Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: 7Pca2Yirdw2gbZgkZ7ih35Hj2Hu2+CzT+tWsX3I+h+I=
Subject key identifier: 04:89:ED:47:4F:3B:41:1D:8E:D3:4B:B0:0B:DB:99:6D:15:FA:E7:15
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 019D3940807DAD4FB01D34DA73030A9A31E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 0793
Signing time: Sun 29 Mar 2026 11:00:21 +0000
Manifest this update: Sun 29 Mar 2026 11:00:21 +0000
Manifest next update: Mon 30 Mar 2026 11:00:21 +0000
Files and hashes: 1: IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa (hash: N2VSLUJTgIas4vbaZK4n5fSPJQ+7roJjvsDns30p6Kc=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: ZfpZ5wxGtJHJzBM8d6fXAr+QqZDwvYjyB4F+6EPRUOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:80:7d:ad:4f:b0:1d:34:da:73:03:0a:9a:31:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Mar 29 11:00:21 2026 GMT
Not After : Mar 30 11:00:21 2026 GMT
Subject: CN=0489ed474f3b411d8ed34bb00bdb996d15fae715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:61:f7:a4:8d:3f:3c:5c:93:a8:7e:38:dd:
c1:40:d7:00:e0:af:3e:b3:c3:60:1f:13:c9:35:6f:
9f:b4:51:63:a0:de:ab:90:8e:d7:15:16:a7:53:05:
36:7e:6c:a2:dc:80:6c:bd:38:89:96:b2:6a:f2:06:
87:40:49:12:e8:6b:a6:b3:96:09:61:73:9d:68:42:
99:59:f5:1b:a9:2c:f3:b2:b3:eb:0f:da:08:05:a6:
4a:4f:58:7f:63:d2:65:64:a3:63:48:94:6e:73:91:
1d:22:77:e3:54:13:92:b5:41:b7:db:46:83:c3:45:
46:8c:21:12:39:96:29:2e:34:69:fa:26:98:1c:d7:
0f:34:53:4b:62:29:0f:61:17:19:fa:b6:0f:10:54:
22:c4:c9:89:12:46:04:4d:6c:e1:2a:96:9b:d8:a2:
84:2d:76:96:c5:e4:4e:73:f0:43:19:de:fe:ca:a8:
52:4e:48:59:32:37:f8:ad:a8:ec:65:7c:64:f9:36:
bc:18:1f:9f:e1:c6:1e:5c:a7:46:bc:5b:b0:e1:3f:
ef:09:ae:b7:82:2e:a7:19:fd:1d:6e:11:b5:50:73:
0a:32:17:79:bc:3d:f5:9e:df:7a:cf:90:d7:bf:e0:
ce:68:82:dd:e1:c9:79:c1:99:cf:c4:fe:73:1c:2c:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:ED:47:4F:3B:41:1D:8E:D3:4B:B0:0B:DB:99:6D:15:FA:E7:15
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:03:13:fc:f1:4d:87:ab:c3:eb:d9:af:a1:4c:50:90:cf:9d:
c4:84:f8:ac:51:d6:a7:d5:db:52:a0:c4:07:0d:ca:2f:ae:4d:
e2:cc:0e:79:68:6f:82:ec:6d:e4:25:da:8d:a1:12:1d:7e:c9:
db:24:18:52:46:1b:54:fe:a0:31:ab:23:b9:a7:19:c6:d0:5f:
74:15:15:c4:83:78:73:c5:8a:e3:ce:06:37:25:f7:83:f5:8e:
f6:8c:3c:c7:69:b6:99:c5:a8:0d:41:da:ef:bd:39:96:d5:f5:
dc:69:49:42:82:39:f0:37:3c:b2:fd:fe:52:ac:d1:9e:79:de:
22:5d:06:45:7c:c0:12:0b:7c:90:d5:76:d7:03:38:9a:5b:35:
7e:e3:55:06:ba:59:94:36:b0:5c:25:0c:9b:b0:f9:a3:14:7f:
45:c4:9c:46:2a:83:2b:25:40:32:d1:97:01:37:fd:ed:12:8c:
54:e4:ed:da:9f:34:b7:a6:71:8e:c4:ab:f7:0b:2b:9d:e8:98:
1a:82:7e:5c:ec:00:9c:03:fb:81:c2:ed:1f:f4:81:71:b8:88:
c0:cd:e7:ee:20:07:5a:da:d1:0a:fa:db:c8:dc:f2:0e:bd:bd:
90:c0:b2:9a:9a:53:92:36:94:2f:f4:8d:85:80:fc:43:9a:ac:
ef:67:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:07 2026 by rpki-client