Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier: swa80CiaPOr27uVityhe7JB7k9KzjULAbT4AD88l0xE=
Subject key identifier: 83:02:B4:DB:27:BF:D0:50:AD:8B:3F:13:86:34:80:81:D5:75:5D:8A
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 019D38D35D2F2DBCADC3CBD3C42D357E4626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number: 0F72
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: SSYiDgD_3-1wMHqQrv7qO7JPevs.roa (hash: 1WfeKCTajb/KdbOomr3V7iu+Ay5TdD7m9U7zyCHhLwM=)
2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: 4/UEH0GASyfgSFnzIxMdypsbaN+UJj+FU7MuHgF0+w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5d:2f:2d:bc:ad:c3:cb:d3:c4:2d:35:7e:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=8302b4db27bfd050ad8b3f1386348081d5755d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:01:67:70:9e:5d:e8:6c:8b:99:9b:49:af:
b3:7f:bc:67:62:20:60:c5:12:39:f0:f1:ad:a6:be:
ea:3c:9c:59:94:78:03:3e:a0:f9:ab:50:3e:ea:81:
61:60:3a:ba:2b:12:cb:06:bc:9b:20:c4:0b:90:ba:
8b:ee:f6:26:60:a1:66:6d:e3:86:9e:40:3f:3c:36:
03:0a:50:51:4d:70:29:75:46:1c:e8:cf:1e:a9:05:
22:37:e7:4c:3c:0a:17:e4:f7:7f:38:00:81:26:40:
18:f9:f9:92:34:62:fb:d6:1c:28:fc:16:0f:c7:f2:
bf:22:eb:d6:5d:12:fe:01:c0:fb:19:ba:1d:73:2a:
5b:e5:0a:a6:7a:50:39:cd:13:b3:ff:0b:23:eb:bf:
77:1f:48:08:c9:c3:90:72:d0:e9:0b:74:37:58:b8:
f1:25:52:a9:df:7d:c6:37:30:b2:55:f5:14:b3:ba:
a8:cc:02:26:1e:df:cf:e7:90:a7:b6:9a:b1:73:9f:
0d:18:7e:34:f7:a9:d0:4f:38:78:43:db:53:60:37:
07:77:ee:6b:2f:1a:39:c4:80:67:f6:10:36:02:1d:
bc:21:f2:c7:e2:0e:09:f1:2c:c0:82:4a:3e:0f:9a:
f9:9e:80:4d:d2:e0:b8:7f:a8:d5:47:3b:cc:1f:c0:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:B4:DB:27:BF:D0:50:AD:8B:3F:13:86:34:80:81:D5:75:5D:8A
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:85:b5:42:34:af:a3:17:53:59:44:c1:ad:9e:65:01:30:
c5:65:05:4e:4a:50:f2:46:81:6b:73:84:6b:47:11:25:a3:19:
b5:d1:e8:6c:3c:e2:34:03:e3:46:01:c8:fe:33:dc:9d:00:81:
05:3f:1e:e8:18:81:5d:77:c2:f6:13:8a:e9:3b:99:c4:7f:50:
ae:fb:db:78:b6:b1:83:47:cd:8d:d3:96:23:04:50:ea:7a:d7:
c1:df:82:0e:c3:54:bd:80:e4:88:51:e4:0f:42:63:a1:d0:60:
cb:4c:d1:73:4d:64:16:b0:2b:44:81:71:da:b7:78:ec:46:a8:
95:98:f4:1f:68:30:d1:0e:31:37:7b:1b:50:b4:a2:07:ed:4c:
36:b0:8f:da:41:ee:f5:31:3e:49:a0:38:02:ee:8f:28:9b:93:
d9:b6:a2:6e:08:cf:10:56:de:3b:53:99:d4:66:7d:37:08:e2:
c5:cd:5b:4d:2d:ab:8e:29:3e:35:19:5b:bf:ae:4d:9f:40:1b:
81:28:90:77:2d:4b:fe:b6:a0:a1:81:29:57:b3:d5:66:f5:a1:
6a:03:8d:5c:82:4f:d4:6d:92:dc:11:9a:ad:0d:e2:e8:d9:38:
17:e2:cd:20:c3:15:61:21:e3:61:6a:d1:6f:7d:77:87:47:96:
a4:06:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client