Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
File: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft (raw, json)
Hash identifier: EsZSg8Ui+6d280NYJPjczsl2EbkjLFLwvPucsUxMK7w=
Subject key identifier: 94:31:1D:9E:08:FA:AA:8C:E8:47:76:91:E0:CB:7C:EC:07:57:55:34
Authority key identifier: C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
Certificate issuer: /CN=c037958083b641b773123ceada7bef27558e5940
Certificate serial: 019D389BC5E4707253914D8BA73D6E1A2D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: 5VST5x-KVdBfOMTiW6jhmRN3Qs0.roa (hash: wqFTVZ/HxEOLXMJiLn5zlgjHw3BsrHoBW7lxCAyjVew=)
2: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl (hash: bBPSogRKM0cLB55hCn/4oU0Uyk20nMDed/jUlgze1Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c5:e4:70:72:53:91:4d:8b:a7:3d:6e:1a:2d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c037958083b641b773123ceada7bef27558e5940
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=94311d9e08faaa8ce8477691e0cb7cec07575534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:ad:d6:ef:d8:83:a8:c0:fb:97:bc:e6:ad:
ee:47:82:60:fe:38:94:90:b2:7a:43:8a:a6:09:ad:
19:68:31:45:a6:1e:31:72:e3:e2:6a:73:3d:2a:25:
5a:3d:31:08:30:69:20:c3:ff:39:da:99:03:94:31:
1f:bb:a0:f2:27:fe:e4:23:1c:59:ce:9e:29:e3:3b:
c1:3d:53:13:23:b2:36:36:6d:23:c5:e8:ef:ca:40:
e4:5d:17:d8:36:2a:31:4b:2e:ca:df:27:71:9a:9d:
1e:fb:6c:dc:1c:6d:36:60:77:45:21:6d:4e:4f:98:
23:fb:06:02:6b:26:1f:52:5a:42:7c:a8:93:8f:2d:
71:3d:94:ff:cb:41:d2:dd:29:04:ef:3b:2d:76:20:
51:38:a4:a6:97:3a:dd:48:45:5f:7f:63:85:57:6d:
a4:78:53:fc:b9:cc:2d:9a:f8:49:17:3c:75:bc:83:
9f:17:3b:9c:c8:b0:ef:d9:ae:b9:c6:26:fc:53:cf:
13:d6:5a:b1:17:40:d9:e4:45:9a:de:51:3d:de:69:
a9:83:12:04:d3:ac:ab:fc:8b:4b:bc:db:41:98:ce:
f3:f4:c2:7c:ff:e4:63:04:66:3d:05:2b:09:af:67:
e2:10:78:c7:8b:47:c2:5f:18:a3:b2:f4:6c:95:bd:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:31:1D:9E:08:FA:AA:8C:E8:47:76:91:E0:CB:7C:EC:07:57:55:34
X509v3 Authority Key Identifier:
keyid:C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2e:87:be:d4:a9:e1:e3:78:5e:b4:94:63:ad:01:ec:4a:7d:
e7:f7:e4:cb:51:6c:aa:af:65:2f:69:9f:2e:5c:6f:b6:20:d1:
e7:29:c6:8e:cc:02:f7:70:ea:86:3f:f7:ae:dd:e4:72:09:d7:
f7:97:d0:55:48:ed:4d:26:63:e3:fa:25:a7:33:e1:6b:24:4b:
ea:e4:0e:ca:56:5d:ca:19:c1:5e:c5:91:85:80:61:10:4b:cb:
03:72:a1:d2:f0:f8:62:c6:4a:b7:b1:1a:ee:fe:8a:9a:ec:6c:
30:b0:c7:39:6f:70:44:be:31:1c:c6:e2:d5:d5:38:d4:31:68:
ac:a9:71:d7:33:4c:b8:a7:28:3d:13:8d:97:05:de:86:83:b0:
8d:ce:49:81:25:58:01:ea:0c:c4:a4:a0:bd:99:68:f9:d7:a3:
9e:02:e5:99:bb:d2:5d:57:1f:ec:3b:b2:f0:77:2c:d0:1b:80:
43:75:b2:2c:35:3b:69:c8:be:d0:ce:e6:23:dd:51:95:43:c5:
ad:c4:0d:6f:59:01:4a:18:71:61:05:65:67:9c:8d:31:34:52:
64:d3:2b:d5:9d:48:5f:d9:bc:17:d0:d8:4d:ef:13:02:29:d6:
bd:e0:84:4f:07:9f:6a:b7:c8:ea:ed:9b:13:34:ff:bf:a0:ab:
a8:e5:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:55 2026 by rpki-client