Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: Gy34ZCnvI6cTXkAbsuNbeldFTZ21ckGEUGF3zc3HJHI=
Subject key identifier: CD:6B:D7:66:CB:4C:0E:CA:57:69:F7:A1:B4:4B:5C:98:A2:A5:81:7C
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 01A183074D185DF4AA4F58996D3B1DA258CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 0428
Signing time: Wed 28 Oct 2026 15:00:56 +0000
Manifest this update: Wed 28 Oct 2026 15:00:56 +0000
Manifest next update: Thu 29 Oct 2026 15:00:56 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: phC1XhjtFF6NtyyKXHNAr/BpF8Hctd/s2K1AJrlGBz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:4d:18:5d:f4:aa:4f:58:99:6d:3b:1d:a2:58:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Oct 28 15:00:56 2026 GMT
Not After : Oct 29 15:00:56 2026 GMT
Subject: CN=cd6bd766cb4c0eca5769f7a1b44b5c98a2a5817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:1c:0a:90:8e:4e:f2:e9:fb:9b:f9:e2:52:
58:a0:2d:1f:03:25:58:d6:f7:c0:6c:75:97:7a:2c:
58:b3:23:44:1b:21:59:06:bb:df:ce:cf:91:5e:0e:
14:8f:db:23:3b:10:95:7b:0e:5f:67:06:0d:a9:34:
c4:6f:db:f3:7d:14:52:69:01:f3:1b:1f:00:a3:75:
94:9f:71:7d:0a:82:59:b2:65:c0:e7:dc:7e:f9:5c:
2c:cb:0b:22:cd:42:3c:63:e2:d9:61:db:be:2f:2a:
05:7a:bb:be:61:9a:28:b4:45:2a:fa:90:72:9e:ec:
c0:c4:fc:03:66:a8:73:c6:07:c7:13:3a:db:1f:4c:
fa:7d:83:df:07:04:1f:2d:6d:6c:5c:97:24:10:ba:
01:25:56:07:53:75:f0:1c:89:25:6d:51:60:69:d0:
98:45:3a:84:05:a6:2b:71:c3:5a:ca:35:f7:04:2c:
13:dc:bb:ae:4f:bf:a7:49:dd:10:c5:9e:30:d8:4c:
36:ba:d7:3b:a4:df:b3:3d:8c:df:cb:31:21:63:d7:
56:de:69:88:a2:3f:93:3c:e4:79:ac:c8:44:4e:06:
05:75:4d:33:09:2a:b3:e3:67:d2:e1:e2:80:8a:66:
cb:6f:e8:95:7a:82:53:ac:b2:0b:76:b3:49:b0:fb:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:D7:66:CB:4C:0E:CA:57:69:F7:A1:B4:4B:5C:98:A2:A5:81:7C
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2b:35:ec:77:8a:fa:2b:cd:5c:86:2d:97:c7:d4:84:64:e0:
33:0a:67:d0:ee:4e:6d:1e:e8:8e:50:24:d0:31:8b:df:d2:be:
ad:b5:60:57:b5:16:7d:00:62:fa:4d:70:85:5f:ef:4b:02:db:
c2:4d:df:7d:bf:69:de:74:f3:93:47:55:0c:b5:21:5f:ff:50:
9a:b9:6f:f3:4f:76:29:2a:5a:ea:79:3d:fa:f1:e0:dc:30:c7:
5b:15:63:2d:af:e8:dd:42:eb:b0:da:fe:75:f3:ff:ce:f0:ae:
41:15:04:5d:16:d3:77:e8:99:e3:e9:1c:4c:f3:1c:e0:64:47:
f0:ee:5f:b6:93:99:9e:fe:db:dc:7c:f9:55:e7:50:d7:ff:c3:
b2:39:b1:29:29:f9:14:21:85:e5:27:7f:86:74:e1:c0:dc:75:
59:4a:f0:8a:54:f8:bd:7a:56:e5:ae:94:88:e9:31:9e:c1:89:
78:3b:a1:eb:54:af:56:97:61:cc:bf:e0:42:fb:8e:0d:2c:5b:
ee:f4:40:7b:c8:ea:b3:4a:ce:9e:02:d0:79:fe:ba:cf:59:f2:
90:fb:ec:e4:03:fc:37:be:f6:85:f1:31:38:36:0a:fd:6f:47:
d0:ae:63:1c:84:2d:89:a0:45:ce:f8:30:f3:78:f7:16:04:aa:
a0:c0:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:00 2026 by rpki-client