Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: 0mT5uLHYVa8KR+uocCbkiJ69I3lpAZ+GkeamJTKuLqQ=
Subject key identifier: 27:C1:D8:CF:95:0B:32:FC:41:BF:C2:03:C6:7D:8D:63:46:F2:31:94
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 019CA9EB790CB30236832110A843FB2B476D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 13F3
Signing time: Sun 01 Mar 2026 15:01:47 +0000
Manifest this update: Sun 01 Mar 2026 15:01:47 +0000
Manifest next update: Mon 02 Mar 2026 15:01:47 +0000
Files and hashes: 1: IokgSudl3AkR5yh01t-OFzPg4qE.roa (hash: KcJVO/wfX/Xcbn1mfQvmOj8I+t/hByN+WDPLWTnqUfw=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: xPkRPuSdUFXo3IwCaTEUyWRw1NqOGf8zVA6jy19KH6k=)
3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:79:0c:b3:02:36:83:21:10:a8:43:fb:2b:47:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Mar 1 15:01:47 2026 GMT
Not After : Mar 2 15:01:47 2026 GMT
Subject: CN=27c1d8cf950b32fc41bfc203c67d8d6346f23194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:f8:b0:65:cb:cf:dc:eb:15:60:2f:bf:f8:
b6:aa:fa:98:f7:ec:c9:e7:b1:e2:fa:3d:14:58:a8:
90:14:6b:e4:88:eb:53:b3:f0:6b:66:b9:6c:75:41:
1e:0f:4e:77:49:3b:46:0e:2b:34:d7:c9:94:30:a7:
03:db:52:a3:dd:67:eb:03:fe:12:fe:94:85:40:ed:
3b:51:ff:ca:84:db:1d:ec:74:d1:f3:0e:71:dc:8b:
82:33:39:58:ec:55:72:38:f6:0a:b6:c4:0b:34:4d:
f7:7b:b3:6f:10:1c:7f:c9:a3:a7:03:67:a5:0d:b3:
80:66:55:40:aa:0f:aa:e6:88:c6:1a:fd:f1:1f:b7:
cb:aa:11:ba:b1:cb:32:1e:23:ff:cd:2c:d4:0c:44:
5f:88:6c:2f:7f:0a:7b:45:cf:cb:9b:d3:f1:13:44:
7c:d3:34:74:64:64:64:42:e7:73:39:fb:84:9d:bd:
1a:69:4a:28:bf:6e:b6:4f:fa:c2:ee:bf:d6:ee:39:
11:19:b5:7a:7e:c1:cf:4c:5c:15:8e:b3:68:77:9d:
c3:c7:38:70:18:16:14:ba:30:ed:80:fb:41:62:50:
a0:99:1e:df:46:31:cc:06:f5:20:a6:43:1a:4d:e5:
4b:8f:54:0b:d9:ee:7e:7a:ad:0a:05:17:3b:28:5d:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:D8:CF:95:0B:32:FC:41:BF:C2:03:C6:7D:8D:63:46:F2:31:94
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b1:c8:74:e9:16:e9:f3:96:65:49:1e:37:95:7c:d8:37:dc:
bf:11:4c:ed:6e:82:b0:da:26:2c:f8:28:3c:31:86:50:83:96:
4e:55:c1:4e:6d:e3:33:69:fc:81:18:3f:5e:ac:fe:75:84:61:
37:ed:2e:7a:7e:3c:6e:7c:4c:b2:55:13:41:0b:ed:5f:46:77:
97:10:5d:33:34:be:90:1a:d9:cf:99:8f:3f:c3:ff:2d:36:7c:
24:7b:52:19:0a:3e:fc:0a:8e:29:0b:ec:3b:1e:05:bb:3e:2a:
02:fc:22:72:04:21:91:cb:7f:c3:6e:b5:f9:08:fc:8d:bc:e5:
df:fb:da:14:bd:5f:1e:70:e1:99:82:fa:6a:2e:80:4c:2b:e0:
af:2f:7e:2b:45:77:27:66:1d:2c:91:25:27:12:fd:b5:9a:4a:
ef:19:b4:ed:1e:34:91:c4:e6:e1:40:e5:e7:f5:1e:57:25:41:
89:90:0b:29:9d:05:72:24:1f:f0:c6:99:ef:aa:b0:9c:7d:f2:
7c:29:dc:3d:73:4c:04:73:58:e7:dd:45:73:85:2e:c8:16:b1:
31:50:47:0b:da:7a:a9:d1:d6:54:18:95:1c:0f:c3:91:65:4a:
3e:31:fb:46:a0:1e:5d:94:f5:9f:9a:a4:1e:4f:1f:92:98:27:
cd:51:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:23 2026 by rpki-client