Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File: wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier: 5p/XEuDo6EGjZDktWUTw4sLsYnLYP1PNtY5rQ7HoFxk=
Subject key identifier: 26:48:A6:5C:57:C5:88:30:F0:0B:83:74:C8:CF:F5:DF:94:CA:19:3F
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial: 019D37C0F5A651994282E4308AC4EF7FE1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number: 04F6
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: sESThJoImWepiHXICmCyiUQO13c.roa (hash: /EXA+hsAhf5yELjtFqrr5qslACb1l1qBz89KSCq1yVw=)
2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: /jUdByJ+Avb92sNECAWFzy6Ewvxi7Y6GhcQldSDO9rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f5:a6:51:99:42:82:e4:30:8a:c4:ef:7f:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=2648a65c57c58830f00b8374c8cff5df94ca193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:2f:81:dc:bc:0b:a7:7b:26:f7:1a:99:6a:
d7:d1:57:01:4c:ea:4f:a8:a4:b9:01:01:f8:70:1e:
cc:96:1d:bb:aa:22:fc:52:39:0f:dd:6f:64:12:e8:
f3:dc:30:7e:4d:fe:c1:64:12:37:3b:f7:e8:5e:6f:
e1:31:24:9f:6e:84:5a:67:b8:81:72:4c:96:70:ed:
20:87:ad:68:c3:17:27:6e:a4:4c:ae:34:4e:8b:7c:
e5:03:0f:80:aa:29:7d:81:66:ba:fa:03:d5:fa:ec:
84:5a:ae:84:74:6c:5e:4f:42:33:3e:6c:b1:ee:78:
e9:a4:2c:c3:08:d4:fd:71:68:72:ef:2a:c7:13:d6:
3c:ee:be:bd:77:b1:6c:0e:11:13:16:86:23:19:63:
5a:42:7b:7f:d7:34:ac:aa:c7:16:09:85:17:96:eb:
3b:91:0d:82:14:f9:1e:5d:80:26:3b:66:50:fb:50:
d2:e8:5e:99:94:7a:91:6e:65:59:7f:8e:c5:96:a5:
e2:c8:ff:b3:de:e7:b3:4d:e3:c1:ee:6f:e6:86:e5:
98:6a:01:c7:bb:b1:3f:52:15:e7:c0:7f:a8:47:46:
f6:bf:26:e2:3a:13:52:92:7b:91:76:83:35:63:c6:
2c:7d:10:2a:fb:34:d8:da:33:6d:04:61:a6:14:07:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:48:A6:5C:57:C5:88:30:F0:0B:83:74:C8:CF:F5:DF:94:CA:19:3F
X509v3 Authority Key Identifier:
keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d6:6a:f5:88:f2:17:a5:99:0d:bf:fb:b8:b4:b3:af:c2:68:
bc:ae:ca:09:33:8a:a9:21:96:95:b0:83:9d:17:4d:1b:1c:ee:
75:86:c8:d1:fa:e4:d2:b4:20:4e:97:58:a2:c4:a8:5c:7b:18:
51:3f:5e:cc:23:b8:62:41:d2:b1:2e:2f:36:d1:a2:d3:7f:9c:
23:3e:15:4f:44:d8:22:3e:b7:dc:1d:02:b1:41:fe:42:bc:22:
ba:3d:09:c7:2e:4a:e0:6f:6b:fd:ee:53:3f:1f:b7:62:53:7c:
d1:c2:ce:cd:a1:d8:52:81:c0:f0:f6:3b:86:28:9c:4a:2d:8c:
ab:bf:ac:2e:c8:6e:d6:91:c7:74:59:ef:68:d7:56:be:aa:c5:
a1:76:b7:c2:cd:de:5f:4b:02:5b:8f:51:ab:2a:36:17:8a:0d:
32:a3:fb:fa:f8:c7:be:40:0d:da:c0:1b:61:a2:7c:61:51:f0:
bb:65:53:31:80:b1:86:3d:9c:01:9f:6a:98:76:a5:be:7e:bd:
9f:0f:04:bc:13:ea:5c:23:ab:c5:9b:5b:16:80:f5:42:a3:7c:
ca:0d:fd:73:91:8a:4a:9f:57:d8:36:ac:20:76:d7:91:08:71:
cd:50:1f:a5:ef:bf:7d:51:52:61:28:4b:fa:44:ee:25:d7:d3:
98:9d:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client