Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: UST8igaHajNF7hPZuwnIc4TlbEv4WNhdXTWyvrjVMjc=
Subject key identifier: D9:0E:63:85:F6:F9:E5:6F:4B:7D:0D:33:AC:F6:F2:CE:78:65:2F:65
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019CE146CCD2FBF5B7F72E4CEC303ED511D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 01C2
Signing time: Thu 12 Mar 2026 09:00:39 +0000
Manifest this update: Thu 12 Mar 2026 09:00:39 +0000
Manifest next update: Fri 13 Mar 2026 09:00:39 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: SYArZZmhAIfvHNzAGaL5TcdOwYZGC+njsxwqPAMf0kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:46:cc:d2:fb:f5:b7:f7:2e:4c:ec:30:3e:d5:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Mar 12 09:00:39 2026 GMT
Not After : Mar 13 09:00:39 2026 GMT
Subject: CN=d90e6385f6f9e56f4b7d0d33acf6f2ce78652f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:72:10:a7:51:51:eb:5b:21:94:44:0a:e1:
e9:6b:8a:69:0c:9f:1c:b8:fa:b2:69:0b:cc:9d:79:
c2:04:8d:70:4d:c1:f5:6a:04:c6:c5:f9:db:b8:9e:
3a:84:52:ab:b3:af:fc:b2:3f:0e:d1:d1:ea:21:5b:
d5:3b:0b:6e:37:58:bc:d3:1b:70:42:21:66:0b:ac:
eb:e0:f9:b2:57:47:00:d1:4f:c8:e7:c4:51:74:0a:
18:6f:ab:d9:48:35:21:b8:15:29:c4:eb:1b:8d:ed:
6d:e1:fe:3b:79:d5:00:85:e1:07:54:11:04:6a:0b:
04:8d:4d:90:df:c9:b8:0d:3b:4f:b7:cb:52:8b:ef:
df:16:be:c4:85:1a:e3:cb:c5:14:da:2f:cb:8b:72:
d2:db:c0:b6:77:8c:fd:b7:ce:f2:f2:48:3a:8c:32:
f2:1c:ab:df:06:46:76:f2:64:30:3e:a8:d9:b3:61:
f2:c1:f3:30:84:da:45:00:be:e7:85:b3:36:e0:19:
c1:8b:57:70:fd:fe:93:01:19:14:1c:f4:e1:8e:b4:
17:19:59:30:d1:14:a6:69:f9:c0:8b:27:a2:d9:a4:
ff:63:90:05:bd:e4:cf:b8:f0:dc:e8:1e:71:b5:72:
c6:3d:e9:36:91:c7:14:a3:97:33:5d:c1:04:b2:49:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0E:63:85:F6:F9:E5:6F:4B:7D:0D:33:AC:F6:F2:CE:78:65:2F:65
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6b:f3:91:c9:67:72:dc:18:c7:04:08:99:ed:bb:54:9f:0c:
8c:fd:ca:c4:1f:3a:02:d6:8e:43:7e:54:00:e3:8b:6a:30:63:
63:42:c6:5b:4b:be:c1:0c:fa:a9:0a:85:f6:10:f0:b6:a7:d4:
06:9b:1d:81:40:2a:b4:8a:10:f0:58:91:d2:4f:26:f1:77:6b:
a6:4f:5d:94:a6:15:5a:5a:09:ce:e8:69:9c:b8:e0:2b:dc:74:
f9:1f:64:1a:fe:de:33:0b:d2:70:78:04:dd:7a:d3:49:74:59:
01:e3:5b:ac:95:47:5a:8a:72:b0:c4:3c:7a:d1:07:2c:a6:fd:
09:b6:64:ba:4b:3a:6d:a1:c8:da:75:37:64:0a:45:20:21:c4:
1e:c7:65:03:8f:3c:69:0e:0a:6d:1f:59:52:21:8d:49:22:4b:
01:7f:31:0e:fd:f4:ee:98:ec:41:5f:e0:48:45:c8:a3:df:87:
1a:78:e3:3f:1d:f9:b9:db:48:ca:9e:d3:21:ff:f2:be:c4:97:
8c:39:c2:81:3f:1e:5f:41:2d:d1:42:86:17:2a:54:26:2a:dd:
a1:42:b1:ba:a7:1e:9b:1e:f6:a6:ff:b9:44:c5:c6:c8:97:ed:
43:31:b4:e2:c0:c1:dd:bf:14:9c:18:5f:ef:22:af:ad:95:22:
26:fc:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:27:26 2026 by rpki-client