Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier: g2IaMPb6SqSJZF+slr1iFrwTGa6/R6B1ZSOEhuAAGEw=
Subject key identifier: A7:0D:73:4F:FC:9F:D3:FA:D2:D4:32:E3:13:76:C0:22:11:DE:53:33
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial: 019D3AC13F2DD405325EEA54821B1A3144F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number: 0CFB
Signing time: Sun 29 Mar 2026 18:00:36 +0000
Manifest this update: Sun 29 Mar 2026 18:00:36 +0000
Manifest next update: Mon 30 Mar 2026 18:00:36 +0000
Files and hashes: 1: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: DQ3H4YWwM/Mnk2hTp/cuNAtwWEdTxL1Q1cYG8mlDLzc=)
2: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (hash: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:3f:2d:d4:05:32:5e:ea:54:82:1b:1a:31:44:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
Validity
Not Before: Mar 29 18:00:36 2026 GMT
Not After : Mar 30 18:00:36 2026 GMT
Subject: CN=a70d734ffc9fd3fad2d432e31376c02211de5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:fd:89:8b:19:84:66:b4:58:38:91:07:c6:
c8:33:aa:d9:e0:67:6c:b6:3c:f1:bf:7d:43:2f:cf:
7c:28:68:fe:91:b9:2f:21:c9:b6:ba:e8:35:7b:a0:
88:a8:aa:ca:f3:66:d6:27:50:1e:f5:b8:7d:dd:f1:
fa:68:2b:8c:77:a3:9b:e0:68:60:43:f6:57:49:f2:
0d:2f:0b:35:4d:66:19:c0:47:50:8e:c2:81:9b:e6:
5b:0c:51:5f:09:3c:7b:df:03:52:08:e6:6f:0f:41:
28:80:0d:ed:ea:94:a9:84:bd:1a:a1:72:f1:18:83:
b8:05:3c:6b:90:27:60:79:36:be:ee:ef:a1:b3:9b:
cb:b3:ba:45:b8:97:17:dd:70:f3:60:8f:0f:f3:f4:
22:ff:ac:96:17:91:0e:61:cf:52:07:ee:76:f4:bc:
f3:eb:17:1b:a7:56:62:8c:25:80:08:28:74:b7:88:
99:9e:19:be:5c:39:21:45:89:60:04:0f:f7:f8:eb:
8d:57:a3:a8:c7:60:42:bf:31:c8:ab:1d:da:69:0d:
a9:f0:54:22:05:19:fd:0f:9d:ad:22:b5:db:65:2a:
2d:d7:e7:72:94:16:81:d6:b4:41:2f:6e:4f:65:c9:
d7:5c:bc:60:dc:69:b8:74:28:21:c2:d7:7a:ff:96:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:73:4F:FC:9F:D3:FA:D2:D4:32:E3:13:76:C0:22:11:DE:53:33
X509v3 Authority Key Identifier:
keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:16:1b:01:cb:08:2a:61:c6:9c:6c:75:57:12:7e:0c:44:
ce:d8:e9:7b:ba:a1:8c:6c:bb:43:18:f2:5a:3c:69:05:69:8e:
6d:ae:1c:db:fc:ef:d7:dc:55:81:24:4a:b8:21:4d:e7:c8:47:
f5:e7:66:31:af:5d:31:50:d7:71:38:3c:20:e4:72:41:bc:f3:
34:34:c7:2e:a5:8f:0e:86:a2:ad:5c:a5:9a:ab:90:7b:2c:51:
68:f7:17:03:77:33:0a:6a:c2:90:fe:f5:6a:d8:e6:8e:e5:e7:
82:ee:a9:bf:e8:89:ef:dd:24:a7:db:3f:d7:ab:73:1f:41:42:
07:22:cc:81:10:2d:ae:f5:fc:ea:0f:a0:ea:a4:10:ff:5d:00:
eb:e6:24:de:6d:2a:58:66:7a:b7:7e:70:a7:62:6d:0a:6e:96:
c6:18:48:99:3f:8b:40:2f:22:52:7f:40:42:b0:9d:c6:c0:bd:
24:9b:b6:7b:03:ac:a8:1b:8f:d8:be:14:ed:1e:e9:97:94:aa:
79:f1:f2:6e:44:66:ba:31:ee:87:4c:b8:b3:33:aa:f8:a8:43:
16:35:28:2b:cb:b0:52:6c:3e:b3:cc:53:b1:e9:e2:f5:77:2b:
6b:41:a7:a6:dd:b7:e2:db:d1:81:69:7d:8b:5a:a8:89:02:6f:
88:91:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:41 2026 by rpki-client