Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json)
Hash identifier: fa8ySC3XXM7zTrjq8Gu9g1kqDdbuv+uz8qdeAyPj2PU=
Subject key identifier: 9A:34:B9:42:C3:B9:6A:EE:4B:30:3C:BB:BB:92:36:5B:5A:C0:51:7D
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 019D273ABB13F86E516CB718EA85AF72E920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
Manifest number: 033D
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: 0qFzXo6MCg5Y2PGpsR0sEyKeBkpblidA4OrG8Hvhkkg=)
2: zc3uA_Kqejq-ynl5hw7DgsICqZs.roa (hash: J23fc0kk/YQdneIepC92Zz7vs5gfl3zjCFcARQvJKXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bb:13:f8:6e:51:6c:b7:18:ea:85:af:72:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=9a34b942c3b96aee4b303cbbbb92365b5ac0517d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:4b:61:67:3c:05:20:34:20:88:8e:90:1d:
5a:14:07:e1:89:f6:eb:36:ea:05:2f:dd:13:e9:5e:
a0:59:d8:44:ec:14:90:96:26:44:77:c8:0f:8a:b4:
53:06:54:8a:f2:b7:56:15:b5:09:e6:00:ef:ee:48:
91:d8:fd:d3:12:19:f4:0b:4b:e1:40:81:e7:e3:9e:
7a:2d:26:82:32:59:9d:3a:d3:01:61:0a:77:57:b6:
bb:84:ee:c2:49:68:33:6d:b1:c6:ae:31:44:94:77:
95:0b:32:2d:4b:4a:dc:51:d0:45:26:82:dc:1c:fb:
21:27:15:e5:20:0d:d7:c8:8b:b1:71:0a:af:3b:22:
3c:6f:ab:31:e6:d0:86:c8:ca:6f:34:71:15:ff:fb:
16:3a:b0:64:38:56:0a:71:dd:6d:45:9a:43:f0:03:
d9:9c:37:1b:ea:5b:d3:aa:cd:0e:2c:75:2b:40:57:
c0:2f:3a:2b:b1:f2:c5:2f:46:bb:47:8d:97:ed:06:
05:70:62:bb:c8:4b:6a:c9:37:15:61:70:b7:c9:4d:
d6:20:e6:e3:3d:11:87:43:60:b8:30:7d:e5:a1:ea:
4c:de:99:ba:5e:fd:29:45:64:2e:b2:9c:cd:01:e0:
2c:95:3d:ca:ad:18:0a:88:8e:24:e8:54:c3:59:e8:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:B9:42:C3:B9:6A:EE:4B:30:3C:BB:BB:92:36:5B:5A:C0:51:7D
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5e:87:43:7e:70:bd:ba:70:37:45:81:d1:4d:29:25:3e:72:
c2:0b:52:16:e9:95:1b:b5:35:58:c2:fd:d2:d3:d6:1c:ff:76:
bf:ee:f1:1f:44:99:9a:cf:66:b6:43:1e:1c:80:13:36:41:49:
9d:af:6d:49:2d:8b:f3:90:1f:1b:2f:ce:df:4c:54:a9:05:a2:
15:86:5b:e2:71:a1:22:23:67:d3:e2:2c:63:75:89:16:d1:3f:
c5:eb:f4:9b:73:90:e0:cd:9d:de:2a:76:f2:0f:83:fd:9a:80:
c3:a7:3e:69:17:be:ed:15:dd:fc:a6:53:11:e1:8d:d4:f1:92:
e0:ca:cb:b8:b8:a9:85:97:7d:65:03:3b:db:d5:6d:79:8b:51:
07:90:38:da:d0:e4:95:57:7f:99:be:23:9d:bc:c3:9d:25:c7:
e9:60:db:cc:5d:76:78:2c:be:17:5d:23:c0:e8:88:16:c5:e3:
d4:d8:9e:b0:21:3c:21:78:64:ba:97:06:02:eb:0a:1a:74:c5:
84:d1:67:43:12:6a:e1:5a:a4:4b:9b:25:65:41:df:5e:ad:3f:
4d:4f:96:c4:28:b6:57:7c:64:2d:70:7f:61:0a:ec:88:2c:e8:
91:1b:04:05:01:6c:e7:34:1c:ac:94:5b:28:fc:61:69:58:2d:
16:41:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:45 2026 by rpki-client