Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: DbYAUMUwLKnou0CA1XnzV0wkQgeDKwg4Huy4jpYr+uk=
Subject key identifier: 28:88:86:FD:EE:64:AF:AC:87:2F:34:6C:5F:4D:36:D1:DE:78:39:40
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 019D273AD1DDA3E39AED3CC7F899E65559FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 0B52
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: eObhnSgoClkZSg4OphnzH9Kih4s.roa (hash: suuBBjjjYm5X0ydrhy9hau3hPxlzgCy0q7n74RUKwk4=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: qmM4nJQ+/HzuVI9Jcd2acvS6VyRQKrLbV1zyDcPtgzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d1:dd:a3:e3:9a:ed:3c:c7:f8:99:e6:55:59:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=288886fdee64afac872f346c5f4d36d1de783940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:e6:83:ea:e1:b3:6e:8d:0e:cd:97:3a:ad:
80:4d:f3:82:fc:6f:b6:c5:09:91:c3:4a:f4:42:81:
c5:cb:64:df:62:c1:f0:4e:19:1c:ca:e5:e1:c3:e2:
38:eb:77:63:94:59:57:01:fa:9d:96:a8:e1:4a:70:
2e:fb:a5:46:5d:a9:d5:a6:20:e8:56:03:5a:89:d7:
b2:8e:81:4f:c8:a7:a8:61:38:36:06:b1:0f:0e:f3:
13:c0:11:35:fe:02:64:b2:b9:83:1f:43:5a:6b:fc:
54:08:a3:22:b6:a3:4b:3e:e4:a6:0b:03:8e:c5:38:
e8:e9:36:dc:85:4e:ee:b3:6e:7c:c1:32:09:5c:ca:
3e:28:a7:74:2c:a6:3e:0c:cb:fd:34:a8:55:74:f9:
4e:75:97:e0:39:f2:71:41:3d:06:42:38:52:ab:41:
ed:fa:4d:99:09:08:fb:f7:44:f6:b0:44:cc:f1:d1:
bb:05:3f:00:0f:a8:16:b4:89:e8:44:0d:f6:83:a5:
85:0c:fc:ca:71:9f:87:85:8a:ed:6e:69:a6:67:d4:
4e:71:10:f6:49:c9:eb:a6:09:a0:5a:47:7f:70:b3:
36:58:b7:6e:d2:fe:62:c7:76:e8:f0:1e:74:ed:f3:
22:96:09:a1:ab:18:3c:5f:06:b4:a6:29:51:3c:e5:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:86:FD:EE:64:AF:AC:87:2F:34:6C:5F:4D:36:D1:DE:78:39:40
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:66:36:32:a1:36:c0:57:2e:a8:5a:85:de:3b:33:77:d3:94:
80:d4:87:39:39:22:76:b7:79:72:25:78:11:09:38:72:43:fc:
1f:c3:8b:ec:bb:08:2f:00:93:61:49:2c:5c:7d:05:95:77:78:
b9:55:b9:73:9c:b4:c4:9d:da:39:7e:ef:9e:ea:12:f6:a3:d7:
7b:8e:95:88:0a:33:7a:fa:ba:43:c5:d7:c2:2c:1a:a8:5e:71:
96:19:54:86:ed:4e:89:cd:82:56:a7:36:26:c4:66:e9:fa:e4:
a1:3e:b9:31:63:c9:92:21:f3:4e:89:29:ec:fe:91:81:3b:a7:
05:cb:ca:22:30:61:57:73:17:10:de:97:7a:ff:97:a3:4d:28:
d7:9e:9d:5d:1b:79:cb:8f:cd:b3:ca:31:31:f7:de:68:9e:cf:
0b:8f:ae:3a:92:8e:40:4f:e7:c8:ae:f7:02:28:18:11:d6:f3:
eb:71:c8:f0:71:77:98:80:f6:1a:bb:47:bb:8c:cd:ea:a5:f4:
42:1a:8b:9b:c7:d2:fc:0c:e4:61:47:d9:d2:47:47:10:9b:31:
f1:d5:0d:6e:54:b7:12:ab:c3:c4:e2:d1:74:f9:0b:e5:74:fd:
3c:84:fa:9b:ad:c8:1c:60:dc:65:ec:de:52:c7:d3:60:8c:44:
7a:90:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:08 2026 by rpki-client