Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: gFVDFtmaK02VriO0rerU3D4eg3xdvSTTIlqrfqefARk=
Subject key identifier: 56:94:88:E1:0D:CB:6D:E9:97:3E:37:1A:97:6D:53:C7:0D:35:34:E2
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019D27A87412A8A7912FEF073BEDE5A6786C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 0D24
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (hash: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8=)
2: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (hash: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ=)
3: NjHKuubvlyQaDe6G06rOD1BcaRY.roa (hash: PZZctgeIeCE44qT9n7ZGgk3AP9NOWa0WxX8jRLoy034=)
4: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (hash: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk=)
5: n6wjoRn8vuXLiBZK6YUuKxpVigI.roa (hash: kDFxvzggk1wOuyNg5FpJqYvgPEZaD8Cam2+bcXXeVYY=)
6: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (hash: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw=)
7: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: wM9Yy/DOA3lOl8+NOpNJyesn6vgT8Yr0i3gCEk/nmqQ=)
8: xLVQXdPk7Ia630Us7FrxzFiwGNY.roa (hash: /RpDRpvVxGqbyx6LsvIh/7YEjx0fR8/186/BQ9GsrcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:74:12:a8:a7:91:2f:ef:07:3b:ed:e5:a6:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=569488e10dcb6de9973e371a976d53c70d3534e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:04:fc:7a:18:e3:9a:57:96:a0:76:29:b9:
ea:2e:7a:c2:5c:80:89:ff:17:74:5d:ac:6d:5d:26:
b3:08:05:b3:4e:f4:18:9d:93:09:04:90:14:9f:2f:
1f:bd:49:68:38:bb:45:aa:a0:41:b1:8e:2c:2e:07:
58:99:40:52:81:87:03:40:12:63:f8:6a:b7:1c:f7:
de:26:d7:19:60:9a:a0:53:7a:ce:a5:0e:3c:ce:9c:
dc:fb:2b:1a:24:02:fa:86:59:d0:af:60:b7:72:fe:
f1:9f:c9:e9:65:1d:48:69:60:37:74:31:9b:b4:91:
68:b0:61:a2:4c:b9:dc:3e:31:20:1b:79:bb:34:c2:
a2:c5:f1:2c:25:1b:b7:1f:34:5c:42:ec:0e:8c:64:
33:92:b4:23:3b:ac:8f:6c:a0:91:75:54:34:b0:44:
fd:c1:5b:9b:04:22:be:69:9e:28:61:9e:33:63:69:
21:ff:32:7b:96:17:8e:21:01:5f:e0:a5:c1:21:73:
39:2e:a3:ab:8c:ae:48:9e:16:9c:9d:e5:8d:71:56:
e2:c0:3d:81:0e:57:8c:18:3b:38:4e:12:3e:cf:03:
60:57:b5:2b:96:24:3b:54:6d:2a:7a:ad:c5:ae:e2:
70:a0:0c:b3:f6:0d:d6:60:c2:15:f7:bc:c8:84:bb:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:94:88:E1:0D:CB:6D:E9:97:3E:37:1A:97:6D:53:C7:0D:35:34:E2
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:12:68:da:a7:f6:0d:d3:ab:1f:cf:5f:92:d1:58:d4:4d:cc:
66:35:7a:b7:e1:e8:1a:e0:43:0c:56:92:51:23:a6:61:6a:a7:
1a:89:a3:c5:0d:c0:74:8b:ae:d5:f7:ec:e6:de:c5:35:4a:e7:
c0:33:47:8b:ba:33:d8:cb:a3:0b:97:b9:0d:a4:b4:d3:97:32:
dd:89:88:b2:a6:f0:a5:76:02:21:79:ed:e0:8b:c7:ee:52:48:
ac:85:7a:a9:4a:bd:ca:47:48:65:f8:3f:d6:0b:ff:44:62:63:
d1:97:e1:fe:cb:f8:ca:17:75:c9:1f:ea:bb:f3:c7:f4:7d:b6:
45:59:01:f4:07:ac:07:d1:63:ce:37:79:cb:bb:5f:0c:c4:ac:
19:aa:8f:b3:9a:91:4b:29:96:20:0b:22:f1:de:8f:4d:f0:f6:
f2:a8:2f:09:de:aa:19:b1:09:20:89:56:35:8e:f1:be:c1:61:
d4:70:a8:ee:21:5b:20:97:a1:c8:80:8b:f9:4e:95:b3:78:18:
0b:67:72:16:27:39:c4:cc:b6:5e:03:5f:4e:b9:b5:07:c8:fa:
f2:80:66:c6:5d:f4:9d:14:a8:aa:73:37:9f:42:e6:9c:a1:f9:
65:9a:88:06:15:f6:fd:e1:0a:75:ae:64:fa:fe:ee:10:fd:f3:
b8:70:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:49 2026 by rpki-client