Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: XOBUkKFlKV0N/N2XnG5Btd2lzwZUOavXpKgczsF85NA=
Subject key identifier: 6D:C8:AD:79:97:83:12:F1:2A:A6:C2:84:35:3F:5D:2E:72:BD:10:73
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019DCCE1E3114CEB0EF82A4951567CF811F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 023C
Signing time: Mon 27 Apr 2026 03:00:48 +0000
Manifest this update: Mon 27 Apr 2026 03:00:48 +0000
Manifest next update: Tue 28 Apr 2026 03:00:48 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: CUWxmF8ZL8SCAV5CFXsyTlQ8YXoR6i9Eu1jxcRT3QFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:e3:11:4c:eb:0e:f8:2a:49:51:56:7c:f8:11:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Apr 27 03:00:48 2026 GMT
Not After : Apr 28 03:00:48 2026 GMT
Subject: CN=6dc8ad79978312f12aa6c284353f5d2e72bd1073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:7c:12:5e:35:f0:0a:2e:6f:82:b9:9f:1e:
c3:53:1b:6d:ed:af:22:b8:4d:9f:b7:76:28:a6:fa:
8e:eb:13:d2:13:b3:04:11:86:03:a2:2a:14:3e:1a:
09:82:39:49:10:48:41:6e:de:7e:a5:16:ed:1e:e5:
4a:91:44:0b:ac:d9:91:30:1e:7c:ff:d1:e6:54:b5:
3a:84:d4:f2:36:58:1f:67:52:bf:cb:4a:93:d6:e7:
cf:20:fe:cc:46:0b:35:36:be:da:4a:5e:dd:62:43:
9b:72:4a:2c:1a:41:bf:1b:60:ce:1b:84:98:02:b7:
e5:dd:70:d2:ff:81:e7:42:1e:e0:1b:1e:51:ea:b7:
bf:f3:e8:09:88:4a:bd:3d:06:d3:3a:d2:85:42:b9:
48:3b:e2:f8:58:59:2e:e6:94:b6:d4:b3:a8:2e:0d:
c0:a1:13:b2:23:7d:a0:fd:50:ec:68:7b:7c:0d:c4:
39:74:70:66:1c:9b:8c:b4:5f:9e:e7:5b:70:a1:bb:
58:af:86:d7:23:23:4f:c3:1e:75:73:1a:7f:48:ac:
82:53:cc:92:63:05:64:66:0a:6c:0a:04:76:d2:b8:
6d:77:73:07:60:62:c1:34:b0:9b:04:21:07:16:5d:
83:88:8c:6b:94:5d:8d:3d:71:3b:11:0e:c2:b0:e1:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:AD:79:97:83:12:F1:2A:A6:C2:84:35:3F:5D:2E:72:BD:10:73
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f0:35:04:33:53:c1:aa:b7:24:34:5b:1c:db:60:c1:cc:eb:
d0:2d:9a:8c:03:e5:4f:eb:23:62:e1:86:b0:d4:8f:a5:9c:d4:
41:99:65:64:3e:a1:ff:6a:03:4d:b3:00:dc:35:3d:87:62:18:
ca:7c:5c:42:23:1d:2f:c9:b9:02:00:55:25:7c:5e:c9:a6:ff:
ce:11:ad:e9:23:9b:5e:f6:fd:f6:d7:d3:94:25:eb:42:02:2b:
64:ea:c1:0d:67:78:72:7b:b1:ac:10:50:c2:06:34:49:3e:b3:
b8:74:d3:35:35:13:e1:c7:9c:56:9f:b3:ee:08:e0:71:83:94:
9e:69:b5:f3:6a:1b:c0:a3:17:4d:fa:ed:ec:10:ff:55:11:12:
ab:c3:37:97:51:3f:f2:bf:c2:b8:5f:69:bd:f7:12:f2:4f:56:
ea:83:c1:eb:2d:e7:7c:5d:39:3b:8d:34:dd:b0:58:68:6d:0b:
99:38:88:0d:ac:da:6c:b0:03:f7:96:e4:55:12:aa:d0:6c:6d:
9a:87:5d:f0:28:b8:1c:11:cc:68:85:2e:6e:15:57:3b:1a:01:
73:48:3d:a4:63:87:1f:60:ce:b9:d5:ed:28:46:66:11:d6:61:
55:58:07:c5:8a:7f:e5:39:b0:e5:88:7b:0c:b2:6d:0a:2c:97:
03:53:2d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4eMRTOsO+CpJUVZ8+BHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3
YjQ4OWQwHhcNMjYwNDI3MDMwMDQ4WhcNMjYwNDI4MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZGM4YWQ3OTk3ODMxMmYxMmFhNmMyODQzNTNmNWQyZTcyYmQxMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb98El418Aoub4K5nx7DUxtt7a8i
uE2ft3YopvqO6xPSE7MEEYYDoioUPhoJgjlJEEhBbt5+pRbtHuVKkUQLrNmRMB58
/9HmVLU6hNTyNlgfZ1K/y0qT1ufPIP7MRgs1Nr7aSl7dYkObckosGkG/G2DOG4SY
Arfl3XDS/4HnQh7gGx5R6re/8+gJiEq9PQbTOtKFQrlIO+L4WFku5pS21LOoLg3A
oROyI32g/VDsaHt8DcQ5dHBmHJuMtF+e51twobtYr4bXIyNPwx51cxp/SKyCU8yS
YwVkZgpsCgR20rhtd3MHYGLBNLCbBCEHFl2DiIxrlF2NPXE7EQ7CsOHlfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3IrXmXgxLxKqbChDU/XS5yvRBzMB8GA1UdIwQY
MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt
ZDI5YTVkOTE4ZmQ4LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4
LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/A1BDNT
waq3JDRbHNtgwczr0C2ajAPlT+sjYuGGsNSPpZzUQZllZD6h/2oDTbMA3DU9h2IY
ynxcQiMdL8m5AgBVJXxeyab/zhGt6SObXvb99tfTlCXrQgIrZOrBDWd4cnuxrBBQ
wgY0ST6zuHTTNTUT4cecVp+z7gjgcYOUnmm182obwKMXTfrt7BD/VRESq8M3l1E/
8r/CuF9pvfcS8k9W6oPB6y3nfF05O4003bBYaG0LmTiIDazabLAD95bkVRKq0Gxt
modd8Ci4HBHMaIUubhVXOxoBc0g9pGOHH2DOudXtKEZmEdZhVVgHxYp/5Tmw5Yh7
DLJtCiyXA1MtBg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:57:55 2026 by rpki-client