Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier: QpMGkSwwBOh3e9zHtij8ahbkUWkuSNcMivBvzZYDvPg=
Subject key identifier: 89:E0:D5:16:6B:0D:FB:E2:44:CA:41:65:24:D2:2C:3A:A1:30:7C:C3
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial: 019CABD9893E5552BE692054C04F62666EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number: 0CB1
Signing time: Mon 02 Mar 2026 00:01:26 +0000
Manifest this update: Mon 02 Mar 2026 00:01:26 +0000
Manifest next update: Tue 03 Mar 2026 00:01:26 +0000
Files and hashes: 1: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: wDBhC5FIwunHk/opmpr+UBEYMQ9ux4ql1cwAiD5SxhU=)
2: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (hash: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:89:3e:55:52:be:69:20:54:c0:4f:62:66:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
Validity
Not Before: Mar 2 00:01:26 2026 GMT
Not After : Mar 3 00:01:26 2026 GMT
Subject: CN=89e0d5166b0dfbe244ca416524d22c3aa1307cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:a1:a5:4c:f6:f8:ec:01:ce:2c:e1:65:1b:
50:e9:d2:e0:d8:67:38:c6:70:01:c3:ff:93:8b:b5:
b6:f8:8c:2e:a0:b7:0d:4e:c8:d1:b6:d3:7c:fc:0e:
c7:fe:f9:07:30:f2:c2:42:b2:26:d2:8d:c4:51:9b:
76:4b:7d:d0:24:1a:a3:93:4a:53:c9:dd:e4:da:ce:
13:b9:a7:84:3d:a9:be:1b:71:ee:10:17:1d:f4:51:
7e:bd:88:cc:ed:f9:ac:ac:1c:e8:e4:05:87:d3:b1:
8f:9d:55:4b:96:72:e1:48:10:9c:6f:6d:cd:40:86:
fc:9a:6b:87:fe:ba:15:f4:fb:47:c8:73:f0:e1:94:
bb:81:50:c6:d5:0a:34:a2:79:4f:20:00:75:bc:89:
9a:5d:ee:82:10:63:1f:9a:2a:7d:c4:32:e1:e3:ab:
58:45:8c:40:ad:7d:96:a0:71:f1:2b:c3:1d:81:53:
b3:0a:5e:a9:3c:ba:ce:5b:ae:ac:1d:06:df:b9:19:
1d:73:7d:08:4e:bc:bc:40:7c:60:b7:e3:bb:78:19:
0f:97:86:0a:21:5c:d4:7b:86:f7:a8:33:13:56:39:
68:09:91:3d:cb:81:45:31:9b:54:e1:17:2a:a1:91:
66:5a:a1:69:27:56:20:b2:e9:02:f9:fb:86:fa:9b:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:D5:16:6B:0D:FB:E2:44:CA:41:65:24:D2:2C:3A:A1:30:7C:C3
X509v3 Authority Key Identifier:
keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:df:6a:1e:28:4c:c0:ab:44:a7:72:60:1a:1e:cd:db:72:51:
6c:cb:49:8c:37:24:91:50:79:41:b2:51:54:52:6c:4c:3a:66:
a8:74:b3:5a:7e:2c:73:ac:1f:ab:b3:5f:fa:3a:5f:4e:71:69:
ac:be:40:4c:c5:f3:57:80:d6:46:cd:bc:48:b5:71:e8:2d:8b:
66:c0:d1:d7:69:e4:18:5c:7c:8a:75:28:ed:54:09:d3:66:cf:
1e:8f:98:0b:5a:ac:24:46:93:63:0c:07:06:97:8e:e2:c0:39:
da:54:e5:ae:c2:eb:24:6b:93:ed:28:af:a1:99:69:b0:a6:56:
cf:7b:b7:59:2b:ed:03:d7:07:64:8e:76:93:3b:0b:3f:1f:22:
db:41:8f:5c:fb:9a:47:05:fa:c7:b4:53:6d:aa:ad:84:4d:c6:
1e:01:cc:62:3a:98:84:21:d4:cc:d8:ea:d4:bb:c0:0c:c7:00:
2b:3b:5f:4a:98:b7:43:a5:9c:84:dc:c9:00:ce:30:36:c4:85:
97:ec:ba:b3:77:ab:1d:6d:14:35:b9:30:ce:65:ff:0f:52:da:
f6:0d:d5:b7:6f:93:ea:af:80:b2:e2:32:fb:aa:01:87:1f:4a:
d5:63:4a:c5:15:26:0e:7f:4d:ff:4b:b3:73:c5:83:87:ca:16:
42:e4:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:33 2026 by rpki-client