
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File: w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier: HuhxSkKPtneTcVtZPiBs/Ir0Uih6Ejmy6LvnP+HkLGM=
Subject key identifier: 8E:70:DF:71:EB:7F:8B:59:64:F7:0E:ED:FC:82:29:39:63:2D:5E:F2
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial: 019D284D5390BAD6CAC0500479D06DBB8CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number: 022F
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: 1hYxU510mvC8W-Z5Lh_4RiP_RwA.roa (hash: Qdg6Cvex+ogQOj7yX9Hv45NrkNDmCPh+AWkefNtDGNk=)
2: 6eKn3uMQuUNTMkTpT0y-3vnuj_s.roa (hash: WZXQFULC/IwGTQvmcWdtzTS7QYlU+Fpmd+6cLbWavvM=)
3: Um_RzOlxicEhNDIKHBSNs-PRpSQ.roa (hash: xMiT/EQRShPHgjRGkcH+fcgroOrBUqddxFIB0qcN/nI=)
4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: OgaHzdFqkLDl8tb0yI2oheWxAHPIEjHsmrpERCTDDbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:53:90:ba:d6:ca:c0:50:04:79:d0:6d:bb:8c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=8e70df71eb7f8b5964f70eedfc822939632d5ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:42:1b:8a:1f:2a:c1:45:b6:cf:18:7e:29:
36:90:51:1d:1a:5a:61:e5:2e:88:d4:f6:9f:a7:5b:
5e:bf:9b:55:8f:18:31:c9:52:e2:39:da:b6:c7:e8:
98:96:33:a6:cb:70:e1:51:be:24:d5:34:a1:01:be:
b5:d7:91:71:5f:a6:25:3f:bd:05:56:42:27:cb:18:
7d:57:cc:91:98:38:cf:b1:2e:fb:a2:fc:af:76:12:
4a:ef:da:e5:6f:f8:12:3b:53:f8:1e:b0:6b:21:3d:
9f:0f:ab:fd:1c:2b:94:7d:9c:02:df:1e:9a:96:0d:
b5:74:3a:c6:34:48:b3:2c:85:a9:c4:9c:e5:24:58:
90:e6:8a:da:54:b4:fb:4d:c3:ae:6a:ab:3f:f9:c7:
5a:20:b6:27:38:ea:9e:d6:dc:bf:4e:05:11:d8:db:
c9:c2:b0:ba:4b:59:3d:1a:de:0e:17:7e:be:6e:f3:
d5:a2:49:7c:69:70:2b:4b:5a:2c:e2:dc:84:fc:d9:
88:7b:ab:72:b3:1c:73:30:3c:de:5a:c4:11:1b:ee:
79:f6:2d:67:b8:c0:bc:45:98:16:ce:72:1f:dd:7f:
3b:e2:8e:5a:4a:dd:cf:7b:53:b5:81:c4:46:ca:f1:
11:fb:e4:aa:ea:93:76:6a:6d:41:71:4b:d1:ea:5c:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:DF:71:EB:7F:8B:59:64:F7:0E:ED:FC:82:29:39:63:2D:5E:F2
X509v3 Authority Key Identifier:
keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:7e:47:2a:ad:c2:57:00:1b:8d:77:d3:69:2e:0c:a0:c3:
fb:b5:a1:c1:11:7f:12:8f:00:46:56:ab:73:fa:f2:d3:76:4b:
25:e2:7e:45:aa:8b:82:04:c9:c7:42:45:4c:18:b5:73:46:97:
2a:b0:b0:33:e9:4d:7b:91:f6:4a:94:2f:24:1f:f2:1d:98:3d:
be:6d:7c:ad:01:0b:1f:dc:4d:93:a7:91:4a:f9:af:2e:73:fc:
c5:38:de:16:73:d8:40:48:9e:4a:29:4d:c0:47:3e:01:f2:6d:
d9:c8:5c:ed:26:92:f8:d9:64:ff:d4:03:04:3a:43:78:ca:9e:
02:b0:fe:92:bc:f3:b8:78:97:a0:6d:52:12:67:0f:5b:f7:81:
4a:7f:64:c4:30:96:ee:4d:a5:f3:b7:b3:07:e9:73:57:d2:20:
60:ee:e9:f9:a7:47:6d:af:9c:ca:c0:0f:8c:d7:4c:ba:1a:7f:
dc:f9:3c:4f:bb:46:5e:7b:e4:9b:6a:66:75:84:42:d9:32:d8:
b0:48:f2:3e:1c:70:aa:26:d2:34:fe:16:b7:ee:bb:2d:56:c4:
6f:e6:5f:d8:04:39:02:28:77:df:68:bc:9f:47:a1:6a:55:71:
1c:95:74:19:f2:df:c0:e1:a8:3b:16:2d:20:16:78:83:ec:58:
6e:3d:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:05 2026 by rpki-client