Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: 9H9Eq/efL6pzsCJeZslAS/I2m5P/WACFvyzIOda9jDY=
Subject key identifier: C0:DB:58:BC:A7:DB:3F:76:8F:3A:AE:37:BF:86:AD:52:F1:E0:69:39
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019D26CCEC2EBCE5C049D63A66096DE592CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 01E6
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: +MbJZ2+hLMbljU128oddfMfu+lwgaTARQtpA2eYaNnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ec:2e:bc:e5:c0:49:d6:3a:66:09:6d:e5:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=c0db58bca7db3f768f3aae37bf86ad52f1e06939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:e5:1e:96:61:e3:34:61:c9:ad:6e:27:a0:
3f:1e:b3:88:c0:b0:f7:a1:6c:39:82:b1:81:ac:1c:
97:50:1c:60:c2:9b:44:23:ad:2b:4f:46:de:57:fe:
0e:8e:8f:01:f7:ef:2e:5f:e0:4b:0f:f1:2a:8d:81:
2c:16:a9:ad:fb:47:e4:e2:62:2e:0e:0e:37:84:b1:
38:bf:29:4f:d3:e7:06:cc:33:26:4a:a0:21:f5:d4:
bb:fc:60:38:ed:76:ce:dc:e9:f1:1e:a3:10:a6:cd:
05:a2:b1:93:3a:68:95:b9:b0:e2:ce:3d:92:7b:27:
c8:96:a6:2e:f2:3c:58:4e:d9:2f:86:29:27:a8:15:
7a:4c:ce:31:fa:25:d1:53:70:c6:e9:99:3b:89:42:
73:a2:c4:96:66:02:26:17:99:01:7b:0c:ae:26:a0:
41:01:67:d6:de:a0:1b:42:ea:dc:ef:ed:d9:bf:03:
5e:fc:3c:7c:37:09:d0:07:e3:3d:64:c7:ef:64:89:
09:37:f3:cb:3f:d8:47:0a:cc:21:d1:18:c7:37:22:
87:55:ca:25:d3:de:06:f7:8d:3e:40:36:10:e2:51:
6b:40:e8:98:f5:66:dd:c6:30:eb:4b:8e:c8:51:63:
21:85:9d:a9:9e:b1:70:85:f7:19:d3:6f:0c:de:29:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:58:BC:A7:DB:3F:76:8F:3A:AE:37:BF:86:AD:52:F1:E0:69:39
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:84:11:bb:25:25:16:df:dc:8b:b8:7d:33:e8:7a:a6:e2:35:
27:d7:58:32:a7:7e:84:93:1b:14:3a:61:f9:6b:c8:dc:5c:b1:
38:56:4f:9e:79:5d:bb:aa:82:0b:5d:ba:f5:7e:20:5f:d6:7c:
fe:57:81:f8:85:c6:f9:0a:6f:8f:67:dc:4d:b5:a1:4f:26:6c:
1c:d2:ee:dd:4d:ef:7a:69:df:f7:fe:8e:16:0c:06:dd:79:db:
fe:96:de:7c:77:be:19:9a:04:07:13:e4:0d:61:c6:17:c1:9f:
f4:f7:a5:d9:67:67:49:ee:09:93:05:18:14:cb:a3:72:f9:72:
8e:63:cc:84:e4:fe:97:9b:5c:9e:23:c7:fe:62:56:5f:bb:66:
c7:36:0e:38:f0:d7:52:82:5b:01:7a:38:36:22:16:3a:08:00:
93:b8:2e:22:9f:eb:be:6f:2c:5e:77:a9:35:e3:10:37:d7:f5:
74:75:c7:04:0c:c6:e7:84:72:66:5b:62:8b:6f:4e:44:a7:bf:
f1:4b:6a:93:76:58:b4:be:d6:95:1d:95:65:5d:af:de:00:96:
a1:6b:d7:32:54:3a:89:77:ed:93:6c:f9:31:86:7a:0b:6a:3a:
51:54:31:b2:68:f1:f0:60:eb:e9:79:e4:71:1f:a6:97:8f:bc:
06:10:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:31 2026 by rpki-client