Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json)
Hash identifier: Acb8Vzrp47M1KkJ/uETapFG1bsqouJqC2fhr/uMPsSE=
Subject key identifier: CB:20:B3:E1:BD:12:E4:B6:86:CB:AF:8D:77:8C:4E:2E:40:42:1C:28
Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Certificate serial: 019D2884B97AF7DB25C313C2EBDC45F25ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
Manifest number: 0377
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: 9JcY5F-IdYeKq8GKyIuRVtqSSwY.roa (hash: tKt98bn7IEqVw7tRtArn7Eg/aO1ukt/5DnVwd3eE18g=)
2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: vKJr+jpbO+Z+9WJKnDBXewIXTrXV+BMHptchs+3ZIzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b9:7a:f7:db:25:c3:13:c2:eb:dc:45:f2:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=cb20b3e1bd12e4b686cbaf8d778c4e2e40421c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:12:30:e4:bc:aa:7d:9a:d0:ba:ce:f4:6b:
ac:83:8d:74:06:7f:78:fd:44:a2:8f:3e:33:9c:f0:
1d:4f:ea:0b:e7:79:08:c6:a1:cb:11:5c:1c:b0:c4:
bb:ac:10:7e:b1:de:9f:50:73:95:01:c5:e0:cd:9c:
ff:6b:72:54:b6:86:00:67:8e:91:19:b1:ab:ae:24:
f9:2d:0a:78:93:fa:3b:3d:ad:7d:06:8a:76:1e:ae:
c9:07:82:8d:29:69:5e:88:60:ac:89:75:b5:0d:b1:
5a:03:36:af:b5:1f:3f:24:cc:be:71:b3:20:f1:67:
a9:ca:68:ad:da:3e:3c:a5:cd:ba:0c:43:2c:cb:b3:
38:b1:0f:18:da:66:df:44:64:31:5a:ed:9f:b7:ad:
08:7e:99:c0:e4:3d:f8:ea:aa:33:26:61:73:3a:90:
11:f9:98:3f:79:a4:67:25:4b:ec:b8:c3:68:98:59:
db:82:0a:6d:96:4c:a3:d5:a8:30:05:4b:2e:48:d5:
57:ff:45:e5:8d:be:81:7a:04:41:f0:94:6e:52:d2:
e3:ae:c8:5a:9e:ca:b2:a0:06:86:d6:73:4c:ca:2a:
01:58:66:a3:27:21:83:c3:f2:4b:6a:dd:98:c7:90:
39:3d:70:c6:64:22:93:93:67:3a:98:c1:c9:4d:81:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:B3:E1:BD:12:E4:B6:86:CB:AF:8D:77:8C:4E:2E:40:42:1C:28
X509v3 Authority Key Identifier:
keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:29:95:c7:46:54:11:ad:84:e6:4c:8d:18:85:7e:d5:85:1b:
dd:25:c0:82:27:90:60:22:2f:1a:a0:9c:3e:22:2d:56:f5:39:
d2:9d:1c:d9:98:69:c0:fb:5a:eb:da:5a:b8:29:51:7e:a6:df:
0d:70:80:54:0f:e3:5f:40:3c:ef:98:dc:10:12:b3:c5:f6:85:
40:a0:20:bb:0a:64:51:bf:30:0b:9a:ae:59:71:de:fb:58:b1:
d5:92:fd:a7:70:09:bc:71:d4:41:c1:da:ad:c7:62:52:5c:9c:
92:6a:03:a0:32:15:0d:e4:fe:f7:d9:1a:09:b8:0f:4b:77:61:
94:50:ed:e2:21:1e:29:a1:a3:f3:37:b0:9b:32:b9:7e:31:a9:
08:da:8e:6c:95:ca:4c:d8:7e:94:80:d6:87:db:0b:85:7b:62:
67:0d:27:93:65:8d:be:36:94:11:ec:c0:a2:f3:d8:1a:93:7f:
1f:15:71:b2:ef:d9:e1:69:d5:0f:31:9f:9f:2e:03:bb:f8:ab:
7a:83:4e:9b:da:6c:60:7c:52:93:b3:f6:6a:d1:f6:9a:68:77:
43:2b:27:a1:a5:e2:19:d6:94:7b:81:c8:34:f7:cb:c9:8a:e3:
57:84:30:7a:dc:32:10:3b:54:3c:21:83:98:4a:48:d6:4f:07:
59:b7:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:08 2026 by rpki-client