Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: uq8slLEJjHiRAY+gyeaIneXYqOCy1ZpPdkQ7MYvgcyU=
Subject key identifier: 18:75:4A:28:00:23:BE:27:F3:57:61:F0:55:E6:5C:25:97:B4:4E:0B
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 019D25834397D038833FBEE054B9EE621B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 06C7
Signing time: Wed 25 Mar 2026 15:00:52 +0000
Manifest this update: Wed 25 Mar 2026 15:00:52 +0000
Manifest next update: Thu 26 Mar 2026 15:00:52 +0000
Files and hashes: 1: cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa (hash: AIiSdddDnEI2m5R7XY5zbokXJZOOTj517t6eCwoUwtY=)
2: ma1O2DltnndXpH9aWxYN2FdTRIE.roa (hash: y57vLDkssL86NAU7EWD13+ZBmcV21SBi3gDMpAVaAnQ=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: pFKwIJ7DKnYikMoUUoU+xuUJLcnVCDv0sHwS5UYhPdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:43:97:d0:38:83:3f:be:e0:54:b9:ee:62:1b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Mar 25 15:00:52 2026 GMT
Not After : Mar 26 15:00:52 2026 GMT
Subject: CN=18754a280023be27f35761f055e65c2597b44e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:52:f1:2e:3a:56:d0:1c:88:05:0e:7e:64:
0a:2f:c0:0b:68:20:91:52:69:65:60:e3:1e:70:ac:
ef:36:fb:ce:36:68:4f:ba:f9:b9:7d:ce:21:b9:7c:
b8:34:22:04:df:27:c5:7f:bb:53:b4:9e:67:16:be:
90:d2:73:98:04:05:64:be:c7:60:20:5c:f2:27:fb:
d3:a5:79:fe:ca:8a:eb:6c:cf:49:d7:c7:20:6c:2b:
be:ef:89:33:f7:cb:eb:18:5a:3c:17:20:c4:09:ad:
ac:f4:8c:5d:57:fd:6b:da:f1:b9:60:12:72:4e:d9:
1f:7a:f0:0b:96:20:f7:c3:17:69:10:ba:36:97:a0:
ee:ac:54:f5:52:89:3b:8c:e0:9f:45:20:b0:7e:ab:
e6:5b:c6:58:94:d3:df:4c:35:40:92:4a:1f:8f:90:
bd:5f:f4:cb:c8:e3:45:f6:3b:52:75:fb:88:e6:61:
2d:6d:69:c6:3f:1b:ef:ef:df:e2:9e:de:b9:a5:96:
c7:45:ec:4e:66:72:25:1e:5d:18:6e:81:07:07:99:
e5:bc:67:91:72:42:bc:77:2f:a4:1c:b0:1e:aa:ef:
12:db:24:d8:b5:43:cd:9e:f7:8e:67:a1:dc:ac:78:
dc:56:8f:73:37:38:3b:30:67:cb:12:a3:c2:d3:7c:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:4A:28:00:23:BE:27:F3:57:61:F0:55:E6:5C:25:97:B4:4E:0B
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:44:29:76:08:a6:e3:ff:56:c1:b8:a0:9e:71:65:8c:ea:44:
84:ed:13:a7:aa:6c:f0:ff:3e:32:4e:e7:ee:d0:03:e7:29:e2:
f5:76:63:5f:4f:e3:6a:89:5e:48:4e:69:da:59:75:a3:a7:a6:
e5:2e:0e:fa:28:8c:25:08:87:b6:c1:1f:0a:9b:73:9d:33:5f:
98:97:25:13:e7:d4:20:5c:29:d8:c8:62:eb:fe:c6:88:cf:ab:
a8:f9:8c:35:39:e8:87:ff:53:9d:13:3b:0f:5d:2c:6a:d3:40:
30:61:8c:4b:5a:80:6b:13:39:ec:81:19:c8:66:ce:82:52:22:
3a:c2:e3:83:be:f5:0f:b8:04:71:bc:38:98:26:64:0a:19:62:
ed:23:63:0e:f8:c7:69:74:6f:15:2c:76:f7:7e:c0:86:64:ec:
a9:c0:ae:9b:05:d8:87:cb:c0:a7:a1:87:7b:57:5b:30:53:8e:
4f:31:7a:c9:9d:2a:92:30:1b:f8:34:4f:f4:41:b4:94:cf:1b:
f3:2f:ca:af:82:2e:60:7a:32:ac:15:5c:52:21:c2:ad:d3:d8:
c2:1d:56:37:b0:ad:55:6a:c8:46:a6:f3:38:3a:9b:5f:43:bb:
10:ab:1c:00:3c:05:cc:92:a2:39:92:ac:7e:08:3e:09:59:e1:
46:79:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:07 2026 by rpki-client