Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: 7/Qa0Lq62pXT1yd1jGjMHElw3N7kuyMGCnWrw+WU5fM=
Subject key identifier: 7D:C2:72:DF:8C:67:FE:74:B2:A1:C2:12:03:89:DA:57:F9:94:29:EE
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019D2627F7E2C9E9CE137EB4F331F77263D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 16A0
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: 2fDUlbNk_TjJfNmL8k7Qpaq_A4k.roa (hash: AoEFyUvMFK7WBCJaTliv+GG29q2nziZw8E359o15zN8=)
2: gMvc_sE40m271NPynEOBrQzKYWQ.roa (hash: OeLSYnjbKMmBS4VGXJ744NmGmYrVy7bxB46xBnCaSmA=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: 7tUmkqbSR0gKNfMsc+Wlk0qkG1J2CwvkiMmYPtqXUT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f7:e2:c9:e9:ce:13:7e:b4:f3:31:f7:72:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=7dc272df8c67fe74b2a1c2120389da57f99429ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:36:1a:74:a7:f8:eb:5a:e6:64:1d:d1:a2:
92:34:f1:08:e6:10:c5:e6:9b:dd:0f:bc:84:c6:42:
dd:d9:f6:1b:22:bd:63:69:50:18:7f:1b:85:20:24:
78:61:6f:60:6a:9b:a6:31:9a:54:57:a9:8b:7b:a4:
f0:ca:18:e0:b6:a8:ac:73:35:f0:29:7b:8c:c2:7e:
01:63:31:99:26:15:ac:3b:94:b9:a6:da:eb:fc:f4:
79:b8:eb:f0:52:39:f7:d1:27:53:9e:48:8d:75:cd:
ad:b6:e1:72:af:93:ae:37:b8:c8:8e:72:48:0b:2a:
c7:c8:1f:41:51:74:c0:db:98:d2:46:72:71:49:ad:
87:ce:0c:24:e8:08:96:0e:e9:08:69:db:51:cc:4a:
fc:77:24:ba:ec:8d:88:ea:00:7e:65:ab:6b:1f:d0:
d5:0a:64:82:15:ee:50:06:64:2f:25:ee:34:12:90:
95:a8:42:73:f0:91:26:6e:be:7d:bb:7e:c0:ac:a7:
12:17:5b:3b:55:e3:ab:22:64:b2:1e:7f:2c:f0:48:
13:3b:2d:66:12:24:fa:42:3c:81:4e:1b:83:ee:fe:
23:64:d8:96:6c:f1:20:4f:cd:e6:3a:36:50:c2:cb:
d8:ab:14:f3:c9:90:ef:41:9f:45:75:13:b8:f8:7d:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:72:DF:8C:67:FE:74:B2:A1:C2:12:03:89:DA:57:F9:94:29:EE
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ab:4b:b6:4c:7f:5d:ae:5c:50:72:00:08:5e:8c:fe:66:f1:
66:f1:47:ff:7e:b8:30:36:38:9f:b9:52:b3:b7:4e:9d:67:e5:
bd:e4:c3:73:85:a8:71:2e:64:65:30:b8:5a:47:65:2e:f9:f0:
ca:bd:1f:16:20:09:a9:26:2a:01:b4:15:26:77:e5:0f:8d:87:
09:f4:61:4d:42:3d:38:be:92:62:0a:d6:97:0a:e3:7f:8f:aa:
e8:fe:8b:9c:f3:67:19:c2:ac:e8:75:49:7a:ce:10:11:29:4b:
a9:db:31:82:b0:81:31:05:35:28:2f:86:93:10:96:3d:29:9b:
17:19:04:a6:97:f4:b9:6b:da:65:50:2f:e3:42:62:5d:ba:3e:
80:77:c1:1d:46:d2:c1:00:e3:bd:62:eb:8b:c5:9c:62:72:24:
68:b9:69:c8:dc:b7:4f:f1:a8:2b:c8:49:81:22:29:25:bf:a8:
97:d3:c0:22:bb:b7:31:5c:43:ff:51:3e:88:08:8b:c3:bc:66:
5b:ae:40:46:9f:4e:5e:52:0d:b3:47:67:54:9e:4c:71:eb:fa:
22:79:55:7c:55:51:72:25:e3:99:57:8b:dc:5f:b8:9f:8f:f2:
75:9f:44:91:03:23:44:cb:56:2b:d4:d3:53:65:c1:53:58:f6:
43:e0:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:13 2026 by rpki-client