Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File: wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier: OjVZmvWCarEuO52XQz87yTeoKC1obatLWdxskUt8Bnk=
Subject key identifier: B3:5A:32:C7:D4:A9:07:2A:6F:CF:39:0F:F6:CE:65:37:76:AB:4D:10
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial: 019D390994F0C69E6802B7BFD99F1C3CBE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: aNasyvhnecUaGBiJJmKLy86blxw.roa (hash: SzBG9cwAKB7DYZM2SXTm4Asbf+eO0ZOQ6ca0yvr84RI=)
2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: JEZpFX64xEHg6+R/CccccQWhIoW7bjlNkPWL0HRpg8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:94:f0:c6:9e:68:02:b7:bf:d9:9f:1c:3c:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=b35a32c7d4a9072a6fcf390ff6ce653776ab4d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:1d:e2:d1:fa:c6:59:56:23:d6:bd:c7:f1:
d1:38:0a:fa:7c:c1:78:41:cd:1f:05:f3:de:69:96:
cd:4a:aa:4a:e5:e5:b6:77:57:82:db:33:cd:73:e8:
40:33:75:62:73:07:8a:5d:2b:15:56:fb:67:5f:26:
05:6a:1b:c0:d2:b6:42:51:bb:e4:b9:6e:d3:d9:01:
77:ae:f6:09:d1:c1:04:11:16:73:72:32:cd:08:ce:
72:30:4c:8f:14:9b:f0:54:5d:d4:62:8f:db:47:17:
56:7b:f0:7c:b2:78:c8:0e:39:96:11:6f:b2:52:16:
1d:2f:b7:af:ee:c6:4b:ee:d2:dc:86:03:fc:88:c9:
ab:83:53:84:df:80:ce:35:92:4a:58:18:e1:0d:b5:
7a:fb:98:c9:5f:6e:bc:0e:7a:1f:35:fa:4e:6b:d6:
d3:6b:e7:d1:9e:e0:00:79:89:f2:0a:3c:44:52:55:
d2:19:83:ad:f2:0d:1b:e0:c3:b0:02:cf:b1:87:cc:
a4:a1:e6:4b:96:53:0f:db:11:b4:4e:33:32:66:36:
c4:87:5d:6f:f6:dd:23:1c:b4:2d:92:c2:31:be:bb:
1e:8d:e7:99:b6:5e:e3:b9:07:f6:35:3f:8d:bb:52:
c7:70:0c:77:4c:b0:92:5c:1d:cd:bd:29:e8:fa:60:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5A:32:C7:D4:A9:07:2A:6F:CF:39:0F:F6:CE:65:37:76:AB:4D:10
X509v3 Authority Key Identifier:
keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1b:cd:b9:e0:53:74:73:0c:e9:ad:5a:6e:29:67:3e:c0:dd:
4b:26:c5:c4:8b:5c:ee:24:70:8b:62:80:61:51:4c:52:7e:6d:
e9:62:93:bc:4f:69:3b:a4:c9:7e:0b:6e:3d:80:50:2a:8b:00:
da:75:bc:ca:91:95:64:b4:d5:b9:70:a9:fa:67:a1:97:46:b2:
ae:c0:2c:2c:69:cd:1b:98:95:d1:7a:1f:3d:13:1a:2a:77:5a:
cf:8e:d7:e8:4f:95:7b:c0:fe:de:c4:86:05:d2:35:9f:30:f0:
5e:37:c5:9c:48:52:db:4f:3e:7c:43:fb:19:f1:17:af:d5:f7:
7c:1d:40:00:9f:db:6e:6f:c4:ff:55:da:1e:ec:9b:77:76:90:
bc:96:4a:f8:6a:c6:f5:5c:78:f6:dc:20:12:cd:3b:6d:a1:4e:
0b:c2:07:29:c9:be:16:7c:4b:2a:9b:b3:04:1b:78:84:86:23:
d8:6c:b1:ef:1b:1c:03:8e:0c:c9:39:d9:c5:06:dd:df:22:2c:
72:2d:27:66:4f:db:0a:49:5d:c4:84:75:dc:6b:69:99:2d:12:
34:e5:2f:20:b6:30:82:73:2e:41:69:49:85:da:9c:2e:6f:d9:
3f:7b:28:86:9a:d6:6b:2c:8e:73:6a:b0:0b:86:0d:9f:ab:44:
01:fb:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:51 2026 by rpki-client