Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: PaemDVn8cPxUYNeROPkzS9nSwixC35xFLrGKEOXC6Fo=
Subject key identifier: E6:B3:0A:AA:3E:CD:F9:FE:BA:A6:47:AE:C4:4E:1A:AD:F5:FE:7B:36
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 01A089E74CDAC13B5A8A0985A66ACFE5207F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 03A7
Signing time: Thu 10 Sep 2026 06:00:31 +0000
Manifest this update: Thu 10 Sep 2026 06:00:31 +0000
Manifest next update: Fri 11 Sep 2026 06:00:31 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: 6InIxZA9U0q/bGZ4GGfPnnibbAMNYOuIQIkJ2uqnc/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:4c:da:c1:3b:5a:8a:09:85:a6:6a:cf:e5:20:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Sep 10 06:00:31 2026 GMT
Not After : Sep 11 06:00:31 2026 GMT
Subject: CN=e6b30aaa3ecdf9febaa647aec44e1aadf5fe7b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:88:50:b3:e9:02:34:32:fd:17:1b:04:f9:
08:99:b8:af:93:30:f3:3d:d6:9c:71:12:c4:be:d5:
4b:88:89:52:9a:be:9f:b2:ad:31:d6:6f:3d:6b:13:
b4:d5:aa:32:bf:f2:89:8a:32:fa:8b:7b:e5:dd:3b:
85:f5:86:39:e8:f8:01:bf:e7:08:df:15:69:4d:f4:
a5:32:01:ee:1f:1a:b9:26:cc:8a:ba:0e:fc:5d:5f:
0d:71:a3:f1:73:ca:2b:ed:d4:4f:2b:a2:36:8b:fd:
e1:c4:e2:6a:ae:b2:f9:2d:48:5b:e4:61:b1:2e:03:
a9:29:50:9c:1b:51:66:ef:d7:26:4b:d9:06:e7:c2:
65:57:c3:68:b9:d4:46:9f:35:17:0f:3f:f4:ec:a4:
82:4a:e2:d3:85:3f:4b:81:d2:05:38:c1:a3:12:03:
10:ba:b7:18:04:a0:44:e0:4b:6f:06:20:a9:32:de:
dd:56:40:38:05:f7:67:0d:eb:0b:6e:80:fa:b5:80:
ba:01:92:76:21:9d:40:79:81:80:6a:b7:73:26:4d:
a9:4e:25:d1:f5:0d:03:e6:cd:77:23:0e:39:bc:6d:
55:a2:99:a2:55:f8:02:c2:7c:4c:d4:d6:ae:8e:23:
6c:77:4f:24:c6:76:d5:ac:c2:08:91:71:6b:b9:4e:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:0A:AA:3E:CD:F9:FE:BA:A6:47:AE:C4:4E:1A:AD:F5:FE:7B:36
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:21:3e:6d:63:56:5d:69:8e:36:f3:c4:f7:90:31:33:10:30:
ff:47:7d:6a:42:ba:ca:ba:de:00:c4:24:3a:a9:bb:c0:76:11:
86:15:c9:01:72:10:eb:0d:89:1d:f9:8b:41:46:9a:c5:ef:fe:
b0:ff:c9:6f:4c:9b:19:1e:00:65:e2:70:3f:76:d1:c8:c5:e3:
a3:dd:53:bf:e7:c5:9c:40:65:44:cb:79:8b:b2:81:38:45:05:
e3:e4:48:12:0c:8f:49:99:80:61:b9:91:32:04:d0:7e:d6:92:
b5:cb:d8:a8:85:bf:5f:02:3f:29:86:cf:2e:43:20:61:30:1f:
8f:64:a4:ea:91:63:87:37:18:46:34:05:2d:32:be:09:a7:fa:
1d:67:39:a4:0e:e4:ba:d8:73:f8:32:72:0c:ac:4b:b7:67:9a:
17:eb:ce:16:2a:fe:6c:e3:09:24:c7:31:f8:65:cb:c8:53:97:
f9:e9:54:68:77:6b:93:33:9d:12:cc:62:91:d9:71:4d:3c:e6:
8e:15:0e:49:08:a7:c8:21:5d:d4:f4:c5:c5:50:0a:3c:98:35:
b2:88:22:0b:24:cb:f1:0e:b7:ef:36:ba:ca:21:69:6d:26:ae:
18:16:6a:ff:69:53:74:b7:96:5e:32:34:80:44:69:66:d8:52:
bc:83:68:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ50zawTtaigmFpmrP5SB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3
YjQ4OWQwHhcNMjYwOTEwMDYwMDMxWhcNMjYwOTExMDYwMDMxWjAzMTEwLwYDVQQD
EyhlNmIzMGFhYTNlY2RmOWZlYmFhNjQ3YWVjNDRlMWFhZGY1ZmU3YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGiIULPpAjQy/RcbBPkImbivkzDz
PdaccRLEvtVLiIlSmr6fsq0x1m89axO01aoyv/KJijL6i3vl3TuF9YY56PgBv+cI
3xVpTfSlMgHuHxq5JsyKug78XV8NcaPxc8or7dRPK6I2i/3hxOJqrrL5LUhb5GGx
LgOpKVCcG1Fm79cmS9kG58JlV8NoudRGnzUXDz/07KSCSuLThT9LgdIFOMGjEgMQ
urcYBKBE4EtvBiCpMt7dVkA4BfdnDesLboD6tYC6AZJ2IZ1AeYGAardzJk2pTiXR
9Q0D5s13Iw45vG1VopmiVfgCwnxM1NaujiNsd08kxnbVrMIIkXFruU59twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOazCqo+zfn+uqZHrsROGq31/ns2MB8GA1UdIwQY
MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt
ZDI5YTVkOTE4ZmQ4LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4
LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiE+bWNW
XWmONvPE95AxMxAw/0d9akK6yrreAMQkOqm7wHYRhhXJAXIQ6w2JHfmLQUaaxe/+
sP/Jb0ybGR4AZeJwP3bRyMXjo91Tv+fFnEBlRMt5i7KBOEUF4+RIEgyPSZmAYbmR
MgTQftaStcvYqIW/XwI/KYbPLkMgYTAfj2Sk6pFjhzcYRjQFLTK+Caf6HWc5pA7k
uthz+DJyDKxLt2eaF+vOFir+bOMJJMcx+GXLyFOX+elUaHdrkzOdEsxikdlxTTzm
jhUOSQinyCFd1PTFxVAKPJg1sogiCyTL8Q637za6yiFpbSauGBZq/2lTdLeWXjI0
gERpZthSvINowA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:33:07 2026 by rpki-client