Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: mGgexYjkpY+BIF2ppgfuOKTTCliubeTDNqQkt9DpMyE=
Subject key identifier: 46:A6:5E:F2:60:0B:83:24:1D:26:47:F9:39:0F:80:64:62:9E:E0:C4
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019D389C10BCE5B1C8C4B6B8D5E6DAAF39D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0F5E
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: U7ys6itFnvuaePn4ScsbAtbzsp0.roa (hash: d+i6tJ5mzYcRwG/S0qIlnLIWWa0XIkizyeSNRfnsoAI=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: HyL3+R3BH06e77o2B+CFXmFWr9gVVzUMGwUvApW1luc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:10:bc:e5:b1:c8:c4:b6:b8:d5:e6:da:af:39:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=46a65ef2600b83241d2647f9390f8064629ee0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:33:a5:cb:ee:3a:24:d9:1a:96:c9:05:2f:
ae:89:89:a5:9c:a3:87:f2:b3:be:3e:9b:c8:de:d7:
f5:0d:03:a8:71:76:78:c9:0b:e1:6a:cc:66:04:2f:
2e:34:33:f1:0f:3f:07:5c:30:4d:79:21:af:03:ee:
80:86:05:bc:38:8b:d8:a4:6b:f8:d0:64:14:f3:84:
af:db:1b:f9:58:52:a0:59:02:7e:2e:f9:a9:32:49:
82:23:f7:03:02:f9:67:6e:38:2c:40:33:ee:0d:67:
b6:86:ae:18:71:90:77:e7:21:5f:52:14:66:79:de:
62:4b:17:98:f4:84:68:60:76:68:30:04:79:33:35:
9d:f7:1d:7e:d1:f3:04:e0:fe:3d:8b:95:57:d3:71:
02:64:66:d5:2d:f9:93:bc:ab:14:6c:ff:3c:c9:9d:
6a:88:f7:48:9b:2e:77:ad:8f:57:be:4c:60:1e:9f:
74:a1:bd:7c:cc:d8:e6:eb:c5:af:1c:26:ef:44:f9:
60:85:a3:ee:8c:f8:0d:6d:74:1e:52:69:60:14:6f:
08:d9:fb:70:73:1b:c6:85:08:2e:3a:43:22:de:f0:
b7:3d:b5:ab:3d:16:fc:4f:85:3c:16:e4:58:b7:8b:
e3:47:8d:d4:94:15:44:19:c0:bd:92:06:54:a3:4b:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A6:5E:F2:60:0B:83:24:1D:26:47:F9:39:0F:80:64:62:9E:E0:C4
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fb:97:96:76:95:5e:71:c6:b6:f9:50:6b:a6:c3:d5:ef:a3:
34:72:b8:3a:c9:5b:75:97:99:13:7a:08:6d:b4:49:56:0e:43:
e6:64:e3:39:89:da:60:84:ad:10:1a:c6:54:f6:a6:87:83:e9:
d3:d3:42:2c:71:00:fa:64:49:d9:9a:53:b4:79:48:16:a5:5e:
60:32:b2:70:7e:d5:c0:b4:65:cf:ce:dd:c4:47:d0:44:e3:70:
2f:84:c7:25:c4:84:90:89:1e:f0:18:97:42:d3:22:17:38:e5:
db:29:94:04:db:b3:de:7a:8e:d7:7d:d9:1d:0e:06:b6:5d:99:
44:b8:46:ed:94:d5:1a:2a:0c:b6:d1:78:e5:6b:cd:4e:74:3b:
c4:e1:0e:c2:08:14:ff:31:11:f1:dd:2b:0b:4c:83:f5:25:66:
71:63:99:21:06:f9:65:e5:f6:ee:cf:6b:cf:27:76:9d:a7:c1:
fa:b4:67:98:9e:5a:c7:9d:3d:a1:af:ee:63:cb:91:65:3b:2e:
c6:0b:9f:8d:a1:1e:d0:62:24:ba:53:9f:49:86:65:18:3f:df:
c0:88:11:92:c3:7d:f1:9f:d9:e7:70:2a:0f:4d:a2:b4:20:4a:
f3:a9:bd:15:12:c4:d5:7c:7e:7a:c7:f7:37:ea:fc:06:9b:8a:
07:b4:5a:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBC85bHIxLa41ebarznYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjBlZTk4NDI2MjcwMzFlY2EyNjRkYWM2NWU1ZmVmNjM5
NDNmOTgwHhcNMjYwMzI5MDgwMDQ1WhcNMjYwMzMwMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg0NmE2NWVmMjYwMGI4MzI0MWQyNjQ3ZjkzOTBmODA2NDYyOWVlMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk8zpcvuOiTZGpbJBS+uiYmlnKOH
8rO+PpvI3tf1DQOocXZ4yQvhasxmBC8uNDPxDz8HXDBNeSGvA+6AhgW8OIvYpGv4
0GQU84Sv2xv5WFKgWQJ+LvmpMkmCI/cDAvlnbjgsQDPuDWe2hq4YcZB35yFfUhRm
ed5iSxeY9IRoYHZoMAR5MzWd9x1+0fME4P49i5VX03ECZGbVLfmTvKsUbP88yZ1q
iPdImy53rY9XvkxgHp90ob18zNjm68WvHCbvRPlghaPujPgNbXQeUmlgFG8I2ftw
cxvGhQguOkMi3vC3PbWrPRb8T4U8FuRYt4vjR43UlBVEGcC9kgZUo0u1HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEamXvJgC4MkHSZH+TkPgGRinuDEMB8GA1UdIwQY
MBaAFMDw7phCYnAx7KJk2sZeX+9jlD+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAt
YzZlY2U1OTAxNTgwLzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAtYzZlY2U1OTAxNTgw
LzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPuXlnaV
XnHGtvlQa6bD1e+jNHK4OslbdZeZE3oIbbRJVg5D5mTjOYnaYIStEBrGVPamh4Pp
09NCLHEA+mRJ2ZpTtHlIFqVeYDKycH7VwLRlz87dxEfQRONwL4THJcSEkIke8BiX
QtMiFzjl2ymUBNuz3nqO133ZHQ4Gtl2ZRLhG7ZTVGioMttF45WvNTnQ7xOEOwggU
/zER8d0rC0yD9SVmcWOZIQb5ZeX27s9rzyd2nafB+rRnmJ5ax509oa/uY8uRZTsu
xgufjaEe0GIkulOfSYZlGD/fwIgRksN98Z/Z53AqD02itCBK86m9FRLE1Xx+esf3
N+r8BpuKB7RaVQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:21 2026 by rpki-client