Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File: wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier: DP2ZQ0hcEi2TRYe0IqyInN2IcSN93anulavuV6JZL3c=
Subject key identifier: A0:43:81:2F:E9:6E:B9:C9:88:EF:0E:CC:90:39:70:4B:D9:56:51:29
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer: /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial: 019D37522C4AB925CC3B68B5AA9930F11126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number: 0848
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: QjOXLGjz8ds-7sCauorJ8W8aVN4.roa (hash: BmFWBCryjEjKWhVriCT0YrDHfiFmLKZXY1G064wUhCw=)
2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: z+FVCSt01AVDOYWr3RLj0YeWX61uGF77kp5vesfuk5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2c:4a:b9:25:cc:3b:68:b5:aa:99:30:f1:11:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=a043812fe96eb9c988ef0ecc9039704bd9565129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:3b:f2:bb:b3:bf:09:0e:7f:c5:44:cd:c1:
6b:f0:78:b1:07:cc:55:dd:fe:6c:25:0a:26:21:73:
fa:a1:02:5a:12:75:c4:65:5a:20:01:8d:e1:f4:51:
0d:95:ca:09:40:fd:3b:72:80:68:a7:38:54:03:b1:
47:0a:1a:f1:27:a0:b4:e8:12:67:ff:a7:ff:3b:a1:
ec:df:de:d8:1c:15:d0:14:a0:00:9c:5f:ac:38:ee:
a2:8e:0d:84:11:a7:0c:2a:46:46:b0:73:c2:2c:63:
f8:b7:ba:58:a8:35:78:9c:ec:08:3d:0b:c9:0c:ab:
64:4f:2b:97:8c:52:21:19:1d:67:ad:a9:56:d7:b1:
e3:67:84:d3:f0:d1:20:3b:33:f1:e0:0f:b7:45:e3:
a4:88:b8:bc:f9:4c:a8:51:c4:96:eb:4f:8b:56:9d:
91:44:c9:e4:d4:ba:11:67:a7:2e:37:8a:3b:92:c6:
f0:ee:c3:7a:09:cd:b8:61:5f:4d:a0:e9:b4:a1:97:
39:76:de:6c:be:e4:fb:af:58:be:e5:37:e6:13:ce:
05:c8:88:0b:ac:75:d9:6a:ad:f3:b4:db:1c:c9:98:
18:c0:bf:ce:fa:30:d6:9e:2a:b7:b2:fc:7f:29:3b:
a0:1d:4a:14:48:65:c4:d9:bd:c0:85:f4:30:09:6f:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:81:2F:E9:6E:B9:C9:88:EF:0E:CC:90:39:70:4B:D9:56:51:29
X509v3 Authority Key Identifier:
keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:09:f4:6f:20:80:22:5a:c7:59:c3:b1:71:39:e9:7d:a2:
11:bf:82:ad:6c:5c:b7:a9:ac:99:02:c9:ce:97:78:05:18:45:
f9:a5:c9:4d:e8:dd:04:0e:79:c2:54:0b:8e:ea:0e:29:08:e4:
71:7d:8d:8f:56:7a:ed:14:e8:2e:8a:a9:3f:e1:d2:92:01:e3:
66:ce:5a:c3:73:a1:a4:f4:fd:b8:6e:06:bf:64:07:c3:99:b0:
09:51:a6:b1:5c:f0:1c:ee:b4:a4:6d:e8:ca:77:62:57:f1:df:
0f:c9:bd:01:7f:2f:f1:9f:1e:ff:59:7a:23:22:31:42:f9:fb:
b1:2d:af:4a:46:1a:7a:79:0c:fa:ac:4f:d9:84:bc:96:73:86:
35:3b:6d:e0:ca:0f:76:86:4a:9b:78:5c:d0:3b:4a:0b:74:9d:
01:c7:7b:fd:52:96:be:74:81:f7:9d:ee:20:c9:32:88:8c:f5:
4c:01:51:ad:d2:40:6f:a0:ac:3f:8c:04:97:a9:59:7e:44:b0:
35:1b:61:0f:fa:ef:64:ce:34:29:d7:98:69:3f:dc:cd:0e:27:
09:2d:17:95:81:65:25:f3:55:78:1b:29:9f:16:90:a6:ba:3d:
31:0f:bd:42:51:1e:a2:02:7d:ce:71:0a:5a:6a:3a:51:bf:56:
9e:a3:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:37 2026 by rpki-client