Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: uFINRH3nleQmZ97mY2nT65xG9bkbBPOP/T4DGcHGGIU=
Subject key identifier: 2F:F3:44:FA:68:AD:F6:B9:EE:36:EE:B7:91:F7:C7:44:2C:75:67:3F
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 019D25842C16C728B84904B5C7870EF299B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 1433
Signing time: Wed 25 Mar 2026 15:01:52 +0000
Manifest this update: Wed 25 Mar 2026 15:01:52 +0000
Manifest next update: Thu 26 Mar 2026 15:01:52 +0000
Files and hashes: 1: IokgSudl3AkR5yh01t-OFzPg4qE.roa (hash: KcJVO/wfX/Xcbn1mfQvmOj8I+t/hByN+WDPLWTnqUfw=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: 3ECG5BKXPNnT/OTx0N2WFD5QfunydiK/SV9jnvqWV5E=)
3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2c:16:c7:28:b8:49:04:b5:c7:87:0e:f2:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Mar 25 15:01:52 2026 GMT
Not After : Mar 26 15:01:52 2026 GMT
Subject: CN=2ff344fa68adf6b9ee36eeb791f7c7442c75673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:e8:16:21:0d:86:d1:17:25:3a:de:58:29:
c4:ad:6c:18:09:9c:0d:b9:4b:5c:d7:ac:e4:cc:84:
79:f4:9f:53:0d:07:fc:85:07:e2:25:ec:1f:ef:08:
72:c8:a0:7a:77:06:04:7e:b2:91:a0:67:10:e0:89:
e1:73:0a:3d:f3:80:93:e7:ad:57:28:0b:66:e4:a8:
e2:5c:31:23:23:e8:a8:6a:17:2b:45:a7:7e:95:e5:
7e:8c:73:13:ba:e2:7b:f4:84:ec:e1:12:49:18:0d:
93:48:20:8d:62:e6:c1:53:46:99:7c:c1:2b:e9:6a:
00:5c:1a:d8:39:14:19:71:11:a0:c7:24:40:82:58:
47:f0:ef:b0:3a:11:41:bf:a6:62:0f:f1:09:3a:70:
86:03:5c:49:59:c4:fe:11:81:a7:19:bb:ad:c1:d8:
51:d5:b1:16:8e:aa:e1:77:13:da:03:e3:1c:80:b3:
15:2e:01:69:aa:fd:61:18:f7:e3:d2:9b:de:5c:82:
2c:97:26:91:1e:fb:6b:d5:29:07:70:96:3c:ac:df:
42:1b:53:ee:32:37:58:d4:71:45:f5:f5:be:e0:6e:
1b:3a:72:e7:e0:5b:65:b8:36:53:6d:e8:9e:b9:be:
7f:36:52:7f:7b:21:1f:73:c9:bc:f2:90:f9:3f:ce:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:44:FA:68:AD:F6:B9:EE:36:EE:B7:91:F7:C7:44:2C:75:67:3F
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:50:82:e9:42:27:ab:a1:20:32:51:2c:dc:1b:d1:d5:b0:c5:
48:02:ae:95:f2:a7:e5:05:71:d4:d1:52:ee:87:8b:01:6c:cd:
1a:0a:0f:fd:9a:8e:e2:48:33:2e:52:b1:b8:c9:dc:13:7e:a3:
c5:06:3e:d9:e1:19:9e:38:0b:52:1b:83:eb:cf:f4:ca:5f:ca:
50:5c:52:8a:cd:5e:ab:38:1a:77:f5:b4:34:d0:77:9c:b2:f5:
97:4d:26:41:88:df:c4:fc:6d:3d:8d:23:0e:cb:02:47:d7:3e:
22:f5:14:35:fb:56:47:49:82:6b:3e:7b:d3:30:04:64:9f:49:
db:7f:29:89:35:37:14:1f:08:b2:43:20:b9:00:8c:c5:53:6f:
86:47:05:5d:32:78:79:39:3a:7e:2a:13:d3:a4:29:ca:9a:41:
a9:aa:56:51:69:65:36:58:e9:d1:5e:b8:6f:fc:9f:b4:9d:07:
5f:4b:23:1e:2a:78:0e:e9:fc:2b:c0:a7:f7:e6:1e:03:ba:b4:
d9:69:0e:0d:5e:eb:68:2e:83:ab:66:28:3d:e0:75:99:66:5f:
33:2b:eb:f5:3d:d2:29:96:ee:08:e7:e5:d6:cc:80:1d:c2:c6:
95:a6:32:db:42:12:03:ad:1e:e1:29:ae:58:de:5f:1f:86:47:
a8:01:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:22 2026 by rpki-client