Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
File: w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json)
Hash identifier: gjlyWhhrpDje/QpwvcPBubs1tbohoG+C/H9+GyiC1l8=
Subject key identifier: 00:14:A2:AF:B7:AC:F7:66:FA:4A:78:50:C0:62:9F:A2:56:A8:53:45
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial: 019CAC0FB7D3ADEFC192D1C025755CB11B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
Manifest number: 0CB1
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: sAIO_MWUbGWxy0ejjFhZrGzjwYE.roa (hash: 59vuLy/DBthumMO0fIPh8IDMHcczhFPPgcfUlSNwyd4=)
2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: A6UVPGEfNneJFndQBJaGn1jKk5GQ03LNSbltbOISncY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b7:d3:ad:ef:c1:92:d1:c0:25:75:5c:b1:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=0014a2afb7acf766fa4a7850c0629fa256a85345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:0c:9e:fa:05:dc:a2:44:b5:b2:6d:07:6c:
0d:7d:4c:27:eb:1e:20:7c:b9:4a:f8:9f:2f:20:e2:
4c:cb:db:d2:22:f3:94:88:e5:d0:cd:cd:a7:d9:9a:
07:7a:a3:a8:25:dd:df:b3:41:18:5d:14:4f:bb:3a:
c7:e5:8c:2e:d2:3b:5b:cc:82:59:db:dd:19:9b:4e:
e2:56:24:57:07:c5:89:2e:ea:96:6b:bc:db:f3:64:
83:29:75:07:40:17:f7:7d:62:8a:c8:7f:72:43:df:
8e:8b:b4:38:69:da:56:05:19:a6:48:3b:a9:a2:5c:
60:c6:e3:be:52:ef:c3:31:5b:41:e8:f0:09:03:55:
79:44:56:18:2b:3d:20:0d:26:5e:91:19:6a:91:d7:
76:b6:7e:d0:b4:f1:03:da:4a:24:c5:c7:ec:9e:65:
83:27:c0:ed:de:14:16:bb:d6:d7:75:78:74:4c:03:
a9:cb:cd:20:d4:91:0f:ce:59:a4:2b:e2:1b:1f:a2:
ae:28:c5:2d:2c:cc:1b:b4:9d:51:f7:21:42:f5:0d:
8b:f2:71:b1:5b:15:ec:49:86:4f:ad:76:5a:7c:43:
e8:80:0a:1e:c6:af:04:87:78:02:ee:04:c8:9e:ef:
9a:87:f5:b0:a2:65:cf:38:0e:36:86:13:32:eb:f4:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:A2:AF:B7:AC:F7:66:FA:4A:78:50:C0:62:9F:A2:56:A8:53:45
X509v3 Authority Key Identifier:
keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7e:d3:bb:e5:27:94:7e:98:4b:6d:26:f6:3b:a7:06:59:dd:
bb:90:04:b7:0a:26:38:ce:d7:40:e5:a8:ed:28:58:db:05:2b:
5b:7e:dd:b5:b3:95:2d:64:dc:a8:c2:2d:21:61:09:2d:1d:4d:
ae:c6:a6:a8:f6:9b:5c:93:12:30:ea:ed:cf:8e:d9:28:c9:07:
0b:d1:48:0f:72:8c:43:2a:2b:66:22:3d:c5:0e:24:93:46:f5:
be:24:df:b1:64:70:4a:23:4f:0f:c1:cc:48:10:c9:51:da:6f:
0d:0d:b4:01:a4:0c:34:0f:a8:72:1e:d8:97:b2:76:9b:4f:5b:
93:90:fa:98:2a:50:1f:48:6a:a5:0b:be:35:85:60:c9:9a:00:
ed:6a:33:32:fd:8f:cc:6b:c0:e8:89:e1:a7:b9:b4:80:d7:ba:
9e:12:98:32:b5:5b:a6:09:64:5b:d4:63:db:dc:da:ae:17:2a:
90:35:23:bf:d6:c7:b9:b4:ef:45:1e:d4:4b:9c:94:f7:25:a2:
ad:7e:b9:22:de:77:75:46:33:ae:52:18:21:f4:78:52:44:66:
1e:af:c9:83:38:51:c5:16:7f:bc:2f:e1:be:33:dd:0a:5f:2e:
29:20:88:cb:a4:e2:7d:43:1a:ee:f1:65:e9:ea:74:f6:02:06:
b9:61:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:33 2026 by rpki-client