Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: 5TlyYzhGctfucIASV8qPADaBSU/jxCE4p49dioIPz/g=
Subject key identifier: 3C:48:0F:86:77:52:52:7A:26:5D:9C:F5:86:BA:B0:CC:99:D8:AB:6E
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 019D38D38CF3E2424E2145E40086F51CE466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:21 +0000
Manifest this update: Sun 29 Mar 2026 09:01:21 +0000
Manifest next update: Mon 30 Mar 2026 09:01:21 +0000
Files and hashes: 1: CpaLGPqoC3ALuNpOvxJg0iLjAg4.roa (hash: 8fNPqMK8OnJde+EJvnY4Udrp0bY1V8qpd3moDPkcAok=)
2: Hj67j6_r_LN0ZjHifiVHCQLOtBI.roa (hash: fDsmb4ofN0jQCDB6v5YaSdvL9yBsZrzWGWfWx7hXpeE=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: xhf3/KmAaan1tWO9cWvQZjPecTWwemIEOqKsN4q+uQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8c:f3:e2:42:4e:21:45:e4:00:86:f5:1c:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Mar 29 09:01:21 2026 GMT
Not After : Mar 30 09:01:21 2026 GMT
Subject: CN=3c480f867752527a265d9cf586bab0cc99d8ab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:e7:d7:33:31:ef:dd:99:ea:6e:ae:39:09:
d6:65:f1:36:7f:62:c1:60:66:2d:0a:ef:20:4f:89:
dd:85:7a:d1:9f:f2:03:7c:d9:39:20:65:4a:b6:f9:
50:c0:33:64:3d:ec:9c:bb:92:98:7a:ce:74:33:8e:
63:44:b1:ac:da:aa:2b:55:54:d4:6b:2c:89:dc:2b:
b3:0d:0f:fa:e6:3d:a5:6a:4f:f3:f5:8c:71:3b:dd:
0d:e3:8b:b7:f6:9d:1b:86:34:8f:76:c5:12:9b:57:
3a:40:b5:4d:0a:5d:ab:c8:fc:46:99:7f:dd:fb:49:
40:21:cb:d7:11:aa:e3:0d:b9:3e:0b:3d:00:d7:bd:
4f:cd:db:54:d5:b0:7e:de:ac:69:06:8d:8e:38:5d:
57:30:3b:4d:69:35:de:37:89:fd:02:5f:cf:88:fc:
a8:9a:a2:d4:91:1b:e6:47:ce:c0:0c:72:57:32:4b:
88:ff:d1:d6:4f:c3:04:db:6e:28:fc:55:e7:47:92:
2c:9d:95:d0:12:68:60:76:69:58:85:3a:5f:ca:88:
bf:51:19:73:9f:5c:09:29:5e:01:15:4d:49:3e:c7:
f2:f1:2a:16:5b:64:1e:d8:26:f8:24:e9:16:ff:7a:
6d:fa:6f:20:eb:03:4a:89:00:3c:67:36:ea:96:39:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:0F:86:77:52:52:7A:26:5D:9C:F5:86:BA:B0:CC:99:D8:AB:6E
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7a:d2:b7:00:63:16:09:96:0d:0b:59:39:a1:09:a8:f9:29:
66:6e:56:47:4c:9b:2a:0a:e7:6b:72:3c:f1:d3:df:34:24:c1:
6e:6b:a3:7f:e7:1a:8b:ef:76:0c:41:15:9f:90:e4:a5:be:1e:
ba:6c:1e:4d:28:ad:bd:6e:e5:1f:c7:55:19:02:c4:3f:72:ae:
43:ee:f8:83:ba:72:d4:f3:3e:31:e2:d2:80:cf:91:a0:5f:9b:
ce:96:cb:93:77:02:eb:97:79:f6:d7:8c:35:64:4b:6e:86:08:
20:c8:c1:a2:41:5f:4b:3e:8a:62:54:0d:cc:2c:54:e0:76:bd:
f2:38:44:90:22:61:0b:b6:6a:cb:a0:81:c9:d2:2d:aa:0b:c4:
d1:14:c1:ee:65:31:86:9d:b4:71:08:91:05:56:65:ce:03:db:
18:9f:16:ea:40:4c:3a:df:95:0b:e6:b9:9c:1a:b3:14:6c:25:
85:a1:9e:9f:28:1b:f2:d5:36:f5:b9:30:fd:e1:54:1f:e2:f1:
fb:4f:8c:41:dc:e0:09:b6:6a:3b:b9:94:e0:26:56:ce:da:4f:
4b:ef:85:fa:62:8e:d2:13:9b:a5:9d:bd:92:59:da:ba:e4:17:
37:16:57:e3:c4:db:e9:bd:21:48:3b:9b:b4:c3:97:47:22:34:
72:f9:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:16 2026 by rpki-client