Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: XCjh/egOY1lzN5A2fCJVAXB/0c4NTws5RUPKmah4f94=
Subject key identifier: B4:0E:8B:F5:3C:EF:BC:07:2B:4C:6B:F9:F3:3D:30:51:10:1D:20:BC
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 019D265FB86C48D9E3B4C13CD54F74700E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0F12
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: 1mKr2BYewzXDecj0nNw7rfiYO80.roa (hash: 6ynFOsQcc4+COoSJWkYKLEzNdnYU6AWGSoX2YiGPF3I=)
2: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: c951TRtas6ncxJxOouOqrjs5DIkOp/rzEv2uzioqgg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b8:6c:48:d9:e3:b4:c1:3c:d5:4f:74:70:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=b40e8bf53cefbc072b4c6bf9f33d3051101d20bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:37:ec:bd:ee:31:47:9d:a3:92:6a:98:e5:
3b:f2:d7:4f:a7:e4:60:89:96:15:f9:4b:4d:91:84:
d5:46:5d:af:b4:c4:f2:e7:6e:ba:e6:4b:3b:34:42:
8d:39:27:04:36:91:45:3d:f5:5e:1b:36:f9:61:2a:
82:4f:2c:f8:43:c2:b9:78:66:eb:cb:39:9f:5d:62:
90:e9:47:c2:2a:69:4a:8a:ad:cb:dc:2b:9a:85:40:
81:9d:cc:a8:8f:96:52:93:ba:61:bd:7e:43:6a:25:
74:0a:02:3a:f6:fd:ef:1e:03:f2:ce:94:ae:af:df:
df:d4:0b:21:67:2c:f3:f4:71:aa:e9:a2:fe:33:a3:
e3:8f:b6:c7:c9:13:41:10:3b:1b:c3:98:34:4f:ae:
46:97:56:91:f7:33:b9:63:b0:e3:fb:8e:3d:0e:25:
7a:ee:67:51:55:5b:74:d4:cd:cd:a4:df:26:67:5d:
97:e2:1f:01:9d:a9:c6:da:95:7b:a3:c2:64:59:45:
10:16:3a:09:2f:90:40:07:34:87:9c:51:1f:b9:0b:
ce:a3:62:36:71:09:3b:20:c6:27:e6:5f:16:90:84:
20:b9:dd:a9:a9:df:30:57:ea:4e:40:d3:44:2b:ba:
a3:74:b0:2a:1f:ac:70:43:8e:db:2e:68:ef:c5:a6:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:8B:F5:3C:EF:BC:07:2B:4C:6B:F9:F3:3D:30:51:10:1D:20:BC
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:aa:38:0c:10:df:82:dc:9a:6c:d4:d4:7f:55:51:77:6d:
b3:ab:f6:fc:0d:31:40:05:8e:0c:e7:40:aa:1c:3b:5b:a4:49:
d9:09:ac:85:11:b1:ff:0c:8f:40:a5:51:14:38:ac:50:7c:ae:
01:8a:08:67:41:c1:4e:9c:cb:d5:78:fc:af:8d:71:57:d3:6a:
2d:de:b3:01:e8:82:74:1b:a8:3e:cd:12:98:70:67:96:e2:7d:
dc:f4:cf:55:73:8d:0f:cd:12:06:07:96:1c:e9:b1:90:74:53:
98:9b:bc:88:fc:da:85:f6:a4:dc:10:55:8a:79:06:db:46:d2:
48:a5:a4:df:bd:6a:aa:7d:69:21:6d:b4:c1:53:2d:b8:c3:dd:
5c:88:25:4d:e2:95:6b:47:aa:e0:85:6d:fc:16:4e:47:63:04:
c3:59:d9:06:5a:c9:1c:99:90:fe:19:26:c8:1b:28:9a:bd:bf:
d3:b9:e6:8c:8c:2d:b5:02:f3:74:59:6b:31:ed:d8:43:a7:a8:
c0:40:e3:4f:56:c2:2c:58:ac:aa:c1:4b:14:6c:c0:ca:de:3c:
7c:3e:0e:89:8f:10:15:0b:57:30:4d:40:1a:86:79:af:1e:79:
d7:b5:da:11:47:c1:4a:5b:3f:b2:07:3c:23:e3:d2:d0:8f:97:
00:17:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:19 2026 by rpki-client