Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: 3yEHEql+142ltr/MFjqJemNFng/J3+UGi1lcpjsZEV0=
Subject key identifier: CE:A3:7B:02:6F:E6:8D:AC:05:C1:EA:B6:D3:7E:6C:49:72:32:2C:23
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 019D397772AA23E4E128ABEC2FE6BEBBF2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 0805
Signing time: Sun 29 Mar 2026 12:00:22 +0000
Manifest this update: Sun 29 Mar 2026 12:00:22 +0000
Manifest next update: Mon 30 Mar 2026 12:00:22 +0000
Files and hashes: 1: 5HeMO4zDu-Aw5hUDH_h00aWRAfU.roa (hash: rvSp2TE3yHxwYyM7Q6koLSjsHsuVLORSAbQms57XIPo=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: VQlrrtTuda7v98pLS5dkT61l5JbIT0HBwbGx1or3FxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:72:aa:23:e4:e1:28:ab:ec:2f:e6:be:bb:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Mar 29 12:00:22 2026 GMT
Not After : Mar 30 12:00:22 2026 GMT
Subject: CN=cea37b026fe68dac05c1eab6d37e6c4972322c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:67:5b:87:54:b3:fb:48:d7:ee:37:ff:1a:
a7:af:a4:51:06:38:4c:3c:5e:62:3b:36:86:93:d3:
f5:c3:2c:70:6c:ca:21:2e:fb:be:6e:66:cd:84:d9:
9c:16:17:d0:84:e0:6b:e9:11:32:03:1a:f6:bc:37:
e0:31:b7:37:f7:af:51:9b:49:33:84:04:a3:72:ba:
fd:15:ea:16:a1:c2:5d:e6:12:61:38:2d:f9:11:23:
ca:8a:65:be:d7:aa:4c:1a:4b:ef:32:36:05:05:f1:
a4:5d:35:1e:98:9c:10:73:9a:9d:ac:d7:b3:1d:10:
4c:f8:c1:91:82:73:4c:54:23:ad:f8:5e:c0:d6:09:
48:c9:00:b6:74:a4:7c:b8:44:a8:85:94:13:d2:8a:
08:88:9b:02:9a:52:6e:2c:3c:bd:7c:61:dc:b6:92:
b8:8c:09:98:7c:e0:20:fd:a0:f9:4a:a2:57:fd:ac:
9c:f6:e1:df:89:10:b6:c2:06:ee:b1:c4:0a:68:66:
ea:1f:4c:7b:e8:8b:8e:20:81:e7:5f:ff:8a:c8:fd:
45:22:62:b5:3a:27:9c:68:81:e1:81:2b:17:99:30:
90:dc:65:14:0c:8c:37:d3:bb:7f:6a:df:ab:23:53:
20:57:a1:58:1c:d1:19:75:c0:e6:6c:34:85:b1:1b:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:7B:02:6F:E6:8D:AC:05:C1:EA:B6:D3:7E:6C:49:72:32:2C:23
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:70:30:57:e9:75:5f:a8:20:df:59:fc:60:9e:5e:5e:8f:51:
12:9e:81:47:7a:ac:95:c5:df:6f:7d:28:9b:10:e5:48:f1:0b:
98:85:6d:06:87:1d:bb:d9:aa:7c:0b:34:c4:6c:52:00:0c:e7:
1f:ea:c6:86:19:0e:20:53:54:47:93:72:a4:64:5e:2e:e1:f7:
c5:59:40:b4:89:dd:ec:f4:c5:3a:3d:cd:56:f5:db:95:74:ec:
46:48:9a:5b:e7:b7:e4:f8:39:59:90:6f:ec:96:65:7d:24:5a:
79:96:af:ac:9c:68:e9:a1:71:50:10:98:47:06:57:6f:be:cc:
b2:f2:4b:47:28:7d:99:c7:46:82:0d:38:39:bf:7d:8d:62:88:
5b:01:e1:40:b3:9f:db:74:c9:a2:ae:f6:af:d2:35:d1:bc:e2:
a9:1f:8b:ea:c5:49:99:9e:39:7e:1e:01:ef:02:f0:e6:1e:23:
0a:cd:86:fb:bb:2e:64:04:1d:3f:12:4a:d5:de:de:83:a3:a8:
73:38:7d:0b:8e:e5:99:33:89:2a:f0:85:44:61:af:20:ae:97:
a2:db:c0:a9:2c:3f:f7:2c:b0:e4:44:80:59:90:14:d1:17:1d:
97:69:6c:fd:25:1c:8e:82:69:b1:25:49:b8:8a:7e:fd:c1:d0:
cf:01:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:53 2026 by rpki-client