Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: iUYs/foQlqLhOyXuMXRP2S+WcH4OgIDEwBl3zZZadoQ=
Subject key identifier: 37:25:47:15:D5:29:AC:98:63:26:7D:35:51:F1:8F:CD:A4:AF:C9:BD
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 019D28F2CD9FB9B335F1350616A6916812EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 07D1
Signing time: Thu 26 Mar 2026 07:01:34 +0000
Manifest this update: Thu 26 Mar 2026 07:01:34 +0000
Manifest next update: Fri 27 Mar 2026 07:01:34 +0000
Files and hashes: 1: NDrrs_IUd2G0O3SuekMlmUqDGQ0.roa (hash: jPB6GFI8ltAMvGMwxWBRh6dK/JyrVkFk3erVX9RWesc=)
2: O-gWt6o4q970dyzmWA3O_dAqLD0.roa (hash: NVRXZZk1exXkOayT1ebIzr9QdlyalYAdYzDjQteTBuc=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: fYNvdP23hHha2Ho59Pv5vcXfW4vo6KDNNW6h3TA7Ces=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:cd:9f:b9:b3:35:f1:35:06:16:a6:91:68:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Mar 26 07:01:34 2026 GMT
Not After : Mar 27 07:01:34 2026 GMT
Subject: CN=37254715d529ac9863267d3551f18fcda4afc9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:32:98:f5:88:05:ab:6c:0d:75:40:aa:ca:
e1:fd:21:f7:b0:47:b1:48:4c:ee:52:35:80:5d:87:
44:19:bf:25:f7:ef:0e:c0:58:31:b6:e0:bc:93:60:
80:80:43:e9:13:9a:e5:aa:c4:ae:98:89:2b:8b:9f:
83:22:a9:bf:c8:0d:1b:d4:6d:af:10:7c:21:7f:aa:
04:e1:f0:1f:85:ef:9c:59:63:a3:5d:c3:a6:e4:4b:
8a:49:b7:f2:79:98:69:04:2e:42:71:b8:70:e4:02:
9e:4a:30:aa:0b:a8:53:da:c0:4b:82:7d:1e:55:53:
7b:89:94:0d:8c:84:1b:6f:3e:76:2f:ea:bb:c9:53:
41:1a:42:64:61:aa:9d:ac:8b:3b:fe:96:5f:0b:59:
7e:33:90:48:08:22:a5:31:ac:5c:17:4f:b4:33:17:
42:79:58:4f:e3:d4:43:7d:e7:cf:ed:3f:ea:4b:31:
51:7e:04:ae:fa:47:b3:5c:61:15:9a:01:48:24:80:
34:c4:1e:b9:78:fc:47:20:e2:17:2d:5a:15:f6:fe:
e9:52:46:af:ed:17:46:68:6c:c4:db:d9:30:b8:8e:
ae:a5:c6:d0:f3:b7:ca:b6:dc:2f:d4:0d:7f:32:ce:
55:64:41:a9:6b:15:47:d2:12:a6:6d:a9:79:6c:e6:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:47:15:D5:29:AC:98:63:26:7D:35:51:F1:8F:CD:A4:AF:C9:BD
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:01:f1:03:80:c7:11:1e:4c:cc:b3:10:06:f9:53:7a:7f:88:
38:d5:e5:cc:8f:8b:ae:88:19:f6:6a:62:68:3f:40:62:ba:56:
a7:33:26:e3:c6:fa:e1:65:42:65:a0:66:5c:54:da:74:26:49:
16:31:4a:7f:72:c7:92:f1:1b:f2:75:2f:e6:bc:a1:d8:0f:c9:
6c:76:bd:8b:4e:97:de:6c:80:2b:67:bf:a3:69:d8:d9:e9:2e:
f0:48:68:b4:99:07:bd:b2:e3:ba:4c:ad:fe:b5:35:d4:e5:8f:
ae:9e:83:58:0c:4d:61:76:46:24:c4:01:dc:36:74:59:35:a7:
3e:ba:27:0e:fb:2a:64:39:f7:3e:33:11:9d:0d:e9:aa:7a:94:
ba:46:14:45:33:7c:fc:ac:94:cf:ff:e4:0e:5a:1a:2e:c7:f4:
6f:56:2b:21:26:06:6c:b7:68:53:58:c1:00:e6:21:97:6d:76:
18:cf:56:83:77:32:4c:06:bf:80:dc:1d:de:45:2e:02:9d:51:
7f:a4:0c:9e:1c:bc:ac:fa:41:38:8b:2c:1d:00:56:f6:4c:04:
5b:c3:05:17:49:b6:a8:c4:ab:38:de:a2:d6:15:cf:b6:ef:fc:
80:37:d2:3b:5c:81:f6:1b:30:cb:ef:98:ea:ac:67:7f:43:90:
cb:fb:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:20 2026 by rpki-client