Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: /++3b/Sxm/Kh+BvDmpxM8ieMOuVtAxMGt1YiXa5gZnQ=
Subject key identifier: 03:82:54:23:0C:0A:FC:4A:EA:B6:9A:09:B5:0E:C4:85:59:26:97:7E
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019CF3F242AC0A8C088874FFB5B61FEE71F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0E70
Signing time: Mon 16 Mar 2026 00:01:06 +0000
Manifest this update: Mon 16 Mar 2026 00:01:06 +0000
Manifest next update: Tue 17 Mar 2026 00:01:06 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: eV0q349dd94t63AFTGkz7m2OATCX5ivdSQpDcCek39Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:42:ac:0a:8c:08:88:74:ff:b5:b6:1f:ee:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Mar 16 00:01:06 2026 GMT
Not After : Mar 17 00:01:06 2026 GMT
Subject: CN=038254230c0afc4aeab69a09b50ec4855926977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:20:12:1c:3b:82:09:65:c2:ed:ab:5a:83:
48:42:e1:bd:53:a2:ac:ea:a9:83:22:9e:0c:54:a8:
ab:30:87:0b:9e:94:2b:16:76:64:50:72:6a:0f:e3:
6d:86:e6:86:ec:f7:f5:90:68:da:70:64:e0:00:6a:
af:f5:c7:16:3d:f2:da:c7:2d:cc:30:15:7c:b0:81:
6c:33:4e:aa:72:d6:07:68:75:15:22:0e:be:50:4d:
ad:44:7d:7b:5b:a7:95:81:4a:d8:92:f6:4c:b7:0a:
e8:20:f2:6c:f8:fc:41:2d:60:2a:0a:34:0f:98:26:
e2:6b:52:43:34:91:e9:84:f4:02:d7:6c:3f:6e:8f:
c2:36:50:91:9b:6d:85:35:10:e1:32:05:1b:22:6b:
38:04:6e:66:ec:0b:84:94:e5:a5:8a:47:a7:f2:ba:
1a:8f:b9:90:57:0b:1a:66:70:17:3a:ee:93:3d:68:
7c:b9:21:e1:a0:9a:44:9e:b3:b5:76:87:86:a0:9c:
86:ad:47:d6:b4:7e:6a:24:2f:b5:fa:1a:be:66:41:
90:c6:de:4c:2a:b2:d7:6b:e3:b1:2f:2b:cd:fe:6c:
8a:81:ab:8d:63:5b:ae:0b:97:15:9f:94:53:3a:cf:
f5:eb:c9:48:e5:ca:98:76:a1:c1:37:87:1d:2a:49:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:82:54:23:0C:0A:FC:4A:EA:B6:9A:09:B5:0E:C4:85:59:26:97:7E
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d7:a0:b1:f0:14:2e:65:35:4c:03:c4:53:86:c7:66:44:8a:
be:c6:57:12:ef:30:b5:47:12:1f:f5:92:46:e3:9e:18:74:4c:
e3:ce:6e:8f:0a:12:2e:ee:04:ea:4b:cf:7c:e6:a8:e0:5b:a1:
33:fd:50:a5:f4:fa:aa:2d:e3:6a:10:16:9c:ea:af:9f:6e:57:
34:5c:b1:7b:8f:02:03:1e:1d:fb:45:03:0f:2c:4b:5c:d1:6f:
f4:cb:10:8a:2c:df:7a:f2:6a:76:cb:67:15:50:23:cb:bc:54:
ae:ca:b3:da:39:6a:b6:be:67:57:8f:bc:97:72:ee:23:b9:57:
b7:be:c8:18:1a:67:b1:ae:81:0e:1f:48:0a:64:f0:70:c8:9a:
9d:36:12:95:7c:71:ef:11:38:72:60:3f:22:07:d8:fb:5b:eb:
24:fe:61:4d:7b:e0:eb:99:58:7e:e9:9b:f4:84:37:e6:8b:cb:
0a:31:c7:95:a4:a0:2a:28:da:fd:bf:39:d8:31:7f:fc:be:5f:
a8:89:6a:32:fc:ae:61:a0:72:2e:7d:2c:c7:45:d8:4a:59:5b:
db:6a:9b:07:46:f3:cd:57:03:c6:ae:93:e4:b2:2c:c8:59:ea:
27:04:ee:e4:6a:83:f8:c7:e9:c9:f8:d9:75:36:e6:1a:83:ff:
e3:46:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:37:21 2026 by rpki-client