Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: yIm9nFwW/zcBbfiT1RY3R87zBFlHiAUuUbGfBHuF5Dk=
Subject key identifier: BA:00:29:C2:03:67:4C:57:23:1A:43:01:07:EE:B6:FD:1F:06:FE:FC
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019F94A4E7FA70E88D48835BF0C5E80F2AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 0328
Signing time: Fri 24 Jul 2026 15:01:02 +0000
Manifest this update: Fri 24 Jul 2026 15:01:02 +0000
Manifest next update: Sat 25 Jul 2026 15:01:02 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: sFoao0qIotFo/f5wMfy7TAOdoxodJ7rEYeisxk18L74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:e7:fa:70:e8:8d:48:83:5b:f0:c5:e8:0f:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Jul 24 15:01:02 2026 GMT
Not After : Jul 25 15:01:02 2026 GMT
Subject: CN=ba0029c203674c57231a430107eeb6fd1f06fefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:77:62:6d:db:d8:3a:2c:5d:dc:d8:71:79:
58:7b:1e:69:0f:54:28:01:00:07:b0:94:2b:e7:d5:
3a:c4:82:f5:07:0b:52:59:8d:8d:cb:6b:38:55:f7:
ac:6c:a9:62:37:00:8a:f2:6d:52:00:02:b8:6b:b9:
0e:2a:b4:4f:4f:9e:fd:ab:93:c3:1b:76:01:35:49:
ea:df:8b:55:2a:5f:c0:ce:5e:5d:70:d6:bb:5e:2a:
a2:f1:c9:96:c3:f1:2d:78:cf:9f:82:49:b9:99:03:
fe:7d:59:4e:2f:2e:c0:47:d0:9b:78:23:e7:3e:53:
7b:df:98:49:9f:03:98:7e:53:0e:24:cb:58:8c:67:
aa:14:8d:f5:98:77:40:6c:c8:f7:56:1b:dd:72:04:
36:47:f6:51:a5:26:33:74:3e:41:0a:94:4d:6f:b0:
ef:a0:e4:b5:15:a3:6b:43:10:a5:6e:de:82:34:dc:
a8:63:47:3b:dd:5d:15:84:0d:f6:6c:5e:87:3c:13:
c1:8c:f0:5f:08:6a:9f:3d:f1:df:fd:60:0d:88:50:
e4:05:f4:d2:b4:97:5d:ee:5b:c6:9b:2c:33:28:10:
c6:75:de:c6:3c:ce:4a:21:da:9b:ff:a7:16:38:f8:
ef:15:b3:5d:4a:7f:ec:ac:35:6e:89:85:a0:92:56:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:29:C2:03:67:4C:57:23:1A:43:01:07:EE:B6:FD:1F:06:FE:FC
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c4:17:bf:30:b1:1e:d2:0b:a3:6a:eb:ac:2e:54:c7:49:89:
67:74:c6:20:16:f0:9a:70:c8:fd:c3:51:52:ba:5a:95:64:04:
2d:69:4a:3a:73:b2:4e:85:c6:ea:8a:24:50:52:a2:86:26:06:
55:4f:cc:56:96:39:b7:10:79:b1:dd:1a:7d:60:39:e1:14:02:
cd:9a:a1:0e:93:b5:5c:5d:85:8c:d7:5d:fa:0e:7c:b1:b2:c1:
24:45:a0:61:14:1a:19:c7:c8:7c:91:e8:33:b4:36:e3:3b:ac:
6b:79:f8:6a:92:8b:97:1a:c2:e1:e0:d5:f3:9b:c8:a9:69:92:
49:69:fa:41:a4:cf:0d:54:5f:9c:d3:a5:07:2b:8d:10:2b:52:
48:19:07:2f:c1:42:b7:f4:1f:61:0f:7b:e0:c4:82:46:c0:d7:
5a:7d:e8:82:c5:cc:5e:06:19:fd:11:81:0e:d0:01:5c:9a:9f:
d3:4e:f6:0f:3d:6a:71:22:58:42:dc:dd:ba:cc:57:56:37:52:
99:6d:88:ef:b0:34:ae:1a:90:06:f3:32:1f:eb:54:30:5b:6f:
a1:18:57:9c:69:92:9b:13:15:db:c3:14:ce:d9:77:d3:6f:39:
6e:31:17:7a:6a:2c:5e:cb:3e:9c:7d:0a:51:81:3e:4f:a6:15:
51:b9:13:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpOf6cOiNSINb8MXoDyqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3
YjQ4OWQwHhcNMjYwNzI0MTUwMTAyWhcNMjYwNzI1MTUwMTAyWjAzMTEwLwYDVQQD
EyhiYTAwMjljMjAzNjc0YzU3MjMxYTQzMDEwN2VlYjZmZDFmMDZmZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5193Ym3b2DosXdzYcXlYex5pD1Qo
AQAHsJQr59U6xIL1BwtSWY2Ny2s4VfesbKliNwCK8m1SAAK4a7kOKrRPT579q5PD
G3YBNUnq34tVKl/Azl5dcNa7Xiqi8cmWw/EteM+fgkm5mQP+fVlOLy7AR9CbeCPn
PlN735hJnwOYflMOJMtYjGeqFI31mHdAbMj3VhvdcgQ2R/ZRpSYzdD5BCpRNb7Dv
oOS1FaNrQxClbt6CNNyoY0c73V0VhA32bF6HPBPBjPBfCGqfPfHf/WANiFDkBfTS
tJdd7lvGmywzKBDGdd7GPM5KIdqb/6cWOPjvFbNdSn/srDVuiYWgklZs9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoAKcIDZ0xXIxpDAQfutv0fBv78MB8GA1UdIwQY
MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt
ZDI5YTVkOTE4ZmQ4LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4
LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacQXvzCx
HtILo2rrrC5Ux0mJZ3TGIBbwmnDI/cNRUrpalWQELWlKOnOyToXG6ookUFKihiYG
VU/MVpY5txB5sd0afWA54RQCzZqhDpO1XF2FjNdd+g58sbLBJEWgYRQaGcfIfJHo
M7Q24zusa3n4apKLlxrC4eDV85vIqWmSSWn6QaTPDVRfnNOlByuNECtSSBkHL8FC
t/QfYQ974MSCRsDXWn3ogsXMXgYZ/RGBDtABXJqf0072Dz1qcSJYQtzdusxXVjdS
mW2I77A0rhqQBvMyH+tUMFtvoRhXnGmSmxMV28MUztl30285bjEXemosXss+nH0K
UYE+T6YVUbkTeA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:49 2026 by rpki-client