Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: tbgeTU2sGHzsmd32cUX+zj1dzmU0LOGH7lQhpZFRzPM=
Subject key identifier: 91:E3:1B:50:7E:14:72:AA:5F:C6:C1:EC:C8:0B:B9:DD:64:FB:7A:15
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019E1FECF8511AD109EE707E12FD1BA2A128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 0267
Signing time: Wed 13 May 2026 06:01:24 +0000
Manifest this update: Wed 13 May 2026 06:01:24 +0000
Manifest next update: Thu 14 May 2026 06:01:24 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: N4+hcxvGGDks6LBi/3DabCOj7oWKOzq7ownjOfVkt+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:f8:51:1a:d1:09:ee:70:7e:12:fd:1b:a2:a1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: May 13 06:01:24 2026 GMT
Not After : May 14 06:01:24 2026 GMT
Subject: CN=91e31b507e1472aa5fc6c1ecc80bb9dd64fb7a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:5b:0e:f4:b8:ba:dc:c8:39:44:8e:18:5c:
86:d2:61:9d:73:3c:dd:2c:9e:3d:5e:13:f8:ec:fa:
d2:67:67:4a:a0:48:d6:e0:7c:64:95:4d:aa:3b:b3:
7a:5a:85:77:17:ea:aa:bc:3c:f9:e1:f4:84:55:76:
f0:89:02:6a:30:ca:78:1f:29:e1:c4:b6:8a:94:c4:
00:eb:8a:c1:aa:db:ec:52:48:40:a6:b5:e5:70:1b:
b2:fb:b7:f7:5b:a4:de:c2:db:f7:2b:88:53:dc:53:
37:4d:bc:78:78:f9:c0:5e:61:04:78:c0:11:77:a1:
21:f6:9d:d9:5e:a2:f1:79:33:27:6d:9c:b4:29:ce:
f5:65:06:4b:ee:11:0d:57:a1:31:78:b8:e0:4c:62:
3b:dd:90:21:02:3b:d7:f7:52:a8:1a:2a:d0:98:76:
5a:85:25:94:dd:a2:17:9a:a3:11:78:8c:8a:25:0d:
47:be:bf:13:b9:9a:2b:07:64:4b:ed:07:73:21:f2:
e4:3f:8e:b9:99:20:92:b9:c6:5a:80:c9:06:00:be:
58:24:77:ff:53:d9:ae:03:44:04:be:84:a8:7a:e2:
25:ee:06:b8:5b:65:f5:bb:50:10:a1:34:8d:48:60:
6c:5f:e1:77:32:b2:f2:03:27:6c:6b:ee:b7:21:a2:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E3:1B:50:7E:14:72:AA:5F:C6:C1:EC:C8:0B:B9:DD:64:FB:7A:15
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b7:11:d2:9e:31:07:2d:4c:d1:00:e0:02:0d:4a:5f:82:b5:
70:d1:09:b2:8d:0d:81:91:fd:ff:da:73:1f:dd:58:16:1e:9a:
bc:67:6a:36:43:a6:d4:1b:1f:ff:99:bf:5d:67:c2:a0:ae:f0:
e0:af:de:94:26:0c:a6:6a:87:a0:07:9f:88:81:72:b6:11:5d:
a4:5a:12:95:2c:8f:8f:4f:61:e7:82:3f:77:e4:d8:7a:ed:5f:
a7:b8:96:4a:4e:78:03:ac:e9:05:13:db:9f:ae:36:79:d9:7c:
4e:95:3d:91:65:c9:c8:50:4a:f7:08:29:66:a7:82:67:e4:5a:
03:8d:74:d3:75:41:21:0b:ba:6a:5b:0d:d4:e7:09:04:fd:1c:
84:01:8a:5f:26:b7:da:9e:aa:fd:f6:6f:42:b7:f7:75:e5:85:
ca:c8:15:9f:a9:b1:94:42:aa:26:05:c4:f4:a2:c1:b2:07:2d:
f4:40:56:af:61:dd:ef:a4:de:ad:ee:54:4d:46:a3:12:87:99:
1f:de:2a:3d:64:27:4b:7e:f7:63:b3:6d:ae:80:aa:90:8c:c3:
98:2b:4e:ab:71:0d:3b:41:17:88:be:b8:08:e5:68:57:0c:93:
37:27:79:85:c0:49:7f:82:24:3d:d0:74:a5:1b:2b:0f:a4:ad:
dd:0b:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:01 2026 by rpki-client