Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: 6mO8Lgt2bI37zgf9YcKSAHGmURuI//Rb3C+A4QwGYlQ=
Subject key identifier: FC:5A:20:AE:50:B1:BB:1D:9A:BF:40:5B:EB:29:E8:23:C6:F1:9B:1F
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 01A1076ECF8A4C5CF389F4ABDF2F6A8F0FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 03E8
Signing time: Sun 04 Oct 2026 15:01:04 +0000
Manifest this update: Sun 04 Oct 2026 15:01:04 +0000
Manifest next update: Mon 05 Oct 2026 15:01:04 +0000
Files and hashes: 1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: QmiypfJSKc8Y30KFssBQMYcppupRbvqnF1f1U174hXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:cf:8a:4c:5c:f3:89:f4:ab:df:2f:6a:8f:0f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Oct 4 15:01:04 2026 GMT
Not After : Oct 5 15:01:04 2026 GMT
Subject: CN=fc5a20ae50b1bb1d9abf405beb29e823c6f19b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:d9:ae:3d:4e:9e:f9:da:e0:8a:ea:2f:db:
44:3b:ac:1b:82:37:3b:01:13:86:5d:69:18:bc:d8:
9d:fe:84:7c:0a:78:fa:d9:c0:67:55:d8:d9:28:8f:
00:c4:ce:c1:ca:c6:44:7e:84:ed:6b:04:15:2c:00:
44:3c:78:24:52:e6:11:00:e0:cf:df:89:0b:ab:ff:
9b:de:ca:94:b8:9e:cc:81:cb:9b:ac:30:43:71:e0:
0d:fb:15:ee:d8:74:41:a6:13:39:77:1d:c6:c8:83:
e7:b6:11:ec:eb:5e:86:1e:8e:0e:35:c0:b3:7c:e9:
16:e7:d4:05:5d:65:a0:84:58:59:1b:60:1d:08:f3:
c2:4b:39:c8:dd:95:29:3d:30:0b:5c:94:dc:1f:6b:
17:28:da:52:7a:08:a0:76:a3:a6:31:f9:55:88:05:
63:19:5a:b3:13:6f:4c:70:3c:ae:bf:63:31:59:70:
80:b9:76:d4:9d:bc:1d:81:55:b2:a0:43:cc:99:1c:
5f:aa:5a:41:dc:ac:1e:b4:cd:5b:c8:aa:db:ac:b6:
dc:12:5b:d1:11:34:28:9e:df:17:d1:33:32:ed:6e:
42:ac:96:fe:31:7d:10:bf:4d:cc:b2:51:ca:be:3d:
8e:ea:b2:e2:75:c5:0a:26:2b:09:e6:b9:c5:36:32:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:20:AE:50:B1:BB:1D:9A:BF:40:5B:EB:29:E8:23:C6:F1:9B:1F
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fe:59:5e:83:12:00:48:ba:6f:f8:6c:ef:1c:dd:d2:00:e2:
67:d9:1e:d9:a2:fe:07:1c:43:8e:73:d0:a7:83:48:3b:f2:82:
f1:88:b5:57:25:e4:c5:d6:89:56:d0:85:ab:ac:ea:b8:75:78:
02:9a:d5:59:a3:5e:19:d6:b8:94:08:c3:5a:17:57:ba:29:f3:
a1:bf:91:ad:3e:85:7f:4d:ff:3d:0c:43:ec:93:a6:08:7b:a9:
7d:ef:80:9d:2d:ce:59:04:e3:1e:33:a0:51:cd:f8:1a:dc:20:
4e:b1:a6:d7:a2:5c:0c:53:f0:6a:2f:f6:45:21:80:fd:59:2a:
58:f3:e6:d1:f9:02:de:ec:71:b4:e1:20:5a:8b:be:10:fc:b8:
f1:b0:e8:f3:36:10:63:cf:4d:08:d2:d4:a6:fe:7a:e4:f6:6b:
b6:a0:7e:36:cc:02:cf:28:58:2a:83:dd:dd:6e:60:08:0a:b4:
03:9d:d4:b9:88:8c:42:cb:28:cb:2b:5a:62:a4:60:09:df:4d:
90:6c:a8:58:63:57:8e:de:ee:47:98:6b:7e:51:8a:5d:d9:f2:
28:0e:1b:72:13:87:7c:7d:29:12:e8:c8:a4:21:36:2b:e6:68:
a3:c3:2c:bc:ed:ff:da:42:a4:8d:34:d1:c0:eb:39:d3:4e:91:
47:42:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:30 2026 by rpki-client