Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json)
Hash identifier: uWACA3NGVf6vBMhcD0Ihp1AOI4Ee7G0pc+uJ6lsOuyA=
Subject key identifier: 85:DB:C3:D9:16:E0:5F:39:0B:82:EF:F4:CE:0F:A0:60:FA:57:08:C7
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 019D9AE322E18E17A7FB6E7B45E9B0E816CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
Manifest number: 0E9F
Signing time: Fri 17 Apr 2026 10:01:10 +0000
Manifest this update: Fri 17 Apr 2026 10:01:10 +0000
Manifest next update: Sat 18 Apr 2026 10:01:10 +0000
Files and hashes: 1: ucWEbnfI7QfYpxKTIXaLzhsauuk.roa (hash: Av29MdRP4o4P6AApZpsm0FqnLqUE0mVK2XZzQ6KaSoI=)
2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: mpD0K00Fu5q4gHGGVl/Ti3GefKPyCon515qce6xok6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:22:e1:8e:17:a7:fb:6e:7b:45:e9:b0:e8:16:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Apr 17 10:01:10 2026 GMT
Not After : Apr 18 10:01:10 2026 GMT
Subject: CN=85dbc3d916e05f390b82eff4ce0fa060fa5708c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:27:b9:03:50:34:fc:52:ee:1c:14:21:5b:
b0:69:5b:c4:5a:28:bb:cc:4d:61:a9:39:24:ee:4c:
e8:69:40:03:ac:30:37:8c:65:78:5d:73:4a:0f:7b:
c3:97:bd:66:69:8f:c6:33:5d:eb:7f:57:09:1f:ff:
50:8e:01:f0:15:2c:b3:99:be:24:86:14:10:f8:1c:
5e:ba:66:95:59:45:ed:e4:21:4d:ec:94:23:67:97:
1d:91:a1:9d:9e:b0:23:89:d6:0c:e5:68:86:8a:b1:
25:ff:8a:7d:17:3e:95:a4:cd:57:9c:f9:b7:ae:bd:
8d:ca:76:9d:07:18:a0:c4:1c:38:3d:c9:a7:8d:b8:
69:d0:ef:e0:cf:a0:44:1c:d7:f9:0f:91:df:e8:d8:
15:ac:54:11:52:10:71:de:e3:f3:db:49:e6:c6:25:
58:74:c4:59:13:7c:20:eb:a4:28:03:c8:38:83:dc:
45:ed:de:4d:ff:d6:42:bd:77:47:5a:a3:8d:b7:94:
75:be:64:d5:4f:4d:c0:fa:f7:25:f5:79:33:66:26:
97:eb:99:67:74:d7:79:6f:99:90:c2:ed:fe:17:60:
06:b4:b1:be:4e:3a:69:31:d5:c7:7d:81:91:98:00:
23:53:e0:08:9a:31:c5:3d:d5:ef:fb:0a:bf:ac:42:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:C3:D9:16:E0:5F:39:0B:82:EF:F4:CE:0F:A0:60:FA:57:08:C7
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:84:6b:86:8b:da:80:a4:d4:60:fd:a6:ea:a8:9b:cf:49:77:
ae:0d:0b:d0:fe:3f:3a:96:49:8c:fc:e6:37:fe:97:0d:12:f7:
b9:26:a6:8b:a5:ee:4d:3d:2e:f2:ff:8f:a3:d6:20:b5:66:e3:
e6:2f:43:26:52:6f:c1:db:75:e5:fd:42:52:b4:96:2d:a6:57:
d8:87:15:fc:44:f8:7e:c6:e6:9d:b2:87:78:e1:66:c9:af:bb:
98:75:e8:4d:1a:44:7c:a8:a2:e3:d8:d9:29:15:36:77:f8:9e:
48:93:96:28:94:2a:74:f6:16:7a:cc:70:bf:96:24:3b:71:92:
6d:41:01:24:a2:4b:5c:15:42:3a:19:ae:c5:69:a4:ac:ad:79:
e9:32:20:44:22:51:7e:73:cd:f4:f4:ab:b5:68:1f:c5:84:f6:
d2:7a:a7:12:e8:b5:13:2f:f0:62:f5:40:a0:4c:a9:89:3a:cc:
4e:36:41:2f:22:da:ac:1e:22:3b:a2:c2:58:c9:f4:5b:25:83:
d2:4c:ef:cd:66:0e:e2:25:52:33:f7:86:0c:23:1b:b4:87:01:
d0:d1:8b:8e:0c:93:f2:35:96:82:fe:88:ea:86:b1:55:04:9c:
72:e2:f2:e4:e6:60:b9:52:59:b5:35:c3:e5:90:d7:29:33:8f:
8f:a8:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:26 2026 by rpki-client