Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier: quPkbuuk6sNbcE5fMePqyxF6plltARuAgxMJEfI9ybs=
Subject key identifier: BE:65:2D:FA:5D:CB:61:0D:A0:1E:C6:9A:D9:E4:4D:59:11:56:A9:6A
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial: 019D25840829F3ED6A71A2481932525F81D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number: 0CF0
Signing time: Wed 25 Mar 2026 15:01:42 +0000
Manifest this update: Wed 25 Mar 2026 15:01:42 +0000
Manifest next update: Thu 26 Mar 2026 15:01:42 +0000
Files and hashes: 1: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: OId2TfpyIViQ/hIrJU136QNd9fEb4iSF9w6vznIHY0o=)
2: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (hash: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:08:29:f3:ed:6a:71:a2:48:19:32:52:5f:81:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
Validity
Not Before: Mar 25 15:01:42 2026 GMT
Not After : Mar 26 15:01:42 2026 GMT
Subject: CN=be652dfa5dcb610da01ec69ad9e44d591156a96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:5c:23:a5:99:90:e5:a3:8c:7c:96:97:3f:
13:66:14:0a:07:4d:40:cf:c5:cf:00:a7:b7:62:56:
fe:07:c8:1d:c3:1e:31:44:c8:0d:2e:2d:4f:03:b9:
bd:35:b1:b0:cd:30:19:12:ab:db:af:fe:7e:4a:2a:
5c:9e:60:e9:59:5e:70:20:4b:a9:dc:f5:15:ef:fb:
d8:93:17:da:cd:71:2c:81:58:93:ad:ac:20:cf:6c:
6e:13:bd:0b:02:d9:4e:af:fa:91:1c:87:29:8b:44:
f0:be:55:c3:68:47:3d:e0:d9:90:66:3f:f5:e0:8d:
7d:c7:f9:26:12:fc:62:82:f2:64:00:d5:a2:a7:c8:
fc:68:bb:79:b1:17:7b:b0:e8:be:f6:ac:14:a6:15:
24:dd:a3:87:ad:87:ab:f6:0d:3e:f5:78:f0:4c:50:
50:61:ee:83:7a:fb:43:b9:2e:cd:e6:8d:d1:e8:be:
c4:65:4f:75:c3:44:ab:db:5a:91:7e:59:c9:00:cb:
d1:7a:72:86:38:d1:d2:2e:8a:a5:65:83:bb:6c:c2:
d5:8a:06:18:e3:52:44:fd:47:d9:74:64:b6:52:d9:
04:3d:b3:58:a4:9e:df:e6:9b:5a:87:f1:d6:98:fc:
2e:14:00:b0:4a:1b:33:0f:94:9f:14:de:b2:2e:ad:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:65:2D:FA:5D:CB:61:0D:A0:1E:C6:9A:D9:E4:4D:59:11:56:A9:6A
X509v3 Authority Key Identifier:
keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ef:7c:b7:73:08:cd:71:59:3c:8b:6c:ef:66:5a:19:b7:f0:
1d:74:14:72:9c:10:f4:5b:04:0b:8e:ac:7b:29:04:cf:ab:66:
49:09:26:c9:9b:fe:cc:81:b6:3b:83:42:9d:4d:3f:33:68:f6:
c1:2c:46:86:c8:21:c8:1b:0e:a6:a5:bc:11:48:0b:cc:c6:64:
8f:5f:f9:0e:c5:2e:1d:9c:08:8b:af:4e:0f:7b:4b:e8:69:47:
bc:a7:0a:dc:5d:df:35:fa:1b:f0:99:c5:ed:ff:6c:51:e0:05:
87:e5:c0:cf:fc:bd:f8:6d:e0:db:c4:ee:95:f9:1e:55:a9:07:
98:64:f3:51:c9:bc:1b:0e:be:d0:75:0b:73:20:c4:b5:f1:4e:
fa:c3:47:63:30:89:81:30:dd:2b:e1:d4:0f:9c:a1:d3:54:4f:
ed:77:59:b4:29:95:63:09:f4:af:05:8b:e5:ed:e5:fe:93:ad:
68:42:c0:b0:cc:fe:e0:28:09:01:bc:5f:cc:14:0a:f2:a1:0e:
d7:9a:47:7b:d1:c1:e3:99:7a:da:1c:64:01:5b:09:e7:e5:a8:
d1:cf:7e:e1:be:a0:68:66:07:4d:34:17:c0:ee:44:7d:26:20:
2a:32:18:38:13:a7:4f:19:3a:7a:a8:9e:f1:bd:15:5c:3e:99:
35:31:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:12 2026 by rpki-client