Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: 5DO2Lw0VOpQraVwgVkcVxHFfimuXOsUsU1s+BlyV4/Y=
Subject key identifier: F2:6E:5C:8D:96:70:F2:86:B5:FD:66:9E:96:EA:79:83:53:3F:60:B7
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 019A722607CF4439DD92766762E6B09AABD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 0198
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: okdzm5JVWAoeLoyT0nZkb3lRoCXCf5dOQrkd7mNtu5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:07:cf:44:39:dd:92:76:67:62:e6:b0:9a:ab:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=f26e5c8d9670f286b5fd669e96ea7983533f60b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:0f:a7:11:f0:e8:1c:4e:d2:61:c9:29:88:
d7:3d:26:a3:48:c0:c6:5e:94:09:74:71:52:5e:6d:
a8:cf:06:ca:2a:d7:ba:fa:be:0d:88:e7:38:f5:be:
cb:cf:26:85:ca:da:65:96:66:b6:2e:f7:13:ce:7f:
f5:4b:f1:dd:a5:f1:93:6a:2c:bd:90:be:a2:50:b6:
31:f3:07:2b:6a:f2:5d:47:1b:fd:a9:33:26:84:a8:
61:61:e8:9b:04:2b:19:26:81:77:a1:de:05:8b:e4:
ea:91:0c:bc:33:29:02:85:04:8c:57:3c:7d:7c:4c:
bb:6d:ce:e9:1d:8e:6b:38:fb:34:dd:b5:d8:b8:1d:
c8:aa:25:34:f9:da:4b:be:25:9b:05:a2:61:9a:c2:
0e:68:c0:c3:4b:f6:36:be:02:fb:ef:7c:fd:b8:21:
2d:79:ad:99:7d:1c:59:45:28:8a:99:55:51:b1:e5:
4c:72:fe:d5:ef:24:1b:a7:cf:b1:a8:99:f4:37:83:
de:f4:10:75:a5:03:13:ca:7e:4f:c8:ce:38:21:34:
e5:9d:11:07:f9:b7:5e:4f:9b:2e:c9:93:48:e2:b7:
61:9d:a2:6c:c1:5a:71:13:54:77:b8:a4:eb:19:4d:
ac:cf:66:e6:0c:67:32:b3:21:01:ee:2a:03:c7:c8:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:5C:8D:96:70:F2:86:B5:FD:66:9E:96:EA:79:83:53:3F:60:B7
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f5:14:f5:9f:aa:80:5d:04:7b:f5:a5:a8:c1:e4:4b:5d:be:
0b:47:a4:de:37:6c:d1:d5:35:3b:16:54:d8:05:47:81:61:b8:
54:db:97:6a:fc:dc:13:07:59:7f:83:4a:9d:74:a1:0f:62:2d:
db:89:66:4a:f7:d5:33:79:1b:e4:b3:48:10:cf:72:8c:7c:1e:
f6:1d:0a:ff:7a:94:14:d2:96:c4:6a:c7:a3:c4:d7:ea:60:15:
97:3a:7c:87:e5:9a:12:28:1a:87:b7:02:a3:f5:26:f0:5e:db:
97:d1:b7:d2:36:f8:b7:b9:37:dc:df:01:d7:7f:21:d2:84:14:
54:99:ed:b1:9a:6c:9c:75:77:d8:67:ba:9a:d2:66:f1:ac:f9:
6f:4d:e9:44:49:9a:52:63:c5:1e:08:29:f8:b7:79:5b:eb:fd:
c0:8f:64:4e:0f:e0:62:73:4d:96:6d:0c:b6:96:df:1a:81:33:
b9:3a:5d:49:84:c9:1a:37:07:39:1d:b8:25:5d:ef:29:f8:e9:
35:84:c4:ee:97:1f:16:1e:cd:59:cb:40:7d:03:da:f4:97:64:
96:30:26:a2:41:b6:2f:ab:a4:fb:5c:e8:34:b0:03:c8:0b:8c:
e1:86:bd:76:39:47:90:11:fb:62:8a:d1:b5:13:83:fe:cb:e3:
5e:ab:27:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJgfPRDndknZnYuawmqvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjQyZjczZmYyYmNjNDg4NWIxMjAwYmQwMmVlN2UyOWY2
MDhlMmIwHhcNMjUxMTExMDkwMTI2WhcNMjUxMTEyMDkwMTI2WjAzMTEwLwYDVQQD
EyhmMjZlNWM4ZDk2NzBmMjg2YjVmZDY2OWU5NmVhNzk4MzUzM2Y2MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDMPpxHw6BxO0mHJKYjXPSajSMDG
XpQJdHFSXm2ozwbKKte6+r4NiOc49b7LzyaFytpllma2LvcTzn/1S/HdpfGTaiy9
kL6iULYx8wcravJdRxv9qTMmhKhhYeibBCsZJoF3od4Fi+TqkQy8MykChQSMVzx9
fEy7bc7pHY5rOPs03bXYuB3IqiU0+dpLviWbBaJhmsIOaMDDS/Y2vgL773z9uCEt
ea2ZfRxZRSiKmVVRseVMcv7V7yQbp8+xqJn0N4Pe9BB1pQMTyn5PyM44ITTlnREH
+bdeT5suyZNI4rdhnaJswVpxE1R3uKTrGU2sz2bmDGcysyEB7ioDx8gTswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJuXI2WcPKGtf1mnpbqeYNTP2C3MB8GA1UdIwQY
MBaAFMD0L3P/K8xIhbEgC9Au5+KfYI4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDct
N2RkNTdlNzM2NzQ2LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDctN2RkNTdlNzM2NzQ2
LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvUU9Z+q
gF0Ee/WlqMHkS12+C0ek3jds0dU1OxZU2AVHgWG4VNuXavzcEwdZf4NKnXShD2It
24lmSvfVM3kb5LNIEM9yjHwe9h0K/3qUFNKWxGrHo8TX6mAVlzp8h+WaEigah7cC
o/Um8F7bl9G30jb4t7k33N8B138h0oQUVJntsZpsnHV32Ge6mtJm8az5b03pREma
UmPFHggp+Ld5W+v9wI9kTg/gYnNNlm0MtpbfGoEzuTpdSYTJGjcHOR24JV3vKfjp
NYTE7pcfFh7NWctAfQPa9JdkljAmokG2L6uk+1zoNLADyAuM4Ya9djlHkBH7YorR
tROD/svjXqsn1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:54 2025 by rpki-client