Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: RrkGNk+B9o+h8lLIbO7sWUYKkSHovnZ/iT+QImlxisI=
Subject key identifier: 42:71:2A:8F:FC:6B:73:B7:A0:59:9E:28:B6:EA:8A:60:79:C6:F5:AC
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019D28BB4387AA72B6DCFA1CEF985094DF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: 0iESNpq3jdtwErdY/9BIMdO5PiM+FmXgZYSjq1hWpCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:43:87:aa:72:b6:dc:fa:1c:ef:98:50:94:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=42712a8ffc6b73b7a0599e28b6ea8a6079c6f5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:55:98:6e:fb:8d:88:28:27:aa:c2:47:1b:
5c:cc:fb:66:2d:1c:c5:43:2c:70:fc:8c:41:c7:a4:
69:6b:6a:18:d5:75:dd:7a:51:cb:5e:74:79:9c:05:
77:37:9e:00:cb:0a:6a:ae:e9:db:d0:5b:e3:a8:c4:
f9:00:c7:35:6e:4b:38:03:05:2c:83:e9:e7:f6:ae:
b5:c0:93:54:98:1d:db:99:b4:91:0c:b3:da:07:a2:
33:68:87:fa:fc:8b:16:f4:b3:33:f0:bb:9f:95:99:
bc:49:d5:44:cb:26:df:3a:cf:fa:86:a0:f6:5d:fa:
d2:a5:c2:07:6b:9b:7d:dd:9e:60:86:0c:b2:24:37:
65:55:97:c5:6c:7c:50:0f:d1:3a:73:99:11:1e:18:
3a:af:cf:6e:ca:c2:45:ce:87:ba:73:db:f1:3f:b8:
b6:3e:22:87:dc:e9:bb:d4:60:3a:bb:bc:d0:a1:27:
1e:22:71:98:3d:cd:a6:9f:f4:b9:46:93:dd:47:a4:
a7:07:e1:35:8a:ac:17:17:87:78:5b:1c:21:46:a1:
fb:fa:4a:e0:55:e7:75:0f:01:4a:de:63:23:cf:b0:
1c:03:3c:32:87:2f:70:4d:1e:a4:cb:34:3f:d8:f9:
04:e3:6f:d4:c4:53:bd:aa:68:93:c4:9f:b3:5c:70:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:2A:8F:FC:6B:73:B7:A0:59:9E:28:B6:EA:8A:60:79:C6:F5:AC
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c5:64:58:64:c4:a3:62:a1:e7:8c:95:d2:87:df:26:8d:5c:
58:2a:e5:eb:b6:d0:8b:3e:cd:5e:6f:0b:83:da:f7:9b:c9:74:
fe:56:38:f5:5d:1f:d1:74:69:63:55:aa:a2:23:6f:4b:b8:3a:
53:65:a9:e6:36:0d:a3:b4:9a:57:85:55:ef:70:02:17:1e:21:
9c:e4:4d:18:d5:3e:cf:7b:3c:31:3b:89:f5:4a:19:bb:be:c4:
4d:21:ef:31:a4:3f:71:f0:87:0a:05:e4:02:f0:23:a8:58:2d:
8e:9f:b4:24:9b:86:e0:b3:69:a5:ea:af:41:b9:a5:6b:20:b8:
51:b1:aa:77:cd:d6:07:fc:f3:24:6c:33:25:42:c6:6d:7f:8c:
1c:1b:c6:c3:f0:9f:e1:91:8f:34:28:a3:28:21:60:ee:b3:71:
02:c7:32:12:50:a8:4a:04:e5:90:99:6a:21:92:f6:5e:4e:6b:
50:34:b1:88:1a:23:43:50:90:50:92:fc:f9:8b:d5:02:5b:fa:
e3:70:4f:d2:1e:da:14:48:43:53:a4:12:6b:55:41:76:6f:94:
0b:6a:63:76:55:3e:ab:a4:5d:a5:1f:9d:b8:5e:c9:7a:c7:9e:
ff:ba:38:64:d3:3d:fa:b3:e2:0b:b4:3a:a1:42:ae:84:2d:47:
16:5e:af:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:05 2026 by rpki-client