Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: O3SI1p0k+nWB2Apod9sBCWnsU7XuWILLvB9Ozt7uqYM=
Subject key identifier: B4:64:F2:B8:EC:7F:43:1E:AE:03:AB:04:E5:D8:7E:09:A4:A1:AF:02
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 01A12C1FD5ED24EEECAD5E15B6D75132347F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 03FB
Signing time: Sun 11 Oct 2026 18:00:46 +0000
Manifest this update: Sun 11 Oct 2026 18:00:46 +0000
Manifest next update: Mon 12 Oct 2026 18:00:46 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: yiKjsk4ohdYqHbqgRD7DIxWV67ZsCrAhYUEV/+faj/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:d5:ed:24:ee:ec:ad:5e:15:b6:d7:51:32:34:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Oct 11 18:00:46 2026 GMT
Not After : Oct 12 18:00:46 2026 GMT
Subject: CN=b464f2b8ec7f431eae03ab04e5d87e09a4a1af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:d9:20:a8:6f:46:fb:d1:eb:90:05:d2:5e:
f7:98:5c:b3:f9:9a:9f:cd:dd:65:e0:f7:8b:97:8c:
54:4b:3e:f0:9d:25:4d:15:bb:ed:ec:20:ae:8e:dd:
11:65:14:91:7b:74:27:a1:5d:a2:7b:bd:63:6d:e6:
6d:78:bb:6e:2a:c2:11:a4:05:fc:dd:9b:3a:07:12:
ff:eb:c5:79:f8:66:32:0b:c8:c6:be:29:f6:ab:d7:
f6:e3:b8:da:98:fb:b7:5e:37:9c:88:aa:d8:0b:54:
18:56:74:48:69:3c:59:be:a8:c2:f2:a6:46:35:2d:
82:88:7d:9a:f0:ba:f7:ae:59:e3:9a:54:b5:55:95:
d9:e4:e4:b8:0d:99:a1:bb:a6:67:e5:9c:47:88:ec:
a6:39:a0:48:85:bc:96:d9:ed:9b:41:81:41:df:35:
5f:ef:df:8b:4f:67:2f:c4:48:7a:4d:d5:24:35:a0:
bc:f5:dd:86:a6:8a:f4:d4:15:93:81:8d:8f:c2:1d:
5b:8f:d8:2a:2d:52:c0:d3:d7:c2:c5:9b:94:8e:09:
f6:dd:c8:e0:71:ae:05:58:3a:03:17:e7:2b:70:6a:
99:50:0a:81:c8:e0:71:3f:eb:ce:91:45:de:23:68:
2e:e1:fe:9d:e3:92:8d:33:b3:93:0f:7c:08:9b:f9:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:F2:B8:EC:7F:43:1E:AE:03:AB:04:E5:D8:7E:09:A4:A1:AF:02
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:8c:98:62:05:11:41:13:75:c9:3e:b6:ad:c5:d1:f5:ee:
f1:d6:a3:4d:18:3a:9a:d4:43:f6:34:61:c6:2f:0f:81:47:38:
90:49:8d:ad:c2:0c:8f:0a:ec:de:fa:8c:ca:44:a9:c4:3e:90:
b7:44:4f:72:2e:3d:c4:81:4e:44:4d:07:2a:d5:da:c9:11:09:
80:da:da:76:ad:9b:ea:1d:ff:f2:a9:c8:2a:af:64:25:6c:1b:
1e:eb:f5:fa:64:2f:11:bf:ea:e3:af:ed:e6:d5:5b:ba:dd:6a:
47:b4:7f:54:5a:0f:26:08:10:5a:f6:1d:21:59:24:79:56:5c:
3d:97:91:71:7b:41:5a:f4:af:e2:78:6e:8b:cb:45:f3:6f:d1:
28:e6:0b:4c:0c:00:3f:3a:d4:70:62:33:10:10:6e:a6:7f:5a:
0b:7b:c7:d5:58:11:4d:db:71:a4:6c:d6:0e:d3:72:62:22:81:
ec:af:e9:c6:1d:f3:62:a7:8c:20:fd:78:c2:33:65:9e:fb:6d:
32:af:47:80:c4:1e:82:8a:69:76:de:01:bb:9e:07:d0:10:9b:
3a:18:a2:02:eb:2e:11:9e:73:03:60:b3:59:04:e5:69:42:97:
d4:3f:7b:03:b4:de:2b:a2:f6:07:81:8d:ab:12:dc:90:90:58:
6f:7a:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:41:35 2026 by rpki-client