Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: pPxmF+j/k2MSUv/NOP4f6nfrRfqzWgqeJJXBdx2UVD0=
Subject key identifier: C9:EE:7F:56:68:1D:86:36:E7:E8:52:64:C2:BD:4E:ED:F2:95:F6:F7
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 019CBF96EFC6B7FCB1C08A99BCE29828B155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 0CC9
Signing time: Thu 05 Mar 2026 20:01:05 +0000
Manifest this update: Thu 05 Mar 2026 20:01:05 +0000
Manifest next update: Fri 06 Mar 2026 20:01:05 +0000
Files and hashes: 1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: 7G+CNTtuQ3BxNfwnmi6KfjpjZP5QKEIEj5DCfW7xHII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:96:ef:c6:b7:fc:b1:c0:8a:99:bc:e2:98:28:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Mar 5 20:01:05 2026 GMT
Not After : Mar 6 20:01:05 2026 GMT
Subject: CN=c9ee7f56681d8636e7e85264c2bd4eedf295f6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:c1:7b:83:b6:67:fb:a5:ab:9b:2e:28:4e:
45:6d:83:02:6c:7d:c5:38:90:a0:58:2e:0d:90:93:
3a:a4:dc:b9:16:9c:5c:49:5f:cb:49:73:42:27:f0:
94:d8:f6:97:4c:f6:46:fc:49:31:33:af:b5:56:a4:
fe:3f:87:5a:d7:7e:ef:08:e4:1e:4e:89:4f:8d:e6:
ea:ea:e4:a8:b0:bd:09:7e:b3:13:4b:39:8c:9d:50:
68:4a:e8:7c:d2:de:39:5e:68:0f:88:6b:4d:b6:a3:
a8:21:ae:f9:b5:83:ed:ea:58:1b:66:ca:f0:0e:4f:
02:05:11:79:c2:41:3a:9a:c2:41:3d:39:eb:77:d9:
2e:f3:6d:30:0a:c7:3d:62:da:b1:bb:23:fc:ae:08:
6e:af:92:f9:80:22:65:d9:3c:46:fe:48:7c:11:f7:
cc:eb:4f:71:f7:77:74:f1:bb:07:27:92:81:22:01:
e8:4f:f0:32:1b:92:47:d4:32:1d:79:0d:ef:cc:3a:
89:bc:9d:02:c5:0b:32:89:bb:99:e5:7c:9b:c0:8f:
b4:dd:22:ea:37:10:42:4e:39:e1:8d:f4:3a:fe:0d:
e3:d8:6f:df:0a:05:81:11:76:fa:0a:a6:94:f7:42:
8c:a4:79:e6:a0:ea:0d:a8:3b:44:2f:65:25:b7:f0:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:7F:56:68:1D:86:36:E7:E8:52:64:C2:BD:4E:ED:F2:95:F6:F7
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:6b:5d:ba:60:22:1f:55:e8:82:48:45:62:53:46:29:ae:
23:fe:ad:3d:c1:21:7b:24:55:2f:8a:3e:a9:34:99:79:e2:2f:
93:91:5c:8a:e6:4e:3a:6b:27:e5:c1:ea:23:bb:0f:cb:0b:8a:
ef:6b:68:7a:ac:08:87:d4:bd:d6:11:f2:38:d6:65:43:39:dc:
6f:a6:11:e5:f2:b9:e1:2e:80:c7:1a:24:1f:76:78:60:4f:15:
9c:65:0a:f6:08:97:b6:72:48:30:8a:f7:8a:4e:2e:b8:a2:b4:
d3:62:e3:90:18:d9:79:17:b7:07:f1:96:ef:f8:7a:1c:9c:b2:
63:3c:17:38:7c:f2:79:5e:5f:52:a2:52:3e:31:d0:12:e6:80:
86:c6:db:53:ab:a3:55:4d:52:0a:bb:97:7a:48:bd:f9:0a:e7:
d7:97:84:d5:85:f0:05:a5:b5:a4:aa:cb:f9:77:6e:ed:a4:3f:
21:e3:35:ec:90:f5:78:fe:0a:43:14:18:03:97:c8:58:e7:29:
c0:fe:61:7f:26:86:28:20:5b:18:ae:e2:8c:ab:83:79:f7:b5:
22:e0:a2:52:fe:2b:31:09:0e:cf:bd:62:c0:c1:38:30:69:b5:
36:98:ea:21:92:37:0f:d8:4a:34:c7:38:0d:fc:67:19:df:d4:
1a:a6:92:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/lu/Gt/yxwIqZvOKYKLFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1
ZGRhOGUwHhcNMjYwMzA1MjAwMTA1WhcNMjYwMzA2MjAwMTA1WjAzMTEwLwYDVQQD
EyhjOWVlN2Y1NjY4MWQ4NjM2ZTdlODUyNjRjMmJkNGVlZGYyOTVmNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMHBe4O2Z/ulq5suKE5FbYMCbH3F
OJCgWC4NkJM6pNy5FpxcSV/LSXNCJ/CU2PaXTPZG/EkxM6+1VqT+P4da137vCOQe
TolPjebq6uSosL0JfrMTSzmMnVBoSuh80t45XmgPiGtNtqOoIa75tYPt6lgbZsrw
Dk8CBRF5wkE6msJBPTnrd9ku820wCsc9YtqxuyP8rghur5L5gCJl2TxG/kh8EffM
609x93d08bsHJ5KBIgHoT/AyG5JH1DIdeQ3vzDqJvJ0CxQsyibuZ5XybwI+03SLq
NxBCTjnhjfQ6/g3j2G/fCgWBEXb6CqaU90KMpHnmoOoNqDtEL2Ult/C9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnuf1ZoHYY25+hSZMK9Tu3ylfb3MB8GA1UdIwQY
MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt
ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi
LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/prXbpg
Ih9V6IJIRWJTRimuI/6tPcEheyRVL4o+qTSZeeIvk5FciuZOOmsn5cHqI7sPywuK
72toeqwIh9S91hHyONZlQzncb6YR5fK54S6AxxokH3Z4YE8VnGUK9giXtnJIMIr3
ik4uuKK002LjkBjZeRe3B/GW7/h6HJyyYzwXOHzyeV5fUqJSPjHQEuaAhsbbU6uj
VU1SCruXeki9+Qrn15eE1YXwBaW1pKrL+Xdu7aQ/IeM17JD1eP4KQxQYA5fIWOcp
wP5hfyaGKCBbGK7ijKuDefe1IuCiUv4rMQkOz71iwME4MGm1NpjqIZI3D9hKNMc4
DfxnGd/UGqaSLg==
-----END CERTIFICATE-----
Generated at Fri Mar 6 04:47:19 2026 by rpki-client