
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: 4ukyPeE4QemzsEujx+BhqPSPXjSIvUPojzig0YhMepk=
Subject key identifier: 8C:5E:BC:76:88:B6:FE:C1:8E:AC:16:93:CC:27:E0:20:15:8E:F0:85
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 01A0D983AFF7F5F07E0628DE342B9657A34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 113F
Signing time: Fri 25 Sep 2026 17:01:21 +0000
Manifest this update: Fri 25 Sep 2026 17:01:21 +0000
Manifest next update: Sat 26 Sep 2026 17:01:21 +0000
Files and hashes: 1: U7ys6itFnvuaePn4ScsbAtbzsp0.roa (hash: d+i6tJ5mzYcRwG/S0qIlnLIWWa0XIkizyeSNRfnsoAI=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: enb3tV9IbnezSQlPFPK7s33pHRDhbtvd+YKP6gm7gn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:af:f7:f5:f0:7e:06:28:de:34:2b:96:57:a3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Sep 25 17:01:21 2026 GMT
Not After : Sep 26 17:01:21 2026 GMT
Subject: CN=8c5ebc7688b6fec18eac1693cc27e020158ef085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:4d:f6:24:95:21:0e:e7:81:19:ce:66:7f:
50:9f:0e:78:16:8f:61:96:29:92:a5:e5:59:3f:a5:
3f:37:11:41:8e:00:1e:00:f9:90:b3:40:fb:24:2a:
73:c2:16:d3:a9:a8:7d:59:39:4f:3b:ee:1b:d1:16:
17:92:40:a3:98:b3:85:b1:b3:f1:a6:84:0a:54:25:
cb:8b:84:58:b9:93:46:b1:7e:bd:0e:b8:4f:3e:ca:
7d:b6:ca:a0:3d:4a:07:5b:0d:e7:eb:7d:f7:30:22:
d3:a0:b9:3b:cc:36:3f:50:bd:76:93:aa:12:39:3b:
07:bf:d7:68:d0:0c:58:c3:fc:33:8d:c5:0f:e7:20:
57:ea:3d:84:fa:fd:13:d1:04:fd:2d:d3:c3:59:ff:
70:71:c4:b8:cd:4f:83:d6:77:c4:b8:5c:5b:96:30:
8d:88:31:9b:ca:d4:de:bf:fe:e3:63:ba:a4:ae:3c:
fa:cc:b3:01:5f:47:e2:85:96:f5:64:c5:53:d9:c7:
33:2d:78:61:ef:6a:19:52:90:33:ac:b5:a1:44:55:
4c:bd:1f:54:d8:cc:f1:86:a3:fb:53:5a:58:75:65:
bf:14:9b:bc:16:32:97:f6:53:98:69:43:10:51:02:
89:00:73:a3:f3:d5:0d:6b:1b:40:be:0d:47:e9:01:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:BC:76:88:B6:FE:C1:8E:AC:16:93:CC:27:E0:20:15:8E:F0:85
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:91:25:32:a6:d2:9c:6f:00:d8:c8:9d:2c:54:b7:36:08:
c1:73:f5:bf:cf:37:6b:1b:d1:8e:c8:72:88:8a:d8:c1:7c:ae:
f1:fb:25:a0:5d:17:06:0e:18:1e:96:18:18:21:80:f9:04:c0:
6b:40:54:1a:69:2a:2f:af:f5:ab:7d:c1:83:21:fc:45:5d:00:
e3:50:83:b8:80:ae:e0:ee:94:44:49:07:9e:07:f5:a3:e8:32:
c1:6d:72:6e:29:7e:b3:29:d0:e5:fb:e9:2f:7b:6d:c2:fb:c6:
94:e0:7a:c2:33:64:36:fe:65:b8:ac:97:d1:7f:66:25:d1:24:
12:25:96:7c:fb:13:46:c0:41:54:c4:80:64:07:df:ce:01:fc:
ee:d0:2a:e9:2e:95:b6:35:04:4e:6b:30:c0:5d:dd:b6:14:37:
a9:09:2f:46:1a:4d:2b:8d:69:ac:9d:7b:7c:ad:9c:d8:0a:bd:
9b:1f:66:f3:9e:ae:e2:90:b6:78:a0:8b:1a:9f:96:1e:1c:d1:
e2:80:87:9c:52:1b:c5:30:2e:40:c2:a3:81:b1:47:fb:f3:dd:
32:04:0a:34:8a:19:c5:5f:ef:3d:8f:89:28:98:4d:ca:52:b8:
a0:9b:25:5e:3f:94:95:db:d2:1a:32:a3:1a:7f:0b:e2:5f:8b:
ab:72:0e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:24:48 2026 by rpki-client