Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: ui9NuVkiQ4pejPfEKXlvssmtDlb14iRA9lpP6ABBjjg=
Subject key identifier: BE:81:95:E7:1E:44:94:CF:30:F8:90:5E:C0:2B:C6:B8:09:72:91:51
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 019D3A1CCD7745A96263EFE0539170230EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 15:00:59 +0000
Manifest this update: Sun 29 Mar 2026 15:00:59 +0000
Manifest next update: Mon 30 Mar 2026 15:00:59 +0000
Files and hashes: 1: epu072M-yH5fn0wfi8GRSm2aacI.roa (hash: 9aUM3YHdPt6HdRiEkTchPF8BsPvndsWsaCnn8YIY3Mc=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: USSBsIhYedatOoPH5FilBDqnTAYB0kOj3hZ+7MZY4FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:cd:77:45:a9:62:63:ef:e0:53:91:70:23:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Mar 29 15:00:59 2026 GMT
Not After : Mar 30 15:00:59 2026 GMT
Subject: CN=be8195e71e4494cf30f8905ec02bc6b809729151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:1a:22:b0:98:e6:f3:6f:8c:5c:17:c7:f3:
7e:8e:a2:36:5e:75:d9:53:40:ed:fe:d4:fe:96:bc:
a8:bf:3e:0a:cd:11:91:ea:46:f1:04:c6:b8:de:93:
62:72:14:b8:1a:82:5a:cf:f2:07:9b:5a:fb:a1:8a:
02:f3:c5:a2:b2:ba:8c:10:d8:6b:a9:e6:95:9b:f1:
ee:f3:f7:5a:e8:5a:fb:14:e8:9f:da:f3:c7:5f:e2:
bb:33:90:b9:5f:15:ad:78:b5:68:63:f5:f4:a3:f2:
67:2b:06:d9:29:8d:67:26:25:cf:f5:4b:ac:11:72:
f4:48:52:59:e5:d7:cc:e2:22:e3:de:29:99:f1:84:
6c:f1:e4:0a:8f:45:9c:5d:bd:79:04:59:7c:a3:cd:
7b:0c:0b:a5:42:f5:8f:3b:bc:0c:4c:95:1a:65:58:
20:b5:cd:2e:25:1a:8f:3d:df:b6:50:44:c3:3a:53:
1f:00:08:ff:21:81:68:e2:7c:d2:c6:cd:0e:1d:85:
c9:34:4d:90:cf:e2:9e:fb:a0:11:5d:5c:04:d2:ce:
06:6b:b1:7c:4c:9e:ac:c1:2c:ce:74:8d:a3:fa:fc:
d5:45:79:16:6c:99:9e:24:9d:99:e1:71:58:65:fc:
c9:4e:10:59:b8:47:02:a0:63:0d:d1:40:c7:cb:54:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:81:95:E7:1E:44:94:CF:30:F8:90:5E:C0:2B:C6:B8:09:72:91:51
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:dd:44:b9:3f:c5:40:ce:eb:bf:1f:da:52:00:e0:2b:48:47:
30:87:3e:4a:e0:ec:64:b5:9a:a8:1e:d6:ee:6e:d1:27:7c:bd:
84:10:f8:1c:0e:e0:b5:d7:b5:fc:0e:b8:bb:f1:40:7f:3a:82:
5f:32:7a:fa:d8:15:e3:41:1b:2e:98:1f:73:54:47:9e:5c:7f:
54:01:8c:53:b5:1e:76:34:fc:0c:d7:8f:54:5b:91:a9:60:53:
28:98:6a:e3:f8:3b:09:cb:0b:84:e7:5b:0a:fd:ec:e3:0b:59:
67:f3:98:0b:62:a3:7b:50:08:92:8f:24:46:7c:8b:fa:46:0d:
3c:4a:fe:1d:13:30:12:44:a0:0f:2e:dd:87:92:4c:6c:2d:b5:
d0:5f:8b:f4:80:46:be:a3:4f:ed:60:b0:a3:f4:4f:80:64:24:
9f:5c:ed:02:15:81:2a:50:64:d5:09:96:b9:29:b1:fe:2c:9a:
af:f1:e9:eb:50:f5:c7:c1:f4:fc:0d:c6:31:f9:90:69:4e:8a:
cc:42:c3:25:8c:65:0e:6b:9f:55:0d:d6:25:da:f2:01:b1:21:
f2:39:87:87:47:48:b9:dd:e2:76:47:b7:37:7b:0c:75:ec:f0:
2c:e0:a9:4f:05:e2:0e:8c:2f:73:1f:f1:38:a2:77:67:a4:e8:
6e:eb:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:45 2026 by rpki-client