Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: kPmrQiqsTTUqEzLYSrVHGcIcHfmps6zYQfq1/LcTGUY=
Subject key identifier: 01:1B:23:8A:2D:E8:65:11:4B:EA:AC:07:1B:A5:AE:95:44:F5:7D:71
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 019D27048C20C4F65EE889DA9173C79674AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0956
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: QrmPFrsdcFZqfwzlIip0jrkO6AJ56UX3WxRO84Gme7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8c:20:c4:f6:5e:e8:89:da:91:73:c7:96:74:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=011b238a2de865114beaac071ba5ae9544f57d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:c8:51:26:94:ca:88:c2:6b:b5:bd:01:07:
eb:31:b8:b6:24:e9:2d:be:c4:61:7c:42:a9:37:42:
be:67:d8:02:98:09:c7:8f:0d:f9:9d:80:2f:af:f7:
06:c9:78:65:e6:39:06:bf:03:2d:c1:01:1d:f6:37:
9d:3a:1b:4e:1d:7a:28:77:63:83:b7:14:35:82:dd:
94:61:70:81:9c:cb:b0:20:2e:6e:b4:05:ae:22:7e:
a6:8e:86:3e:c3:f9:fe:63:bf:c4:21:61:dd:f2:67:
89:a8:b1:96:40:00:98:54:9c:42:13:cd:4c:68:b1:
5b:63:bf:d1:7c:76:84:9d:ca:d7:be:e9:b5:07:41:
2a:43:87:3d:ec:9c:61:bc:88:bb:e9:ec:83:f2:03:
dd:a2:fd:ae:c4:40:fd:e4:87:dc:cd:4d:3c:f8:26:
2c:4c:d8:da:47:8a:40:72:2a:5b:1d:8d:08:d0:d0:
83:e3:f6:f2:d2:03:9b:06:fa:3a:6e:84:c7:3d:fa:
12:08:27:1a:3f:4c:bf:9e:88:1f:0c:bc:bb:a8:24:
b7:55:46:59:3b:54:94:64:54:ce:78:c8:1d:24:99:
41:e4:2c:09:36:e9:b9:f3:0a:2c:a8:7e:4a:79:28:
2d:9d:15:cb:b2:29:98:64:30:35:e5:3a:35:9b:43:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:23:8A:2D:E8:65:11:4B:EA:AC:07:1B:A5:AE:95:44:F5:7D:71
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b8:90:af:3c:24:09:10:57:ef:a9:6e:70:5b:6c:1d:e1:c1:
f2:d2:18:8a:50:58:f2:b7:1f:ac:6c:59:6d:0b:d5:7a:fe:61:
c7:95:c1:24:ab:d1:ed:01:bf:f1:d3:8b:84:f3:c6:06:6c:84:
bb:16:96:7c:d0:02:3f:c6:51:37:4e:0f:1f:01:64:e2:cf:dd:
81:d6:f8:73:4e:f0:e5:89:25:92:f8:9f:2d:fe:bd:82:1c:96:
25:59:36:80:2d:c5:fa:ed:a8:b8:ed:dd:67:a7:27:dd:f1:f0:
4d:71:35:8c:dc:b6:72:b0:15:fd:9e:63:b6:9f:89:bb:93:dd:
ac:e2:de:02:e5:cf:c0:36:6c:99:b7:0b:67:d2:cd:54:b5:d3:
3b:f8:5f:18:07:a7:15:ab:63:9d:24:38:2c:2f:b5:5d:05:04:
f6:f1:17:3c:21:36:86:49:97:ca:3c:5f:c5:1b:c9:0a:a9:c5:
c0:e6:ae:f6:25:39:51:b1:2e:70:84:32:e5:d3:65:a4:77:4c:
72:9e:88:4f:b9:a5:2d:c1:5e:75:f3:41:b9:2c:ca:09:27:54:
bb:b3:20:23:40:3a:83:25:0c:b3:af:09:95:3e:40:ec:72:b9:
ae:35:63:fe:f6:66:69:04:ec:11:cd:bf:31:d1:08:b0:84:d8:
ff:16:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:26:29 2026 by rpki-client