Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: lHkH5Tm8mWvt9o/Ew2HWJ/BI47gx1gfiQKJb4Z1r9Zc=
Subject key identifier: 74:75:AA:A0:09:7C:ED:68:59:20:96:E4:57:54:A9:72:70:87:F9:3F
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 019CAB6B86EAA909E713EBF57E47FC54A389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 1222
Signing time: Sun 01 Mar 2026 22:01:16 +0000
Manifest this update: Sun 01 Mar 2026 22:01:16 +0000
Manifest next update: Mon 02 Mar 2026 22:01:16 +0000
Files and hashes: 1: AWc9W3f7WW6fRyUj-qew2yWym0Q.roa (hash: CKhXDKmYEvv2kevwS8ScaNP/c7Fe+e5j3kS5/wFaq50=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: BSzduCaTyMzy8/fnyg1VmhybDIUL423gg5pSNQdJWoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:86:ea:a9:09:e7:13:eb:f5:7e:47:fc:54:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Mar 1 22:01:16 2026 GMT
Not After : Mar 2 22:01:16 2026 GMT
Subject: CN=7475aaa0097ced68592096e45754a9727087f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:ba:e4:53:12:12:f3:c6:1b:04:d2:77:a5:
a5:f4:37:cb:0d:04:be:6e:b1:73:fa:65:6a:0e:f6:
4f:74:17:d4:7f:41:8a:51:90:36:81:11:53:78:69:
d1:fd:bb:0b:7b:79:ef:68:8c:d9:de:e7:2d:d2:f6:
1b:37:ec:db:93:f9:23:ed:21:62:17:b0:6d:f4:78:
2c:62:db:50:b5:40:0d:cf:10:d2:29:9b:27:ca:34:
32:c2:6d:57:75:11:0e:d8:56:11:8f:90:2e:5f:92:
fe:cd:52:fb:fd:0a:3e:fc:ce:25:86:6d:37:26:be:
bc:fb:0a:4c:fc:21:35:80:19:e2:35:f4:1d:4e:eb:
42:b8:e2:c6:76:57:4e:75:a7:e4:a7:02:d5:c7:a3:
f9:de:7f:6f:7f:27:28:92:09:09:8d:93:f0:86:6f:
e3:e0:18:35:e2:8a:ee:64:fd:f7:a7:c6:7e:76:aa:
e9:88:60:75:37:f8:eb:91:74:98:e7:04:03:81:ad:
70:b5:2d:24:a5:d7:8a:01:83:e7:20:51:13:c3:e8:
c1:ce:32:25:13:29:a3:2c:ac:b7:b2:c7:4d:41:ac:
52:78:b3:f0:07:29:04:79:48:db:03:bb:67:94:e3:
82:c5:9b:ab:28:e8:e8:b2:0f:9c:2f:1a:39:bc:0e:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:75:AA:A0:09:7C:ED:68:59:20:96:E4:57:54:A9:72:70:87:F9:3F
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ac:93:b7:b0:eb:12:92:67:7d:66:a0:05:fc:83:24:3a:4b:
0b:83:98:1b:da:3f:50:7f:1c:5e:8d:ca:86:63:36:82:f6:1e:
b5:a4:a2:6b:86:b2:08:6e:44:83:92:63:83:9f:08:6e:a1:27:
e7:2b:5a:5d:27:8c:20:9d:60:55:2c:90:2d:a5:66:49:95:7f:
8f:23:44:34:da:b4:c9:bf:04:3e:de:cb:f4:64:1a:05:29:fd:
05:a0:32:45:0f:b5:f9:47:a3:0a:af:be:16:64:31:40:69:09:
61:2a:46:04:f5:aa:d8:59:b0:0b:71:d7:09:15:5a:f8:80:86:
f9:c3:9f:2e:df:24:17:16:ae:47:04:0c:af:85:bf:3a:95:dd:
07:bb:9b:9f:ee:9b:ca:67:dc:b7:8e:15:4a:cc:28:a7:4a:58:
0f:6b:78:da:df:00:1f:18:11:d5:c1:42:8a:d8:b5:51:50:46:
86:1f:8a:b8:67:49:55:d3:c1:19:c1:ad:df:66:7a:1e:0b:95:
f1:a9:9d:ce:63:0d:f5:f4:d3:b1:cc:59:08:54:a6:20:01:37:
93:46:00:e8:0a:70:34:13:ee:13:b2:94:a9:ce:2e:84:45:57:
59:67:8e:66:34:16:6a:59:8a:3e:33:66:33:06:e0:2d:d2:51:
2c:21:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:23 2026 by rpki-client