
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: TWqNeLwZJeg9YQuOfv9R+MavSsgwmb9EBQ7gZpV3yKc=
Subject key identifier: 2C:2B:61:56:9C:7C:AB:C9:EE:74:82:88:03:8B:E1:20:44:88:0E:54
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019FA03A8EDC9979ED627F7AE6CC0A8C8422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 032E
Signing time: Sun 26 Jul 2026 21:00:19 +0000
Manifest this update: Sun 26 Jul 2026 21:00:19 +0000
Manifest next update: Mon 27 Jul 2026 21:00:19 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: dqhf2yAi1JoO9akbzp6/7KtIaTflII2xAvLttvxxOb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:8e:dc:99:79:ed:62:7f:7a:e6:cc:0a:8c:84:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Jul 26 21:00:19 2026 GMT
Not After : Jul 27 21:00:19 2026 GMT
Subject: CN=2c2b61569c7cabc9ee748288038be12044880e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:4b:37:9f:96:30:29:62:aa:41:88:29:5b:
56:ad:ea:6b:b0:c6:33:47:c0:45:39:fb:ff:9f:14:
32:33:ee:02:27:00:77:da:d7:ff:04:00:95:9f:b0:
25:9f:69:bf:f7:60:a3:62:d6:f7:2d:f6:10:c8:be:
01:e1:d5:31:60:dd:e6:7e:fa:32:fb:24:41:9e:bf:
08:da:f5:55:47:f3:65:b1:2a:f7:8e:bb:55:62:87:
c2:38:a0:66:f2:f0:34:9d:f4:f8:9b:82:e4:9c:dc:
25:f1:c4:94:c9:16:cc:b0:26:56:1c:b8:cf:f1:59:
a6:18:df:e6:1e:f3:c8:a8:38:96:43:ab:f6:af:d9:
f0:ba:de:72:43:2b:6f:1a:af:ba:0b:12:31:02:08:
eb:f9:25:78:a7:8e:4a:60:28:aa:26:6d:9b:bc:31:
0b:2d:ea:ef:6b:ec:8a:00:a4:22:b1:97:3a:57:c0:
89:89:62:50:65:77:c6:54:d0:b9:fb:ee:94:65:56:
7e:da:e1:56:74:2c:82:01:a4:47:8d:2e:da:e9:67:
72:a0:f0:a7:28:a3:c2:f3:bb:e5:21:38:51:25:bc:
cc:70:c7:fa:55:7c:bc:2e:a2:71:4c:4e:0e:e2:c3:
0e:f9:be:bd:e0:0f:18:d4:d0:43:a8:b6:d1:5b:ca:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:61:56:9C:7C:AB:C9:EE:74:82:88:03:8B:E1:20:44:88:0E:54
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ba:59:18:d1:c2:65:8d:6e:68:31:4c:65:31:0a:c8:31:64:
5b:2b:aa:0d:9e:7e:dc:a0:b8:d0:54:3c:25:34:80:a8:0a:56:
6c:e0:ff:99:f6:e6:27:c9:50:c6:89:0c:54:d0:62:f2:e1:62:
0d:2c:42:6b:06:49:cc:9f:b2:c8:ee:8d:b8:a8:d5:49:bf:18:
51:e3:ed:39:37:80:52:33:f2:19:88:d0:2c:4f:49:b4:a5:77:
d6:58:15:04:9f:72:05:cd:18:11:75:5c:18:73:18:92:13:11:
52:cd:1d:75:77:46:7a:66:c4:d0:26:9f:55:66:65:bb:96:09:
0a:24:c2:e8:1b:be:bc:ec:46:a4:76:1e:31:91:6c:c5:c6:c5:
ae:c8:c4:18:29:3e:76:69:f0:63:82:80:17:c5:78:9a:b3:82:
c2:70:0a:33:97:1b:76:d9:fe:f0:bf:6e:30:ec:73:f3:ed:33:
d0:6e:4a:f2:88:1d:14:c0:97:4d:99:ea:f0:3e:03:8c:ce:71:
83:08:66:60:07:7d:76:52:e3:7b:49:03:6a:09:b2:8e:93:b1:
6a:a9:27:9e:f2:d8:7d:d6:e9:03:68:7d:bf:e3:ce:96:f0:11:
31:14:32:e9:63:f2:9e:f7:cc:c8:c9:50:21:0e:17:35:15:f4:
ab:27:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:26:51 2026 by rpki-client