Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: GjbeLkkIyO1LLpNQ0xgruEF3YpWrqvCFMSQnwOYpjfg=
Subject key identifier: 88:29:9A:7C:7D:64:B5:DF:02:A1:92:AC:1C:18:2B:C9:44:43:07:45
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 019D2A3BA72940B192ABDF22AEC94D1536E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:00:45 +0000
Manifest this update: Thu 26 Mar 2026 13:00:45 +0000
Manifest next update: Fri 27 Mar 2026 13:00:45 +0000
Files and hashes: 1: 6V_G9gsVnZgMxjUsmipYSTZCa_Q.roa (hash: 8vwGqAEHUA9stliHzrXfudIca0hLWVZRYgeWkRbQdXU=)
2: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: OfzIfTmqX/k5ZBlOpiRdketP1K1QCUc2K4Er3+Zmwhc=)
3: jwxhR7P3jbNHcQy0YutNaHO3jkE.roa (hash: i8m3hyHSA+Y/TnrAHEYaj/Stv9BCwcsKeOlhfB0mCAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:a7:29:40:b1:92:ab:df:22:ae:c9:4d:15:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Mar 26 13:00:45 2026 GMT
Not After : Mar 27 13:00:45 2026 GMT
Subject: CN=88299a7c7d64b5df02a192ac1c182bc944430745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:25:75:2d:1a:40:30:c7:83:60:5a:e7:ed:
fd:1d:f5:14:14:f0:a3:83:f7:31:f4:b7:50:be:65:
eb:e4:6e:67:50:94:13:e4:9a:56:07:37:db:8b:ba:
71:57:b2:05:66:03:95:4e:d2:d5:4e:ad:9b:4c:10:
39:bf:f4:64:b8:a5:e9:88:3a:cc:6c:80:13:2b:2d:
bd:b7:93:4b:08:97:a5:55:0b:1a:e1:fd:2b:5b:61:
cc:fe:eb:d6:16:14:ef:12:fb:0e:8f:11:7c:da:10:
79:8e:ee:11:a0:a1:68:c7:0d:27:80:7a:bc:fd:44:
0a:50:aa:26:b3:69:42:65:77:97:b4:33:60:2a:7d:
cc:44:b8:59:90:27:2e:b8:c5:ed:48:c1:f5:2f:8e:
b2:05:f0:66:11:72:8b:4a:de:a4:07:0c:77:8c:47:
b0:ae:0a:4d:e0:72:68:8c:99:2a:44:e8:46:43:9f:
75:72:82:45:90:8a:bb:05:9d:75:89:16:da:4f:04:
88:57:3c:ab:d8:78:54:bc:ed:88:68:90:56:1a:bf:
e3:c0:87:01:ee:e7:79:65:28:ef:c8:d0:47:ec:74:
6b:c0:16:1f:68:2c:15:fe:f3:4d:f3:79:11:33:62:
49:b3:d1:76:77:ec:34:e0:00:99:eb:7f:f2:ac:62:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:9A:7C:7D:64:B5:DF:02:A1:92:AC:1C:18:2B:C9:44:43:07:45
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:94:77:8e:c9:90:63:4a:3f:ee:a9:81:49:6c:df:d2:d2:88:
e7:f7:ef:c2:33:23:a9:d2:b4:6f:71:4d:bb:88:7a:0f:d1:8d:
af:be:60:a9:de:4c:15:3e:c5:1e:94:9a:b0:26:bd:4c:61:b5:
02:82:a3:55:96:e5:ad:6d:c6:82:61:a1:35:be:23:9a:d7:9b:
1e:49:32:d8:7c:bf:e4:73:2b:90:cb:d6:7b:7f:11:45:72:88:
7c:b1:47:6b:c6:7b:ca:4d:88:1c:8e:14:35:a2:1d:4f:e9:0b:
04:f7:a4:82:61:a5:d4:bd:4f:d1:56:26:e5:30:16:ef:60:34:
cf:8b:40:05:35:fb:8e:78:ff:33:c9:51:88:02:58:56:3a:e5:
cc:3f:e1:c7:5c:68:e0:a8:84:7f:d8:b1:43:b0:a1:a3:82:9e:
11:b9:46:98:ec:eb:2f:71:04:2d:92:6c:e5:86:31:98:f3:14:
e9:59:8b:5e:d9:5e:17:1a:92:59:8d:10:b4:80:c1:53:cd:fe:
d7:3d:43:f8:1b:ba:14:9e:f8:c0:64:7e:94:ca:6b:1f:55:b6:
b2:26:43:74:97:63:ac:09:c9:f8:b9:7c:4f:a6:41:62:42:1f:
6d:c7:2e:94:11:72:2c:84:81:5e:49:2b:6e:8a:62:46:93:e5:
0f:32:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:45 2026 by rpki-client