Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: BhfROi9xazTUH4GVBsH/pmmR933fQ1QzyIVvC8u9NyQ=
Subject key identifier: AE:DE:84:A5:FB:B6:12:3C:99:D3:AF:65:3C:B9:E2:77:70:26:41:98
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 019CAC7DB9E820C800113DAF583F818C08EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 07BC
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: 5HeMO4zDu-Aw5hUDH_h00aWRAfU.roa (hash: rvSp2TE3yHxwYyM7Q6koLSjsHsuVLORSAbQms57XIPo=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: +vTMssDKaW69xeAmurMtpkup34qZD/zgTexQhspHvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b9:e8:20:c8:00:11:3d:af:58:3f:81:8c:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=aede84a5fbb6123c99d3af653cb9e27770264198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:c4:ac:11:df:48:7c:27:76:82:52:ff:c4:
5f:b3:f7:f2:63:c4:50:ae:f9:27:b0:14:28:d6:36:
f0:53:49:68:43:84:dd:c3:61:5f:3a:f9:c0:87:8c:
15:d2:9c:c2:e8:33:76:41:0e:24:11:11:c9:cf:6b:
f0:5c:bb:7e:ba:02:62:7f:73:d4:6f:f1:6f:69:73:
b0:44:3a:50:8c:c8:76:31:69:c1:f8:0d:f7:9d:78:
c7:ae:d2:3a:37:f1:c8:e6:1f:c4:7f:be:f7:d8:53:
d3:6c:51:08:18:bb:7f:55:df:73:53:31:d0:9b:88:
de:14:00:d3:ad:35:fc:f7:8d:f2:65:e0:9c:f0:c8:
25:a6:ce:de:78:a8:2d:ec:2d:21:a3:78:5b:3c:bc:
7d:c0:a1:1e:86:e5:09:9e:57:da:27:56:ac:50:6c:
a7:9f:2a:20:7d:d7:44:ed:88:f5:83:46:2f:cd:8d:
5b:5d:8e:25:f5:37:d2:5a:c1:18:ca:c1:4d:f6:4e:
2d:d6:cc:25:02:ae:7a:5a:e3:69:2b:40:90:c1:40:
76:d0:a7:65:53:5c:ee:07:3e:94:a8:5f:0e:d2:c4:
82:2f:16:0c:71:3d:b3:66:ac:66:86:c7:f3:01:2d:
67:44:27:25:fa:1f:b5:cc:87:fa:72:11:68:e5:70:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:84:A5:FB:B6:12:3C:99:D3:AF:65:3C:B9:E2:77:70:26:41:98
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:0b:d6:b2:e0:53:0a:08:60:ab:e3:57:c2:c3:25:1b:18:
06:5e:59:88:31:dd:95:bc:47:1a:d4:45:5d:97:0a:5b:cf:3c:
16:5f:84:93:93:b3:0a:79:e1:f7:76:89:a6:c8:93:be:e3:2e:
4c:31:0d:dc:c0:de:b2:14:a9:17:ae:3c:be:6e:ba:b1:5c:bd:
5f:32:df:e9:75:8b:7a:77:b3:95:ef:8a:52:9a:8f:7c:45:5f:
99:60:54:9a:fe:f6:1b:f2:29:0c:53:2a:04:2a:b1:a1:f7:da:
42:f2:8c:40:79:01:44:5d:ac:3e:80:3a:6a:66:a9:53:4d:d6:
09:56:ca:ad:17:7d:e8:b4:09:87:19:cf:9a:ef:bc:db:2c:88:
11:08:71:04:ea:a5:58:4c:32:ca:52:96:8f:26:33:ed:76:ca:
b1:7c:7c:9b:a8:2f:f0:bf:a3:5f:0d:90:89:07:0f:fa:6a:8c:
f3:9b:83:8d:0e:1c:09:9d:95:a9:05:de:93:70:2c:4a:c3:78:
52:3e:1e:2b:e1:fb:6a:58:c2:2a:2c:bd:35:54:e4:83:0d:72:
f1:5f:e3:6d:38:18:ad:8c:ad:fc:ad:cd:b2:c6:ac:58:0d:a0:
75:17:24:7c:d9:e1:d4:76:e8:5e:33:e3:6d:95:9e:66:cf:97:
d6:66:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:31 2026 by rpki-client