Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
File: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft (raw, json)
Hash identifier: Ws2K8ur2rXjdPiaoIQ4cReIc/Pn61+W69Td3YNPndiE=
Subject key identifier: FA:3C:2F:7C:C3:61:56:99:56:D8:F9:E0:CB:58:26:03:26:AA:79:49
Authority key identifier: C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
Certificate issuer: /CN=c25ed6de23b320e302888f9427723f2201f2919f
Certificate serial: 019D38D315A513842AFE9715DAD1E610FBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: IR-d51vm-EzO-y0ahHT7GPsKa_s.roa (hash: 9bFsqn1B7GFofQPFT4XuTf48JjlvEIGyTh6l5dNJXig=)
2: i9kzZBEPSIQwbMZfNqvulYgSaao.roa (hash: 9Og3ibdmWGNSIjDGBXMLymE/K8GzzlULzDfKShanqjc=)
3: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl (hash: Wf533dsZr4WJJtK0610PAhHfi7CPiyYKQxhBxnnKGgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:15:a5:13:84:2a:fe:97:15:da:d1:e6:10:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25ed6de23b320e302888f9427723f2201f2919f
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=fa3c2f7cc361569956d8f9e0cb58260326aa7949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:23:24:be:5b:90:41:3b:8f:a6:1a:92:17:
b6:41:3d:8b:ff:7b:f0:5b:19:e8:69:90:54:bb:e5:
15:29:d1:1b:c4:6e:be:d8:b7:ec:8e:f9:d7:45:4a:
43:b7:de:5a:bc:0f:6f:90:04:dc:eb:c3:53:6c:7f:
a7:93:e3:14:03:0d:0e:a9:05:cd:ee:79:d7:ce:dc:
52:3e:5e:79:0b:6d:b7:1d:74:2d:98:35:01:7d:82:
dc:79:cb:e4:80:2d:55:53:dc:39:68:ec:6a:f7:3d:
87:72:64:6e:43:a9:79:23:8f:90:2d:15:88:07:74:
c5:4b:54:58:ee:0c:f6:58:b9:1a:9e:ec:6e:da:4c:
d9:1f:6c:11:48:d1:25:cb:56:61:f4:29:66:f5:ed:
ee:37:10:34:00:79:14:99:df:33:24:63:6f:3d:83:
cc:5d:14:49:a0:7f:cf:b1:70:7f:b2:9b:cc:f5:4e:
13:3c:f4:ff:f7:23:17:e0:d6:95:f3:a9:64:8b:21:
71:65:fa:e8:c7:1f:a4:9d:4b:b1:88:54:c8:29:a1:
00:68:73:75:f6:03:26:8a:e9:b9:7e:f4:ce:5c:9b:
6a:12:66:f5:27:a4:61:38:1f:02:a7:b8:ea:41:a1:
ab:1c:af:dd:90:3a:d4:20:28:dc:5a:30:3e:e3:e2:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3C:2F:7C:C3:61:56:99:56:D8:F9:E0:CB:58:26:03:26:AA:79:49
X509v3 Authority Key Identifier:
keyid:C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:75:37:4d:fc:95:f5:d9:49:33:48:1f:66:bf:f1:80:27:
10:14:1f:b0:08:e8:88:4c:2a:2e:0d:b6:36:c6:dd:d0:4b:f0:
77:9e:5f:19:d1:c0:60:ca:27:12:0a:5e:cb:f7:34:83:17:a3:
ac:e0:bb:0f:49:e9:7e:67:d1:79:b7:6a:ba:35:99:ae:ea:3f:
e3:7d:81:80:f9:05:d7:5c:9a:9f:84:7a:ed:fd:6d:8f:b9:64:
af:bb:26:74:5c:7e:80:14:f1:05:18:2e:05:f6:a2:94:b5:4e:
dd:44:c9:39:09:56:60:cf:c5:92:11:f9:f9:57:dc:4a:3f:e7:
ef:82:c8:13:87:eb:0c:01:da:2c:e2:a9:a6:6d:30:de:f6:42:
e7:14:87:18:d6:8b:5f:ee:98:4e:d3:77:37:b6:e0:a9:70:bc:
4c:28:e0:fb:4d:b9:d1:1c:b4:21:bb:6c:5d:b7:99:33:ea:d4:
33:2d:6d:cf:46:d9:07:a2:dc:5c:e7:af:98:b5:b4:3f:32:01:
ae:ac:df:4b:68:90:1d:9b:20:9c:f2:87:da:83:45:2e:a8:60:
5c:8c:b1:7c:dc:4c:5b:99:c0:25:df:07:bd:15:f8:73:d0:fa:
81:c9:bc:2b:5e:2a:aa:6b:f4:9f:5d:76:0a:61:02:ee:dc:f5:
e4:6b:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:39:01 2026 by rpki-client