:36:c4:e2:f2:31:c8:81:bb:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:FF:24:D6:4F:3E:4D:B8:CB:20:D7:0D:21:59:D6:B5:8C:76:3F
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0a:1b:37:76:e4:39:86:2d:fc:0e:7b:ea:68:91:03:a4:a7:
5f:f0:8c:08:9e:85:57:e3:3f:60:f7:39:4c:b7:ae:03:71:95:
fe:da:e5:25:7a:0f:05:35:5a:19:73:88:ae:7f:a3:30:0e:1a:
e8:2e:d7:29:58:92:c0:97:10:3a:42:f4:c5:b2:18:79:3c:d7:
30:a9:67:7c:0d:e9:81:ac:99:00:c3:a5:6b:40:52:77:a8:8f:
1b:2a:98:96:4c:1a:16:75:a4:ed:9b:07:37:45:f6:8a:f0:18:
50:1e:18:a2:36:0c:7b:eb:eb:b3:4b:93:69:a0:29:77:98:a3:
62:cd:e8:ad:32:6f:e9:39:5c:26:91:22:44:3e:34:88:40:a6:
72:e9:03:29:b7:b6:89:b7:a3:61:f9:d9:0a:47:93:4d:fa:d8:
1a:29:5d:dc:90:ea:6b:ae:40:79:56:8c:7e:b7:5d:6d:35:05:
e9:27:eb:14:59:95:73:79:c0:df:94:0a:e0:dc:86:c1:9c:04:
e1:b7:e7:8b:c4:d5:61:ae:df:62:4a:3b:40:62:e2:d9:88:60:
7e:68:d9:2a:84:61:7f:4b:9a:b1:a2:b8:07:96:c4:b9:7e:47:
c2:27:89:a3:45:fa:1e:70:b0:45:f5:db:41:60:04:c2:73:56:
d2:b3:7b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:17 2026 by rpki-client