Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: yQrHrEuBw5lttTHLMMizzByHiMEEPALrOsCBrXNVP3M=
Subject key identifier: 51:53:2D:D3:42:7D:D1:24:75:95:32:CC:16:35:A6:E6:84:16:36:38
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 019D3A54414A2744F5B1EE2613EB00A050C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 126C
Signing time: Sun 29 Mar 2026 16:01:33 +0000
Manifest this update: Sun 29 Mar 2026 16:01:33 +0000
Manifest next update: Mon 30 Mar 2026 16:01:33 +0000
Files and hashes: 1: AWc9W3f7WW6fRyUj-qew2yWym0Q.roa (hash: CKhXDKmYEvv2kevwS8ScaNP/c7Fe+e5j3kS5/wFaq50=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: IODcZy33Ge0fTxiVLd3594rFEPVy//TfGlJWAmQLUtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:41:4a:27:44:f5:b1:ee:26:13:eb:00:a0:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Mar 29 16:01:33 2026 GMT
Not After : Mar 30 16:01:33 2026 GMT
Subject: CN=51532dd3427dd124759532cc1635a6e684163638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:8f:aa:28:4e:62:4b:14:5c:38:1a:eb:7a:
7c:7e:0b:a1:93:4b:26:33:95:16:f0:26:09:a1:7d:
73:74:5d:6d:3b:95:27:4d:b1:86:bc:9d:e6:04:f0:
2f:b2:33:e2:d0:c2:10:b9:04:90:a6:f2:0e:c0:11:
56:73:2f:36:6a:e7:08:42:e4:68:be:37:14:b7:fa:
5b:e7:69:f7:97:4b:24:d0:73:82:9e:8d:c9:7e:1b:
21:d1:b8:68:4c:e5:d3:4a:c5:7a:4c:36:38:74:39:
71:d1:8a:e1:d5:ff:a4:5d:69:2d:24:2b:48:05:14:
70:3f:0c:74:b9:8a:4a:29:f5:91:d8:aa:af:82:00:
6c:63:96:c0:56:4c:35:45:e4:e5:19:af:59:b8:92:
df:94:7b:99:ca:35:f8:65:90:55:33:d9:8e:ca:83:
32:ed:ec:f8:12:49:4a:a8:bc:37:df:05:7a:76:58:
5d:2d:7f:0a:5f:80:4f:03:2c:b0:10:f9:9e:a2:17:
9f:a7:c4:70:13:7e:ef:5b:ad:08:09:d2:4f:d3:74:
a1:8d:50:2b:fe:ac:ea:43:e9:2c:7d:a5:eb:5c:5c:
44:c5:11:f4:fe:8a:da:73:5e:da:97:85:16:7e:fb:
52:e0:69:d2:1d:76:3d:22:14:6e:89:bb:d2:a3:4d:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:2D:D3:42:7D:D1:24:75:95:32:CC:16:35:A6:E6:84:16:36:38
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fc:32:e5:49:fa:89:46:ce:60:ba:7b:ea:8c:e3:63:58:73:
ba:19:95:03:08:1b:62:96:ee:51:ce:bd:30:64:ae:bd:6b:56:
a1:41:a7:fb:ad:7e:24:99:47:ed:86:f0:fa:cf:a2:33:58:0c:
56:ff:91:c9:5e:8a:b0:1e:ed:cf:c7:21:7d:f2:4a:17:02:3f:
94:07:48:ff:ff:71:39:33:2a:85:85:0e:d1:26:98:9e:06:b6:
b2:9d:e6:7c:e3:d7:d3:20:53:c9:bf:73:bd:32:b5:aa:6f:2e:
27:11:c9:f9:aa:eb:1c:dd:46:03:09:cc:50:81:a6:a2:fc:6e:
a6:cc:8f:5f:71:14:66:87:b5:f9:62:5c:45:5f:11:1e:5c:29:
4a:a7:04:26:2e:cc:fe:e6:c2:18:24:82:f0:c3:f6:0a:45:c6:
d6:6b:64:60:ed:7c:38:7a:da:76:a8:7e:dd:2d:3d:b5:8d:f1:
cc:a6:5b:7d:69:67:db:eb:2f:58:d8:02:12:79:95:b4:9f:b4:
30:2b:c2:51:9e:5b:91:ab:ac:b6:97:12:16:6c:e2:34:f6:70:
f9:35:4c:63:ff:92:55:09:95:c5:89:0c:a4:29:46:b4:01:a0:
80:d8:34:bf:47:45:94:9e:09:4b:4b:c8:ea:21:60:04:4a:60:
11:4d:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:58 2026 by rpki-client