Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: wXFsLDak+A8GUexrU6dVCv4DUN+eNrFs8TyMHTqZ25g=
Subject key identifier: 4E:7F:59:88:B7:4B:6A:07:6F:95:F1:3F:BD:1B:1D:A5:33:F2:54:09
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019D265FF8EBF58745B672D7A8E41011E73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:56 +0000
Manifest this update: Wed 25 Mar 2026 19:01:56 +0000
Manifest next update: Thu 26 Mar 2026 19:01:56 +0000
Files and hashes: 1: RAiUuWAS6kcQ-QJt6I-SFZa80cQ.roa (hash: ttJu1TEjHl6NqHl89N7ouZ4TGNYPAl0suf8bz/Ts/Kg=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: yTa1cTjmUOWdRbEIMLLgtBrT5Dtqx90R6ucSzAGGzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f8:eb:f5:87:45:b6:72:d7:a8:e4:10:11:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Mar 25 19:01:56 2026 GMT
Not After : Mar 26 19:01:56 2026 GMT
Subject: CN=4e7f5988b74b6a076f95f13fbd1b1da533f25409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:9f:76:c7:c5:7e:4c:73:00:70:cb:81:3a:
a3:28:9b:f8:2b:26:8c:c3:38:72:a2:fe:cb:87:84:
c4:42:1b:98:06:8b:2c:7a:0b:0c:3d:97:d0:63:14:
9a:8c:94:64:aa:34:80:db:05:41:c7:9a:c4:9b:b8:
64:54:b6:9b:76:a8:bd:d9:31:45:53:34:1b:43:89:
c2:61:a7:8c:74:63:a0:e1:2c:1d:31:65:7a:dd:e6:
aa:fb:91:13:3c:81:43:2b:d6:3e:19:e8:e6:c8:f6:
c4:45:7e:8c:ba:6f:b2:73:00:85:ac:33:3b:46:66:
2c:65:51:4e:45:f3:bf:8a:5f:91:1b:25:42:d0:87:
7b:63:18:2a:d1:42:9c:47:44:b8:8f:08:7d:0f:6a:
5d:31:17:7e:af:f5:69:68:6a:94:6f:61:5b:aa:e7:
f3:11:94:45:f4:ff:6c:2c:b6:2d:29:3c:40:8b:e0:
bf:83:40:28:91:f4:21:10:4d:b1:a9:8b:e7:21:a7:
7a:49:2d:01:81:fa:68:d6:a6:86:ed:5c:0a:f5:e9:
a6:f3:4d:56:45:da:82:27:e2:26:39:4b:a7:66:8f:
7c:85:81:fe:06:1d:3d:ad:89:e0:1b:00:44:31:c3:
c1:1c:2c:69:9c:e8:4a:f7:2e:2b:62:49:23:97:c9:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:59:88:B7:4B:6A:07:6F:95:F1:3F:BD:1B:1D:A5:33:F2:54:09
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b4:d5:54:ae:8d:75:65:06:0e:42:32:54:96:f8:57:f2:14:
17:a5:ed:7f:03:dc:5e:8d:4b:40:14:87:f3:e9:5e:a3:91:11:
3c:19:26:24:2e:51:fb:e9:6f:f2:5e:e5:45:ee:37:89:4f:b9:
aa:9c:9c:25:3c:6c:33:53:f7:29:6e:d9:5a:22:99:04:ea:95:
2b:00:e3:65:40:00:23:ee:6b:eb:2d:65:c6:3c:6f:28:36:d9:
f5:60:b7:42:7e:73:f1:8e:66:77:2c:2b:19:64:6e:fd:de:84:
20:b2:f2:73:99:a6:94:11:dc:91:b8:db:2b:61:1d:42:41:50:
6d:fc:67:29:08:4c:dd:6d:5e:6a:03:33:2a:97:7b:de:d4:7d:
bb:d9:71:6d:fb:a5:87:31:c9:db:fa:78:f0:4c:44:14:80:88:
16:77:ec:f2:60:00:0a:3e:9a:a1:a7:f6:86:d4:8a:6f:fa:e0:
5a:2c:bd:a7:13:f3:fa:47:ae:02:86:56:42:f1:48:65:c4:f4:
e5:00:c9:67:98:fc:76:37:b7:89:2e:75:4e:50:e1:82:ca:39:
f4:d9:9c:f8:ac:50:1a:d4:9c:2a:f4:17:b4:a1:8f:a6:1c:b4:
02:c3:8e:85:a7:d8:59:0b:b0:9d:bb:86:d4:b8:51:bd:ba:51:
77:cf:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:48 2026 by rpki-client