Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json)
Hash identifier: aLHezN5EYpBU6CaUGO1vZDwcDAO1WraVu9Kpi4FkwkQ=
Subject key identifier: 29:A2:12:C8:5C:A5:84:B7:35:FD:22:AC:F9:F3:5F:21:38:8C:61:4A
Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Certificate serial: 019D37F6FA351A60A898DB86DA85434741FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
Manifest number: 037F
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: 9JcY5F-IdYeKq8GKyIuRVtqSSwY.roa (hash: tKt98bn7IEqVw7tRtArn7Eg/aO1ukt/5DnVwd3eE18g=)
2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: n1981gUTg/PWZX1t4l73oJda9fJpVyHX3GzYg5QunlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fa:35:1a:60:a8:98:db:86:da:85:43:47:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=29a212c85ca584b735fd22acf9f35f21388c614a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:1c:d7:52:9f:d6:f6:7f:0d:8f:36:5e:9b:
00:8c:27:32:15:3f:e3:15:f5:a7:00:9f:4e:eb:f7:
1b:7f:bb:03:b0:56:e0:f0:73:25:13:fc:18:b3:fb:
b7:4c:21:2e:cc:12:39:4f:64:7e:5b:a9:34:49:13:
d8:2b:f0:3d:a5:c1:61:1d:18:55:42:8b:6e:e1:ed:
a0:cc:e5:db:99:5a:5c:73:85:49:8f:be:a1:b5:55:
40:01:62:06:fa:bb:fb:ee:00:d3:f1:8e:eb:00:cd:
9e:10:59:79:f5:22:51:c6:23:7d:87:91:bf:e8:f8:
bf:1f:3b:0e:a6:9f:bb:6f:d7:89:09:af:fb:fb:f8:
58:36:31:8a:f2:7f:b3:14:e6:18:be:a5:8a:61:e2:
58:27:c4:8a:32:a1:cc:1f:76:73:1d:d5:e4:19:56:
62:97:a6:b2:9f:46:f3:59:e2:75:c2:88:09:3a:5b:
50:a0:45:21:74:8f:71:60:06:f6:2b:e4:a7:ec:21:
ea:74:f5:82:a9:ea:35:f8:ab:18:de:6c:e2:90:f6:
fa:ff:02:12:a1:de:a8:59:c2:43:ee:35:c0:61:32:
08:1a:22:0e:2b:42:9c:a4:43:75:89:ac:06:1e:fa:
2b:66:33:c5:a5:54:99:ad:92:c2:89:79:ac:e5:82:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:12:C8:5C:A5:84:B7:35:FD:22:AC:F9:F3:5F:21:38:8C:61:4A
X509v3 Authority Key Identifier:
keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:75:d6:d0:85:34:22:f4:4f:5e:99:65:1e:e0:de:fa:40:
d5:54:32:c3:da:eb:2b:c5:ac:53:02:73:f6:16:04:7b:e5:9c:
cf:88:5f:6c:83:ec:27:58:0f:14:28:ea:67:b8:ad:be:4f:0e:
e1:7e:85:37:0e:55:14:89:12:0a:45:e9:08:ba:4b:21:45:1a:
46:72:28:2c:76:3c:4a:62:6b:ba:cf:02:e8:22:31:d0:e2:3d:
88:83:ec:62:f3:5b:56:31:d6:54:ed:fb:a5:9b:ce:c4:44:b7:
7f:f3:d1:f7:04:c7:19:91:b4:aa:55:98:2a:f5:4d:37:5a:46:
08:74:82:b4:1e:45:65:91:eb:64:7a:f5:ba:67:50:16:51:4a:
63:57:e0:d7:ba:5c:11:65:5c:2c:91:47:b0:db:22:a9:7a:bf:
cf:75:87:07:f2:4d:b2:ac:77:f6:6c:d4:76:cb:cd:94:9f:60:
d4:13:c8:80:da:9a:ee:64:ae:a0:7d:5d:3d:f1:7a:82:7a:c9:
67:ac:06:fa:bb:0f:48:03:c2:31:c9:8e:1e:ef:10:3b:4e:ad:
b0:6a:c1:dd:04:ae:8f:39:93:3f:56:da:b3:89:51:86:73:93:
cc:14:b2:45:ee:ea:0d:c2:e4:b5:3c:25:c2:df:ab:19:6c:36:
63:4b:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:43 2026 by rpki-client