Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: QiIJkYkiEXLJvjaVlgf/1A6wHm6SLxjKHQINqxLsxfA=
Subject key identifier: 8E:14:48:6A:0F:4B:A0:DB:76:77:F5:1F:0E:44:28:3B:E4:C7:ED:95
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019CABA21DA11F76543D8BFCA06350703E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0F15
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: U7ys6itFnvuaePn4ScsbAtbzsp0.roa (hash: d+i6tJ5mzYcRwG/S0qIlnLIWWa0XIkizyeSNRfnsoAI=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: MA3PYdXHUJsbZiF24SLygWm2s/XUFh1scsgaVyrhtHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1d:a1:1f:76:54:3d:8b:fc:a0:63:50:70:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=8e14486a0f4ba0db7677f51f0e44283be4c7ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:f7:dc:0a:f2:75:ad:fa:e5:31:5f:3a:d3:
c1:c5:a5:75:26:01:4d:dd:63:f1:c0:3c:12:5e:c2:
39:20:ef:12:12:ea:32:2d:d5:d1:f1:b2:cf:87:1d:
4d:ce:40:75:a8:7a:c3:d9:30:47:70:8d:f5:44:17:
db:5c:be:a4:b2:b5:35:6e:5b:14:3a:44:a8:f4:c1:
b4:d0:23:59:03:9c:b8:07:56:bf:1f:21:e0:d9:0e:
ea:bb:f9:57:1d:80:88:03:46:40:87:5e:ce:13:0e:
03:b3:66:55:2e:72:27:ec:b0:db:dc:e2:15:2f:a2:
ea:05:65:4b:ab:41:88:52:f7:53:62:22:f0:cf:18:
e1:fb:df:e3:6d:99:cc:1b:da:12:5a:de:8f:75:7a:
fa:93:c2:72:f3:53:6a:55:14:b9:c9:d5:2f:4d:ec:
ef:54:72:5a:4e:ba:46:b8:ca:93:8d:b3:be:01:ef:
04:bf:5d:a7:33:ec:27:b5:5f:38:bd:30:4d:c1:8b:
19:d8:e9:ee:6d:01:98:67:3a:5c:34:1f:46:25:88:
41:a3:a5:e8:97:64:78:6a:b8:e7:8f:ff:4b:64:17:
ef:e5:4b:ec:25:b2:12:66:78:b2:b8:53:be:b6:6b:
ab:9a:36:bf:f3:d7:75:89:4a:4e:51:6a:9b:79:5d:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:48:6A:0F:4B:A0:DB:76:77:F5:1F:0E:44:28:3B:E4:C7:ED:95
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:ad:d9:ac:59:51:24:7e:d8:d8:99:d5:ab:3d:79:c5:bc:
a6:d9:ab:6d:37:00:6b:94:36:ba:4e:69:a4:bd:35:8e:8f:0b:
b6:81:c3:65:68:3f:cd:0c:2e:1f:09:a3:14:a9:1d:79:c9:7e:
fa:56:dd:60:49:87:f3:55:24:59:61:61:0f:15:ec:cf:d4:2c:
04:a5:41:72:ec:67:07:34:86:3e:e4:1a:88:a0:85:11:19:3d:
9d:67:79:d0:81:cb:2e:25:e4:93:12:69:01:69:2d:b4:b2:43:
09:53:ce:22:a4:cd:99:22:47:5e:50:41:3a:1d:59:37:92:f1:
a9:1c:db:7f:c5:29:cc:43:4e:5b:3f:19:35:e4:52:09:46:06:
10:23:7d:29:53:46:55:24:46:c6:6f:30:33:ad:5f:50:65:ee:
0b:14:f3:e6:05:c6:e7:28:b7:91:90:47:5b:31:68:d1:30:05:
96:c1:4c:96:d2:91:1d:44:c3:cc:b3:27:a9:3a:99:b1:6b:7b:
59:67:8b:f0:1b:43:12:3b:5b:f3:b1:ba:d0:19:c8:40:d4:31:
34:10:ce:0f:2c:34:99:b8:5f:df:90:50:f0:59:f0:d8:36:1f:
3d:bb:03:4d:59:e8:85:24:6b:92:da:be:c3:6c:c7:c8:ea:a7:
93:3c:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:21 2026 by rpki-client