Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: LjwksDTf+XYkhiQXMet+e3g7mcMg7Y9W/gpYqgXCnG8=
Subject key identifier: AC:EA:78:7B:B2:B9:4E:DE:31:5E:61:BE:BA:DB:A9:DB:29:82:B3:8A
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 019D98F4B291F324ABBF0CD0DAA692D97D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 129D
Signing time: Fri 17 Apr 2026 01:01:06 +0000
Manifest this update: Fri 17 Apr 2026 01:01:06 +0000
Manifest next update: Sat 18 Apr 2026 01:01:06 +0000
Files and hashes: 1: AWc9W3f7WW6fRyUj-qew2yWym0Q.roa (hash: CKhXDKmYEvv2kevwS8ScaNP/c7Fe+e5j3kS5/wFaq50=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: Nhgq7UaC3riHAjJHxH7jthK6iYaBeYLw8NeZueXZSgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b2:91:f3:24:ab:bf:0c:d0:da:a6:92:d9:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Apr 17 01:01:06 2026 GMT
Not After : Apr 18 01:01:06 2026 GMT
Subject: CN=acea787bb2b94ede315e61bebadba9db2982b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:5b:cc:63:9d:cf:2a:27:6f:b2:1e:54:b3:
e9:8e:a2:68:ad:95:86:b5:43:d1:ee:51:eb:b2:15:
f1:89:15:6f:91:32:25:20:2c:23:15:66:ba:9f:77:
22:b7:e0:a0:af:7d:a2:ba:7e:a2:a4:f5:cc:a9:59:
90:a8:8e:51:a3:b8:fb:16:5d:aa:4e:2f:59:19:d6:
47:b2:ff:98:d4:3a:06:51:8a:8c:34:31:ef:5e:4e:
69:1b:94:bb:83:ee:5c:b6:db:0d:93:b6:59:9a:f6:
de:f0:1b:3c:33:4a:b2:c4:f3:94:9c:a0:9f:11:50:
40:14:b6:68:d5:07:2a:db:51:f4:4f:17:53:2b:00:
2e:40:96:4a:f3:66:86:54:39:b6:eb:69:04:07:23:
b1:83:b1:11:3b:7e:8a:d9:5c:3f:70:81:60:2e:69:
dd:7d:48:03:0c:54:60:45:99:24:0d:fc:ed:64:23:
e8:71:b4:84:7c:ff:08:5e:a5:5e:cf:11:96:a3:5a:
51:2c:28:c7:72:7c:c0:3a:60:70:ea:d8:7e:d0:a9:
9e:50:f4:8c:bf:52:ab:88:a3:de:db:2c:7b:6f:9f:
7c:8b:b5:f9:7b:29:6f:34:00:f5:c7:a7:12:26:76:
b6:d6:34:5e:83:f5:2e:56:9d:94:6c:bb:5f:e4:99:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:78:7B:B2:B9:4E:DE:31:5E:61:BE:BA:DB:A9:DB:29:82:B3:8A
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0a:d1:8c:19:36:1d:2a:34:92:3e:35:6e:6a:12:59:bf:57:
a2:a6:04:f6:2c:3c:5e:7f:3c:05:a9:af:be:85:35:0d:e0:78:
ba:87:fa:2f:dd:8e:c6:12:c6:6e:e0:d3:95:61:70:4d:dd:52:
2a:fd:74:ec:78:4c:93:a5:d4:d8:e0:aa:0d:af:7d:f8:da:35:
b9:2f:bc:c3:78:16:40:bb:b4:b0:d5:36:b2:c0:e6:e6:66:e1:
d6:72:da:c0:de:05:fe:d8:79:be:d3:39:68:4e:3a:01:72:6f:
c8:3b:14:54:d7:bd:74:56:75:56:dd:cd:e1:a2:ad:b5:3f:f9:
c5:4b:07:87:90:77:45:a3:6d:20:67:ca:ef:d4:3e:b3:16:10:
9b:e3:45:06:2e:e0:01:c1:ac:90:39:0b:a3:19:66:f2:b0:34:
6f:90:1d:65:a7:ac:7a:39:dc:77:ec:d7:b3:d5:19:45:e8:9d:
a4:36:15:fd:81:09:62:1d:d6:e6:e7:e4:7f:90:10:fa:01:4d:
ec:23:0b:78:4c:fa:34:1f:6d:88:0d:59:18:e1:cc:b8:c6:4b:
95:e5:1a:d0:ce:48:ba:b9:c2:ce:1e:0b:af:17:8a:b0:cb:dc:
b2:0a:a2:d6:77:f6:35:0e:13:72:dc:e5:2f:7b:b1:44:9a:58:
ab:40:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:59 2026 by rpki-client