Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: UFRyyDLceUjUmekXPtYsAXIqv2pPbJwTfV5xsjdE5DE=
Subject key identifier: 3C:25:04:A5:20:9A:45:04:17:2D:DA:DB:65:E5:0A:A1:29:03:3F:B1
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019D9E88CFF5003A30243788673B47BDD691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 0224
Signing time: Sat 18 Apr 2026 03:00:59 +0000
Manifest this update: Sat 18 Apr 2026 03:00:59 +0000
Manifest next update: Sun 19 Apr 2026 03:00:59 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: L3zu6I/yXZkGlAHXM6lV6gZJgPeHi/4YNMVXlVEowzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:cf:f5:00:3a:30:24:37:88:67:3b:47:bd:d6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Apr 18 03:00:59 2026 GMT
Not After : Apr 19 03:00:59 2026 GMT
Subject: CN=3c2504a5209a4504172ddadb65e50aa129033fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:7f:61:03:9d:9d:83:c8:82:b6:05:4f:04:
4c:e0:b4:02:94:f4:76:f3:e1:40:7d:ef:ae:a3:a8:
0b:30:25:ee:51:2b:25:b6:8a:3e:cd:12:6e:15:bb:
ba:25:a0:f0:fb:6c:66:9e:7d:92:25:46:40:d9:ad:
01:5b:82:b0:32:97:be:d6:53:8d:c6:71:cc:7f:0e:
d0:25:01:b4:9e:0e:43:a4:3d:bd:83:c9:97:db:ab:
35:85:bf:5f:a2:b7:70:99:1e:ab:07:c4:59:71:e9:
1b:9b:6d:68:61:22:ab:1e:f0:4f:6e:ea:ed:06:1f:
7a:c0:6d:3b:78:3f:9d:49:55:37:a3:57:f2:a5:dc:
b2:12:ba:ab:c1:a3:1f:6d:b6:93:88:20:47:8c:05:
bf:d0:38:8f:e9:95:29:05:cd:fc:b6:96:c1:17:f5:
cd:dc:05:94:a3:0c:eb:78:e2:aa:ea:ee:ba:99:99:
df:10:c9:81:5b:75:ff:35:97:a2:cb:85:17:cf:a9:
14:e9:08:c2:52:4f:b7:23:e7:01:91:78:69:a1:09:
c0:b9:86:23:4b:e1:28:b5:27:bd:21:a1:77:78:55:
b6:81:d3:a1:8c:00:3c:ad:55:9f:25:cc:ee:ae:58:
66:c3:7c:20:cb:ed:2d:61:34:dc:d1:6d:32:a3:bf:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:04:A5:20:9A:45:04:17:2D:DA:DB:65:E5:0A:A1:29:03:3F:B1
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:80:51:d4:b1:14:42:70:2d:8c:33:af:f9:2b:2e:82:fb:11:
a1:35:31:dd:55:f7:fe:91:e2:44:20:61:89:36:c7:17:04:96:
58:74:05:f3:60:26:39:e3:c9:9b:55:5d:58:1d:5d:52:61:18:
56:12:48:33:1f:f1:6c:b5:1c:de:c9:fc:8d:a2:80:aa:62:5b:
4f:84:34:40:1e:5d:9c:42:bb:d8:bd:55:97:f6:3e:d1:2b:21:
77:bb:8c:c7:65:6a:76:1e:27:de:71:ee:c7:31:bc:4b:2a:f4:
a6:9b:61:2a:d3:ce:fb:c7:c5:d4:52:67:93:f8:7f:d2:ff:10:
34:ef:87:60:d9:95:f2:17:80:64:9d:48:df:b6:c2:12:c3:1e:
d6:53:05:28:0e:64:aa:5e:bd:83:88:e8:8d:26:ad:b6:9c:30:
6c:c8:28:3f:2d:10:38:2a:4a:38:9a:37:3a:3c:bc:54:24:f6:
81:f5:2e:c6:5b:a1:e4:ec:ba:9b:3c:b4:2f:f6:c2:38:47:50:
1a:35:5b:f4:30:b1:b2:58:d1:21:13:00:f7:99:8a:ba:20:59:
46:5c:a6:8b:28:29:b9:53:46:9c:0d:84:98:5e:53:1a:5e:d5:
e2:9f:0c:cf:c6:60:63:eb:50:5d:a6:7e:19:3b:56:37:a3:e4:
ba:d6:f8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:09:50 2026 by rpki-client