
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: ZKp1+fR0pcWcpNU5Ev714dXhdvfO55GaSzfaSRhEUi4=
Subject key identifier: A4:D6:22:F4:1C:8C:BC:AF:82:4A:41:5F:48:C3:67:86:3C:E1:9B:C3
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 019D258369880D4B20151131049D346B357A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: 03B6
Signing time: Wed 25 Mar 2026 15:01:02 +0000
Manifest this update: Wed 25 Mar 2026 15:01:02 +0000
Manifest next update: Thu 26 Mar 2026 15:01:02 +0000
Files and hashes: 1: k0b9VtGawXwWdQgfJzcdEYCCg_o.roa (hash: dIXVCTmcfL3HOBzfVAxTvQR3ANPXcc/eVpPbv90sMfE=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: +dHtTdPc9Qio60QBbOEXaAxGxP8WhuExgXjbIk7SrIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:69:88:0d:4b:20:15:11:31:04:9d:34:6b:35:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: Mar 25 15:01:02 2026 GMT
Not After : Mar 26 15:01:02 2026 GMT
Subject: CN=a4d622f41c8cbcaf824a415f48c367863ce19bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:55:18:91:be:59:cb:17:fd:3a:f2:61:fc:
f3:eb:58:ce:93:c9:03:7a:ff:04:78:b5:f6:3f:70:
c9:f6:81:ad:90:fb:9b:27:0d:f1:c7:3e:ee:3d:6a:
98:6c:62:c8:d8:1d:c5:c9:47:f0:55:9b:3c:1d:92:
a2:57:6e:75:83:b3:27:14:10:f6:a7:8b:03:35:c4:
8b:3f:da:b0:e5:7e:61:0f:d2:52:55:50:ad:99:85:
cf:1b:cf:67:a8:fa:1d:c7:4b:cc:f2:51:5e:f2:11:
6f:36:41:81:81:45:91:8e:f8:1e:50:bc:03:5c:c4:
35:8f:80:20:28:a6:c1:43:79:78:8b:1d:64:02:3b:
92:a4:42:03:fe:c4:0d:6a:6e:83:a2:20:fd:09:3b:
b6:82:7b:dd:81:b6:be:12:d3:74:bd:ee:db:2f:38:
f6:07:65:ab:b3:8f:b5:25:00:69:83:62:54:7a:90:
d1:c8:e6:39:f8:bf:b7:09:64:4e:be:8a:10:6c:e6:
62:47:71:cd:60:05:74:e5:70:7c:11:9b:23:95:63:
b3:c7:cb:cc:61:b9:08:ab:a0:b9:15:91:ee:68:23:
ce:df:10:c3:2c:1f:70:30:63:4e:09:99:65:03:b5:
f5:75:b7:98:b5:7a:2d:ff:b5:b6:79:d1:89:d7:17:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:22:F4:1C:8C:BC:AF:82:4A:41:5F:48:C3:67:86:3C:E1:9B:C3
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a5:c9:51:0f:ac:49:dc:8f:79:bf:fd:d3:b9:f8:c5:77:36:
68:07:1f:a4:2f:c7:a1:46:b1:c5:66:aa:4e:82:7b:86:e4:c0:
3e:aa:43:f9:37:ee:e7:8a:72:5f:9c:80:1c:17:77:92:82:4e:
d9:cf:89:31:33:46:be:80:c0:bb:69:f6:8c:62:8b:c1:75:72:
d3:4e:a7:69:15:1b:aa:e8:ec:88:77:2a:a2:ea:2f:f8:35:25:
6d:59:68:70:4f:d9:3a:b0:61:37:8e:ca:de:01:98:64:a1:bc:
13:16:de:ed:93:d8:85:53:3b:a6:07:d2:da:b6:c6:06:e5:fe:
37:c6:5c:a1:cb:d9:fb:e2:c3:03:a2:83:9f:f9:1d:10:94:d3:
ff:e1:89:d5:ed:6e:d5:70:e5:d8:65:f1:31:bf:6a:13:54:dc:
2c:a3:1e:9d:cd:92:11:07:fc:38:be:c1:13:a5:2b:91:af:60:
28:72:f3:6f:52:04:4b:a7:e2:4b:7a:f9:91:57:65:16:87:af:
a1:a6:42:52:6a:42:47:5e:40:c2:b8:de:e2:b8:0d:d7:f4:85:
f0:ee:54:18:d9:86:30:eb:18:65:a3:78:ee:d4:f6:c2:17:12:
84:77:d2:5c:58:6e:1f:a1:50:b0:c1:ed:b5:68:fc:01:f5:76:
eb:d0:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:22 2026 by rpki-client