Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier: Wi4PclCJasw/ize2JJm+Pv+3Ql2tpgDSE0kjUKtrQhY=
Subject key identifier: 87:00:AD:44:39:7C:98:4E:79:A9:8C:54:10:E4:05:84:5F:03:22:75
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial: 019D389C46EBB4BA2FAB8F532057DD8E8F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number: 0720
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: KGrdlGc_X6Hki0LeSOU3SUEjdJY.roa (hash: xgbr933ze/YCtvnJPl14XndSL5VHe/+W5p0SIc3yhsI=)
2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: dTZ+FEn5WwWMFu8PjCBOwqXOjpmf6FdxmUIpIU9r9cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:46:eb:b4:ba:2f:ab:8f:53:20:57:dd:8e:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=8700ad44397c984e79a98c5410e405845f032275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:23:e4:98:cd:ee:ea:06:54:ba:36:f9:43:
53:b9:6a:ae:59:33:0d:bd:4d:9d:a6:87:e5:26:08:
88:97:25:82:a3:a5:8c:f3:b0:ed:21:13:a0:55:7d:
bf:1c:b6:b4:a5:44:f2:36:f3:b7:9a:35:1d:d2:61:
e5:e0:c1:43:14:9d:4d:06:f8:36:e0:de:6b:c5:d2:
b0:e9:6e:87:79:74:00:22:28:1b:13:50:45:74:70:
73:76:53:14:96:9b:89:96:57:c4:44:8c:a7:07:c2:
5b:99:0a:6a:48:2e:80:a1:d9:d0:f3:eb:a6:41:92:
00:97:a6:e7:38:b7:ab:9d:18:8d:90:63:d0:e8:10:
18:f9:40:82:d2:06:69:b1:cc:8d:17:2d:03:d1:39:
95:2a:88:e8:e5:df:e2:6d:0e:16:30:26:f3:f3:1e:
81:76:d3:c1:9e:c9:af:90:3b:0f:9d:54:c8:4d:b2:
87:d2:53:64:e7:8c:b2:3f:7b:ba:a3:e9:05:41:d1:
2c:ef:24:00:63:95:71:ad:1f:3c:83:38:4d:af:90:
01:32:78:06:b8:9e:72:3d:3b:1f:08:00:92:a1:9e:
aa:fd:39:1e:08:2b:b8:01:c0:06:39:a4:06:fe:0e:
36:f8:4b:6f:56:47:92:43:72:21:7c:6f:7f:f3:18:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:00:AD:44:39:7C:98:4E:79:A9:8C:54:10:E4:05:84:5F:03:22:75
X509v3 Authority Key Identifier:
keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:73:16:b8:4e:2a:f8:94:6c:fa:71:0d:73:29:b7:4e:ea:
2f:71:2a:82:83:d9:29:4f:79:56:9f:3a:6a:e8:69:f8:f0:2a:
8a:5b:98:25:54:71:a3:45:19:5b:bc:6e:6a:6b:ef:9b:81:2d:
c4:9b:bc:f9:14:45:63:7d:4e:10:85:85:d7:09:3b:4e:84:4b:
08:12:79:de:62:5e:ad:23:13:f6:c4:2f:e8:da:ea:cb:9c:79:
81:1d:87:2b:9c:f6:8f:1b:fb:42:22:16:0b:6c:3a:42:86:e5:
71:b5:77:94:45:06:30:4a:e0:52:f2:7e:57:2e:95:95:48:bc:
88:56:cc:95:85:9e:72:19:3e:6d:11:f5:cc:3d:8a:5e:a7:ea:
cc:c7:8b:c1:19:f5:50:da:ae:87:fe:8e:1f:5b:7a:42:d3:83:
77:09:4c:35:39:92:e5:93:57:24:89:a2:16:ff:c8:e5:a9:bb:
21:26:8b:b7:8e:25:f7:75:42:f8:39:0d:ae:d6:ae:ac:d0:09:
ca:5a:ae:06:4d:71:28:23:14:98:99:4a:10:3b:98:a6:f4:c6:
5a:67:5c:e4:ae:39:df:a2:55:de:e0:d3:f7:2a:87:7b:df:6e:
c1:25:67:0e:f6:d9:7f:35:2b:1f:61:fd:6b:4b:48:e9:f1:a5:
67:aa:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:48 2026 by rpki-client