Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: 7l3BH6QIdDDEingymO6ZVs3Pv1R/X82BSyepo4Lu/2U=
Subject key identifier: 9A:0C:A6:7C:4D:5C:49:46:C8:B3:D4:18:E5:1E:57:F3:66:9F:53:AB
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 019D38D3760F126CC9C004CEDAB7529D92C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 16F8
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: vuU1jyXozWVpTUfWC+wd16bbZx3jDJcweVdxxPdH1j4=)
2: deK62GymHjI7pPHou_DnpOMbHoY.roa (hash: Z9L1mrfYyQRlpKO8mVrybo46X8ByziZzKGq7WcbtlNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:76:0f:12:6c:c9:c0:04:ce:da:b7:52:9d:92:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=9a0ca67c4d5c4946c8b3d418e51e57f3669f53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:06:65:87:62:43:3a:10:2f:39:0d:d8:2a:
4e:49:51:7c:e4:98:21:5a:54:8a:8b:05:f9:b8:11:
61:04:32:f8:a0:a0:4a:54:3d:5a:7e:ba:85:95:61:
50:0f:32:ba:66:b2:0b:e3:fb:69:e2:42:1d:a4:89:
d8:49:6d:16:f8:48:7b:8c:c9:7a:69:79:43:f1:ad:
0b:6b:bd:f2:bb:5e:3a:3e:4d:41:d1:88:d5:a0:6c:
78:e1:0a:3c:f0:9a:c5:57:11:7e:f3:fa:1b:1c:d2:
8a:b8:0b:c0:4c:7d:21:c8:6a:16:da:a1:8d:69:8c:
44:31:91:65:dc:6a:0d:4a:72:85:77:3a:5e:b2:40:
2b:c0:97:99:73:c3:58:7d:21:fb:44:58:9b:a7:7f:
6d:4f:f1:3f:6b:0f:be:fe:dd:17:a3:ee:f3:ff:ab:
8e:4e:56:b4:f9:e8:b3:fa:37:37:40:4d:75:ef:7a:
c3:6f:04:4c:0f:c6:07:aa:84:88:e4:57:49:12:6a:
8c:ac:2e:43:aa:91:f1:91:42:35:15:ee:a9:b3:be:
f1:cd:54:4c:c3:9f:2f:13:8e:87:a1:c4:89:da:07:
5e:59:10:60:34:18:42:1f:15:93:a8:e1:29:03:fd:
32:ad:5f:29:9f:5d:2f:db:52:7a:f5:75:f9:ae:c9:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0C:A6:7C:4D:5C:49:46:C8:B3:D4:18:E5:1E:57:F3:66:9F:53:AB
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c8:40:c9:b9:e0:d6:16:c5:43:f7:0b:7a:4a:e4:fe:d7:1e:
dc:87:d3:d6:04:65:ec:3e:50:85:54:8e:27:d9:0e:c4:34:0c:
6f:90:a1:49:af:31:9c:99:b7:7d:18:ac:13:07:18:b1:eb:3e:
52:94:41:c9:a8:a6:28:63:f9:8b:bd:11:04:cb:41:e6:9a:75:
42:f3:85:61:0d:2a:65:62:42:6f:00:6f:49:35:34:5d:98:70:
3e:24:9e:68:ce:29:f2:fc:57:a1:26:70:5d:c8:73:8b:9c:f6:
57:0a:07:46:71:d2:bb:1d:cc:7e:df:4b:dd:bb:8a:51:f1:a4:
a8:2e:8f:16:18:a7:ce:52:69:17:6b:d8:b0:ea:c2:01:8d:65:
39:d4:b8:98:e8:91:ab:9f:d1:99:5f:f3:1a:6f:83:52:8a:08:
d6:51:73:68:83:3e:76:10:c4:97:f8:83:4a:28:ff:ef:e6:3f:
7a:5e:be:ac:9b:8f:78:d8:c1:03:71:0e:0b:98:39:f7:50:e7:
58:b5:ee:cd:10:f0:22:a0:76:00:7b:2f:a4:dc:bc:dc:bb:76:
06:02:30:f6:bf:68:5b:85:17:29:95:a1:d9:d8:63:f2:c0:76:
fb:25:5b:11:d2:9e:0d:5d:02:f0:51:08:df:d0:ff:8d:f4:15:
da:69:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:16 2026 by rpki-client