Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: TJcVS+11J4Vruk/fLIT87xtW1bMF3yKIOW5DDmmtUy0=
Subject key identifier: 25:B3:C7:27:AE:FB:75:C1:15:64:B7:BA:86:51:D8:FF:28:88:67:B2
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019EB87CC2B4B58449A31B64ACAA4BB67830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 02B6
Signing time: Thu 11 Jun 2026 21:00:44 +0000
Manifest this update: Thu 11 Jun 2026 21:00:44 +0000
Manifest next update: Fri 12 Jun 2026 21:00:44 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: kS+BLdqf6thhMm8N/t+u99FXYxi8SNnXsf/si8avCYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:c2:b4:b5:84:49:a3:1b:64:ac:aa:4b:b6:78:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Jun 11 21:00:44 2026 GMT
Not After : Jun 12 21:00:44 2026 GMT
Subject: CN=25b3c727aefb75c11564b7ba8651d8ff288867b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:98:ba:9e:ae:56:cf:f4:bc:84:33:93:c3:
7c:f1:39:80:ba:bf:66:0b:8e:21:f1:b3:11:3c:b1:
a0:2c:0b:fa:cd:26:97:bd:4e:49:02:7e:b0:84:95:
ac:d1:db:f9:7c:e7:f7:4d:ae:38:9a:9f:72:5d:78:
30:c7:73:0a:f7:cc:27:80:9e:c5:f1:e7:93:99:95:
fc:3a:0e:e2:4e:95:58:45:00:66:ce:3e:61:33:9e:
f9:3b:55:a2:cf:7c:a9:28:a8:ce:cd:f3:08:d8:ae:
f8:28:29:d9:37:18:6f:3e:42:af:fb:e3:2e:37:3c:
d5:44:96:ff:9e:29:f9:ac:de:86:46:14:0e:b1:aa:
f5:f6:6f:0e:2d:52:38:ed:24:c4:b5:47:13:02:cf:
e8:2b:7f:da:40:fb:1d:42:e9:26:e9:4c:48:1f:d7:
d2:f3:75:96:fd:d9:24:72:81:2d:c0:e4:10:e6:72:
11:b6:60:e8:c6:37:0b:ae:d3:0e:76:8a:4a:03:99:
a9:f6:eb:ac:f9:c3:4c:86:43:3e:21:f2:00:5f:44:
7c:c2:f3:33:ef:22:e1:b0:16:57:55:1b:e7:4f:c7:
63:23:72:a9:ad:77:91:5d:3c:65:37:06:12:19:34:
70:b1:33:84:d5:a6:76:3e:0c:52:39:30:15:16:fc:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B3:C7:27:AE:FB:75:C1:15:64:B7:BA:86:51:D8:FF:28:88:67:B2
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:78:14:ea:8b:48:39:67:12:d7:a8:d1:41:ee:c7:48:52:
4d:b1:71:56:80:dd:8e:fe:e7:96:fc:e9:5f:aa:77:1a:1c:35:
bb:d5:42:3d:af:ac:7f:cc:b3:da:9a:d6:f2:04:52:55:01:c6:
e5:a8:ba:e7:a7:01:e0:78:59:56:e9:08:34:ce:34:39:54:de:
df:e6:49:b5:13:ad:0a:a4:e5:84:6f:f6:64:a8:9e:8c:ab:d4:
dc:57:fa:f0:7f:4c:b2:be:b2:de:02:06:cd:79:7b:ba:cc:2b:
5b:f6:1d:ac:44:d5:8f:c1:d1:b7:67:d6:a6:5d:56:d2:42:a1:
2e:9e:9b:93:81:d3:15:c7:7d:f9:10:b2:6f:e9:6d:13:02:2b:
d8:3d:72:9e:d1:7a:50:5f:de:9b:fc:e4:4b:14:eb:1a:68:06:
54:50:a6:5b:f5:d4:4d:20:23:96:e9:2e:52:b3:af:86:e0:a9:
5a:8c:02:60:b5:93:9f:cc:ad:fd:c8:32:bf:a9:9e:f3:32:57:
81:4a:c4:0f:24:eb:d4:dc:06:ff:bf:3c:31:ea:be:e2:d2:c4:
e4:93:cc:d3:e4:a4:92:62:a9:18:0a:d4:fc:c0:a6:9d:43:b1:
4d:d8:e8:8c:77:68:5d:da:b6:5f:7d:f8:72:43:35:f1:21:b8:
32:b8:52:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fMK0tYRJoxtkrKpLtngwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3
YjQ4OWQwHhcNMjYwNjExMjEwMDQ0WhcNMjYwNjEyMjEwMDQ0WjAzMTEwLwYDVQQD
EygyNWIzYzcyN2FlZmI3NWMxMTU2NGI3YmE4NjUxZDhmZjI4ODg2N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wmYup6uVs/0vIQzk8N88TmAur9m
C44h8bMRPLGgLAv6zSaXvU5JAn6whJWs0dv5fOf3Ta44mp9yXXgwx3MK98wngJ7F
8eeTmZX8Og7iTpVYRQBmzj5hM575O1Wiz3ypKKjOzfMI2K74KCnZNxhvPkKv++Mu
NzzVRJb/nin5rN6GRhQOsar19m8OLVI47STEtUcTAs/oK3/aQPsdQukm6UxIH9fS
83WW/dkkcoEtwOQQ5nIRtmDoxjcLrtMOdopKA5mp9uus+cNMhkM+IfIAX0R8wvMz
7yLhsBZXVRvnT8djI3KprXeRXTxlNwYSGTRwsTOE1aZ2PgxSOTAVFvxSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWzxyeu+3XBFWS3uoZR2P8oiGeyMB8GA1UdIwQY
MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt
ZDI5YTVkOTE4ZmQ4LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4
LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgV4FOqL
SDlnEteo0UHux0hSTbFxVoDdjv7nlvzpX6p3Ghw1u9VCPa+sf8yz2prW8gRSVQHG
5ai656cB4HhZVukINM40OVTe3+ZJtROtCqTlhG/2ZKiejKvU3Ff68H9Msr6y3gIG
zXl7uswrW/YdrETVj8HRt2fWpl1W0kKhLp6bk4HTFcd9+RCyb+ltEwIr2D1yntF6
UF/em/zkSxTrGmgGVFCmW/XUTSAjlukuUrOvhuCpWowCYLWTn8yt/cgyv6me8zJX
gUrEDyTr1NwG/788Meq+4tLE5JPM0+SkkmKpGArU/MCmnUOxTdjojHdoXdq2X334
ckM18SG4MrhS3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:31 2026 by rpki-client