Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: FddUId12AYUw/r03E/UKveWT4sUxwf55hPEq9rUFe6Y=
Subject key identifier: 38:22:2A:83:E0:8A:45:99:E1:7C:1E:1B:91:1D:2E:4C:A6:4E:46:02
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 019C7D801E93522293B453CA4B4DE2F24D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 12FF
Signing time: Sat 21 Feb 2026 00:01:14 +0000
Manifest this update: Sat 21 Feb 2026 00:01:14 +0000
Manifest next update: Sun 22 Feb 2026 00:01:14 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: MSY/doMfrMiVeZKNeiHtbiSqHMEKZYqZWhjDW1ydJdw=)
2: r5JhX1WVRIuKls91bpGfQhBP5nc.roa (hash: 90E5B0cY9riZPq586g/WUgh0i6XK0BnsOAwKiwltDoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:80:1e:93:52:22:93:b4:53:ca:4b:4d:e2:f2:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Feb 21 00:01:14 2026 GMT
Not After : Feb 22 00:01:14 2026 GMT
Subject: CN=38222a83e08a4599e17c1e1b911d2e4ca64e4602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:c1:da:59:20:46:8c:b8:4b:1c:0c:32:94:
b7:d8:fe:96:ce:a8:b0:8d:0e:82:f0:ed:01:fe:96:
f0:9b:53:44:d1:78:28:5f:73:bd:97:2a:23:79:42:
bb:36:bb:6a:6b:7b:89:01:9e:b4:de:74:2a:31:72:
c4:25:67:73:17:46:79:95:e9:c1:73:65:bf:b3:18:
2a:6a:84:ac:36:65:0d:a7:df:d2:f4:92:fb:12:fb:
72:86:c6:ea:ac:4a:ef:75:9d:6b:dd:a1:ca:45:69:
8d:89:b8:a9:ca:cf:0d:d1:97:c2:0e:95:a2:6b:40:
ae:4d:d2:4b:b1:d6:1a:b3:07:5f:5c:7f:71:1d:0e:
c3:09:00:d7:b6:37:24:32:c5:b0:70:39:c5:2d:c3:
c9:d4:1a:b9:34:b1:16:d3:0e:30:6d:ae:03:f4:2a:
90:e2:33:7e:3f:6a:29:ff:20:07:d9:82:4a:cc:2c:
e9:bd:63:ee:96:9c:42:36:97:eb:c3:3e:10:dc:10:
92:15:2b:87:33:71:5a:9a:28:a3:62:bf:0f:00:ef:
0d:40:1a:d7:a1:47:d8:3e:6a:75:76:fd:00:94:32:
5b:27:3c:7a:24:9e:a0:9d:54:bf:42:09:5e:33:47:
c8:7d:11:82:b1:d7:8b:f5:64:fa:68:46:a0:90:96:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:2A:83:E0:8A:45:99:E1:7C:1E:1B:91:1D:2E:4C:A6:4E:46:02
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:24:ce:1c:59:51:f5:9e:cf:e2:24:93:ae:2e:fd:56:63:
a3:f5:60:22:12:12:b1:08:ff:a3:f8:61:85:cb:e9:23:7e:c0:
5e:7f:b1:a6:1c:6a:0c:56:17:b7:44:96:5e:ba:ab:f1:d7:21:
6e:19:55:0e:12:4e:89:44:62:81:a0:1f:ed:23:90:ce:21:89:
9f:95:4e:94:8d:9d:96:78:f7:66:37:15:72:71:20:e3:be:ae:
d5:bd:c6:cc:75:1b:29:90:f8:61:5d:a8:42:02:a5:9d:1d:2e:
95:09:cd:29:fc:e2:4c:26:57:a9:7c:4d:7c:cc:37:7c:66:22:
ed:70:27:d3:97:34:79:f6:4e:8f:dd:f8:8d:42:c8:18:80:df:
4c:f0:d5:e0:ee:f2:3d:22:4f:2e:f0:90:46:70:e8:35:bb:a4:
1b:a8:15:53:6b:0b:8e:93:8b:77:b7:86:67:23:18:f0:9e:75:
40:10:8f:b8:04:ef:f0:96:f3:5f:31:cb:28:5a:13:ea:49:22:
2a:7e:2a:f3:91:5c:52:c7:ba:ab:f5:f1:cf:90:a8:52:64:52:
7a:b6:20:4f:5c:a6:5b:28:ae:a2:cd:6c:a6:3b:a2:f2:4d:ad:
cc:c3:d2:da:20:05:76:bc:48:83:71:9c:98:85:e7:8a:c2:e4:
c2:43:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:59:30 2026 by rpki-client