Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: flDebt7Old0GA8obwgscbs4lxeLrxCZ9MB5rkEioKL4=
Subject key identifier: 55:41:53:E0:07:AD:C7:FA:D4:32:07:F6:23:A5:1D:5D:E4:F0:8C:82
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019CAF10B5054A2F8C2C0190F78D2C6165C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 01A8
Signing time: Mon 02 Mar 2026 15:00:33 +0000
Manifest this update: Mon 02 Mar 2026 15:00:33 +0000
Manifest next update: Tue 03 Mar 2026 15:00:33 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: G2GMtoh+kfkvJiLm7t06xvlO0pXLnK3FKhQEwP48ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:b5:05:4a:2f:8c:2c:01:90:f7:8d:2c:61:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Mar 2 15:00:33 2026 GMT
Not After : Mar 3 15:00:33 2026 GMT
Subject: CN=554153e007adc7fad43207f623a51d5de4f08c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:30:26:eb:ed:ee:65:a4:34:c2:55:9b:53:
d3:fb:5c:06:db:70:74:b4:0b:89:68:c7:64:b3:7f:
b1:e1:51:16:d7:9f:e7:1f:a1:4e:0b:6f:3b:c7:fc:
3f:66:26:b2:68:10:11:0c:aa:23:c9:e7:78:37:7c:
45:5f:37:4b:22:0d:42:13:62:af:58:00:5f:ef:4b:
9c:f7:97:15:c4:ea:e7:99:32:83:e2:ca:c1:6a:61:
40:f3:9a:d6:ca:ae:0d:93:99:b0:d7:62:85:dc:8d:
49:d4:f9:32:b4:52:3b:db:6b:9a:88:ef:d6:c8:31:
1d:dd:8c:32:d5:0d:30:63:f7:7c:48:27:e7:59:e7:
10:3f:fb:ae:44:ef:01:83:55:e6:97:11:4b:4b:cb:
1b:a9:19:64:5a:ff:04:50:5b:50:8b:b9:4b:a4:c0:
23:a5:5c:93:36:6c:1d:6e:53:ab:89:8c:08:0d:c2:
23:cd:b6:ce:e9:25:f1:8e:bf:0e:1d:17:fa:fa:ea:
1c:02:88:e9:ba:0b:86:44:77:74:64:78:08:9b:39:
c4:a2:70:f4:1b:c1:0c:41:67:f2:0b:33:96:f4:b6:
22:63:b8:46:98:0a:30:85:9b:3d:6f:e2:33:2c:c2:
0d:5f:df:1b:de:d8:02:54:28:ca:f9:2d:aa:e4:92:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:53:E0:07:AD:C7:FA:D4:32:07:F6:23:A5:1D:5D:E4:F0:8C:82
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:b3:51:27:bc:b4:f4:41:f3:e0:76:8a:f1:7f:e2:f3:f3:
31:31:b1:51:44:5f:a7:bf:35:f6:17:47:06:a2:ac:2a:b9:ce:
89:ac:5a:f3:b2:98:c9:51:a0:0b:7d:70:c9:e1:5f:eb:61:5a:
19:b0:da:38:a6:8b:96:32:f7:3b:0d:ba:24:c3:eb:59:20:5f:
ab:df:d5:b3:62:ce:ef:09:74:54:ec:3b:cc:2e:21:70:7c:ba:
29:87:c4:27:62:bd:29:3a:94:58:09:bd:3b:cc:02:16:71:b0:
26:7a:6c:a8:54:ae:54:c4:f2:b9:c6:b0:28:4a:bc:82:6b:95:
34:ae:34:76:2b:1f:ab:6e:b3:26:2b:e3:dc:a4:a3:d8:1e:45:
78:6f:e2:02:ad:73:c4:e4:7b:90:d3:a0:8c:d3:e2:8a:13:3a:
39:d1:10:c3:c5:21:3a:8b:ac:8e:b6:a6:2d:bf:27:a3:fb:60:
f4:96:fa:a6:b1:ae:7d:45:fa:08:4b:fe:73:93:d9:cb:b5:02:
8a:01:aa:e9:c5:ee:af:a5:a1:4a:43:8c:04:95:2b:84:be:fe:
04:93:da:d3:be:de:4f:b0:ff:00:ce:6b:e2:62:94:72:6e:ce:
69:9b:9b:1c:a9:86:aa:f9:c7:09:9f:01:ae:d6:13:8b:c4:d4:
ef:d0:5d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvELUFSi+MLAGQ940sYWXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3
YjQ4OWQwHhcNMjYwMzAyMTUwMDMzWhcNMjYwMzAzMTUwMDMzWjAzMTEwLwYDVQQD
Eyg1NTQxNTNlMDA3YWRjN2ZhZDQzMjA3ZjYyM2E1MWQ1ZGU0ZjA4YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0wJuvt7mWkNMJVm1PT+1wG23B0
tAuJaMdks3+x4VEW15/nH6FOC287x/w/ZiayaBARDKojyed4N3xFXzdLIg1CE2Kv
WABf70uc95cVxOrnmTKD4srBamFA85rWyq4Nk5mw12KF3I1J1PkytFI722uaiO/W
yDEd3Ywy1Q0wY/d8SCfnWecQP/uuRO8Bg1XmlxFLS8sbqRlkWv8EUFtQi7lLpMAj
pVyTNmwdblOriYwIDcIjzbbO6SXxjr8OHRf6+uocAojpuguGRHd0ZHgImznEonD0
G8EMQWfyCzOW9LYiY7hGmAowhZs9b+IzLMINX98b3tgCVCjK+S2q5JIh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVBU+AHrcf61DIH9iOlHV3k8IyCMB8GA1UdIwQY
MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt
ZDI5YTVkOTE4ZmQ4LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4
LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8KzUSe8
tPRB8+B2ivF/4vPzMTGxUURfp7819hdHBqKsKrnOiaxa87KYyVGgC31wyeFf62Fa
GbDaOKaLljL3Ow26JMPrWSBfq9/Vs2LO7wl0VOw7zC4hcHy6KYfEJ2K9KTqUWAm9
O8wCFnGwJnpsqFSuVMTyucawKEq8gmuVNK40disfq26zJivj3KSj2B5FeG/iAq1z
xOR7kNOgjNPiihM6OdEQw8UhOousjramLb8no/tg9Jb6prGufUX6CEv+c5PZy7UC
igGq6cXur6WhSkOMBJUrhL7+BJPa077eT7D/AM5r4mKUcm7OaZubHKmGqvnHCZ8B
rtYTi8TU79BdCw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:18 2026 by rpki-client