Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: 9xw15wEfnzlWbhwhFT+jcvEp1aDJdVHf0OoLPvXl190=
Subject key identifier: D3:51:AA:F0:F2:06:58:B3:8E:8A:A2:70:FA:B1:CF:7C:97:D1:E0:08
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019D37C0493A5AC457E0285A6DD4B6FADF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 0308
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: TYGkI1M8+pSE2qwuQF2OCtOssGlkxEQZUuSJo1Q2168=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:49:3a:5a:c4:57:e0:28:5a:6d:d4:b6:fa:df:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=d351aaf0f20658b38e8aa270fab1cf7c97d1e008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:d8:60:ba:8e:88:a2:d3:dc:d9:36:91:89:
51:27:b8:7c:7b:c3:b8:25:36:bd:b7:ff:f8:01:03:
60:4a:66:9b:fd:63:8e:b1:95:8a:1b:30:73:01:63:
c3:cc:70:80:85:b0:84:e4:4c:d5:41:7a:31:91:c7:
04:9a:39:eb:b9:0a:ca:44:d1:21:a0:5e:d3:c6:6f:
3e:54:2c:27:79:cf:ca:53:86:9b:d0:7b:94:12:9c:
1f:f1:06:74:84:70:aa:88:97:f7:5c:5e:b7:d0:9c:
61:18:7d:be:a0:61:fb:b2:7a:d7:23:0b:83:17:9f:
af:65:d3:1f:33:8e:0d:5a:53:3f:8e:18:9a:7e:13:
e5:b7:e3:76:d9:e8:8b:75:0c:12:93:45:b7:49:33:
f4:c3:bc:76:15:e4:61:5f:02:41:3b:a8:a8:7d:15:
f7:c7:5f:17:69:e1:66:23:f0:81:fd:50:f9:a3:a2:
4b:df:91:93:45:11:59:48:6c:13:96:94:0c:27:59:
1d:9d:56:2b:25:92:e2:24:e4:b6:51:3a:b7:79:1f:
e2:a5:ae:67:c2:33:1f:c4:9f:a5:b4:1d:e4:32:04:
0f:5d:d0:f7:1c:4e:f4:f0:1b:a8:bf:14:7c:f2:25:
a6:4d:2f:68:05:0f:7b:76:f9:e0:7c:f1:f9:9f:24:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:AA:F0:F2:06:58:B3:8E:8A:A2:70:FA:B1:CF:7C:97:D1:E0:08
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1d:59:a8:97:53:d3:a3:0d:a9:b3:09:3a:a1:35:7a:c2:6a:
6f:fe:71:81:1b:cf:ec:8f:e0:63:47:42:0d:ab:eb:b0:45:f7:
ed:ae:8e:df:ae:87:7e:ba:0c:f3:6c:b6:98:a4:92:9c:a0:92:
94:28:6b:fe:16:fd:a8:2e:fd:09:90:83:76:6c:13:f7:90:ba:
8c:cf:26:a4:8b:01:68:e0:24:f2:e9:fb:35:66:62:9c:af:29:
3b:21:ce:3c:01:ef:1d:c3:4d:b1:b8:a7:23:57:f4:2c:3b:b9:
70:03:ef:4f:f4:af:59:4c:23:ce:57:e2:c3:53:e7:16:22:00:
ed:47:19:3a:a2:cb:09:95:ba:28:56:48:a6:cc:19:d9:ad:7f:
2d:20:5f:f6:9f:23:a3:ad:ad:b2:73:15:66:ba:c3:5d:96:32:
e2:58:91:a7:bb:81:bc:b5:71:b8:8a:c0:68:d6:0d:33:de:31:
55:07:5c:f2:ff:b1:fe:4c:c4:d8:51:b8:bf:32:6c:f6:dd:e6:
2d:a0:a6:44:34:98:57:1b:7e:d7:bf:16:74:c3:f7:65:db:3e:
75:0a:2f:4b:63:b7:49:cb:c3:1a:9b:12:90:97:e5:30:f8:3e:
2b:4f:0d:9d:2d:a0:cd:e4:91:a3:3a:89:dd:ce:a8:de:ef:a7:
3c:da:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:08 2026 by rpki-client