Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
File: wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json)
Hash identifier: EpSHE1jG+UrGWs/aO4GW20WScxmw4vv92jHTud83QrQ=
Subject key identifier: FE:37:D2:03:3F:67:3C:75:AC:E9:82:09:84:00:05:4A:63:01:98:1B
Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Certificate issuer: /CN=c2937b9461a3d266e935834e5047a182238362c8
Certificate serial: 019D28844A07DD781F595D994C4815000DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: 0GT7y41M2U2Z4n9p1prIFuSSpCU.roa (hash: 5PN+tyrRAZ9I2OtQw0DrVEloHpHu5PekIGAzz+vR1XM=)
2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: f9lHumzZmICes5ZgyORmUyeyUAcXffN4ypxHkg6ciDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4a:07:dd:78:1f:59:5d:99:4c:48:15:00:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=fe37d2033f673c75ace982098400054a6301981b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:e1:79:ec:f8:25:f7:38:5a:fe:80:38:54:
b4:90:7c:b8:8a:59:83:33:1a:0c:96:76:01:52:b2:
2b:75:ad:68:f6:12:c9:0c:b1:ec:16:59:a6:62:ee:
17:d8:d4:85:da:68:b7:27:f3:89:14:3f:fb:fc:4c:
a9:41:86:3f:6a:03:86:fb:b4:db:22:95:5a:b6:92:
96:ea:61:e6:ab:02:8c:66:ef:9f:64:60:5d:2d:a3:
45:5b:b8:1e:19:77:35:04:d1:ba:ad:a2:88:03:07:
51:33:4a:00:44:93:32:e9:fc:5e:d5:ec:1e:fb:78:
47:f7:aa:f5:19:1c:56:e1:7c:f0:fc:23:fb:c2:0a:
9b:47:67:64:8c:84:e6:7c:dd:01:a8:78:b4:50:ae:
a5:4e:ca:3c:35:49:04:85:71:15:32:e4:0a:3e:36:
e0:7e:79:c7:9d:42:d8:14:44:41:78:b5:73:f8:1f:
9f:b0:ae:e3:f5:84:b5:37:6e:d5:15:a8:da:f9:60:
a9:f4:32:0b:c2:ae:9c:43:e0:9a:56:d1:a0:65:c4:
63:dd:c0:53:3d:36:95:f4:b8:7a:72:c5:c8:a8:dc:
1c:9a:6f:12:a3:c0:52:b3:76:f7:af:42:0c:28:ac:
3c:31:b1:75:fb:3d:3a:3c:17:f7:6e:72:5c:35:6a:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:D2:03:3F:67:3C:75:AC:E9:82:09:84:00:05:4A:63:01:98:1B
X509v3 Authority Key Identifier:
keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:81:9f:60:f5:9d:4f:ab:cc:2e:34:48:18:5f:3b:fc:9e:29:
a8:80:f9:e8:d3:5d:24:12:ea:dc:1f:31:da:e9:ca:9a:39:c6:
bd:8b:09:cc:60:e6:43:67:af:b7:2c:4d:d0:3c:06:ff:04:84:
e8:f8:50:9a:3c:7f:49:e2:8a:05:9b:dd:e0:20:38:d0:b4:1b:
30:95:6b:fa:25:c7:e0:85:a7:34:76:c4:a8:aa:f1:00:26:fa:
f9:f4:a4:49:15:c2:33:28:da:5f:ae:cf:19:35:be:22:3b:5f:
ca:42:6e:a3:d1:95:40:88:eb:d3:5b:bf:cb:58:d9:b1:b4:bf:
63:ac:4e:06:38:46:7c:1d:e9:17:3e:1b:02:2d:89:90:e4:6c:
12:6f:b2:da:03:3b:29:9d:75:bf:53:67:12:40:04:05:05:30:
d7:fc:82:a6:f0:d9:89:70:ad:27:30:34:5b:31:c5:2c:84:fb:
29:c5:a0:87:67:62:40:48:6a:9e:43:18:0b:09:03:31:c2:53:
b4:5d:38:f9:bd:b6:b8:84:14:78:6e:c9:f9:a2:ad:f8:4c:09:
e3:e9:4d:29:18:f0:8d:52:b3:20:9d:97:00:77:1b:5b:21:46:
d9:31:a8:90:c0:63:35:25:91:3e:12:60:81:fa:80:fe:35:52:
11:c7:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:23 2026 by rpki-client