Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: y00OUXTjslJxBFmUYdkhZpNSv1rfIVGJmRsv77K/nPk=
Subject key identifier: A7:98:8C:9F:2F:5B:60:B5:4C:07:22:C9:12:56:BD:FC:67:B6:F8:25
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 019D33081EE10990F7E36267E684EC26C78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 06:01:03 +0000
Manifest this update: Sat 28 Mar 2026 06:01:03 +0000
Manifest next update: Sun 29 Mar 2026 06:01:03 +0000
Files and hashes: 1: CpaLGPqoC3ALuNpOvxJg0iLjAg4.roa (hash: 8fNPqMK8OnJde+EJvnY4Udrp0bY1V8qpd3moDPkcAok=)
2: Hj67j6_r_LN0ZjHifiVHCQLOtBI.roa (hash: fDsmb4ofN0jQCDB6v5YaSdvL9yBsZrzWGWfWx7hXpeE=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: fTxzLKPAcqG/H7ACtaUUsackZt5v31rtZrPjUxfNU98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:1e:e1:09:90:f7:e3:62:67:e6:84:ec:26:c7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Mar 28 06:01:03 2026 GMT
Not After : Mar 29 06:01:03 2026 GMT
Subject: CN=a7988c9f2f5b60b54c0722c91256bdfc67b6f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:bd:fc:0d:88:4d:88:5f:a5:6d:29:0b:cf:
fc:75:77:3b:f5:20:74:45:f9:6c:69:ca:f0:de:ec:
ae:f0:ea:df:5a:f6:c1:41:07:5e:c8:aa:20:6d:8f:
c5:02:5a:29:37:06:88:ee:5f:57:71:78:19:60:78:
38:cf:b9:7f:22:cc:79:51:7f:37:d3:e7:63:97:26:
1b:50:99:e0:f5:12:b2:e2:41:b4:be:9f:30:21:47:
85:ff:39:ed:9a:b4:27:aa:be:67:76:9d:55:be:66:
1a:e8:b5:b0:0f:aa:d3:d5:7b:2d:b4:ab:76:43:32:
ec:d0:cf:c9:80:95:45:1e:42:96:1a:5a:53:ca:ce:
20:bb:bf:bf:bf:b4:fd:1b:f3:fc:78:e1:8d:69:66:
fe:17:e6:6e:ab:25:1f:a7:70:e7:82:9b:74:8e:77:
0f:4c:b9:d4:42:e0:e0:3a:ab:ac:51:dd:a2:97:0c:
00:f6:1f:93:5a:86:2e:14:e4:9a:1f:cd:b2:56:15:
a4:f6:43:8b:9a:56:fe:0b:70:5a:e0:e9:ab:0b:20:
6f:2e:e8:a4:d9:47:ab:96:ed:68:30:db:66:d8:c5:
2d:50:73:4a:d2:68:0f:65:36:80:fa:73:fd:c2:c3:
e7:4f:d0:1d:14:9c:52:e8:08:c0:bc:ba:8c:2a:5b:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:8C:9F:2F:5B:60:B5:4C:07:22:C9:12:56:BD:FC:67:B6:F8:25
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:87:53:69:43:f9:80:a8:77:d9:91:55:37:72:dc:5c:31:62:
a9:ad:85:2b:ee:d0:0c:d9:a5:26:40:52:61:d2:4e:f0:29:58:
3c:a3:d4:f8:7e:79:a4:80:4a:53:29:b2:80:08:68:b0:c3:d2:
3d:f1:d4:3d:0e:6f:fb:6f:57:69:09:92:39:0b:2d:d5:6d:b1:
04:7f:3c:e0:f2:fc:d1:ca:6f:d3:70:f0:96:66:b1:67:ec:22:
fb:d0:91:ba:3b:08:48:e8:6b:4b:91:68:db:d3:c1:94:78:cf:
71:a2:c2:80:14:52:2d:df:21:44:0b:1c:8c:b2:4a:84:42:68:
57:a8:cb:3a:25:c7:34:7a:44:aa:41:7e:fe:98:40:5a:51:21:
b0:cc:17:26:b5:eb:c4:aa:e9:56:67:62:e9:88:0e:32:c1:e2:
b7:0a:be:c2:5e:1a:d2:32:63:42:c1:af:20:29:ed:63:ec:32:
00:62:4f:79:4a:2e:e0:d4:0a:9e:95:73:3d:15:c0:f8:6b:67:
d9:aa:51:83:9d:c5:ea:a8:dc:e0:37:75:28:ff:3c:98:4f:71:
f1:d5:59:8c:ef:0c:d2:c0:70:59:30:0b:a6:89:7b:54:6d:28:
1f:0e:b9:e5:14:46:74:29:ea:a6:78:e4:1f:32:aa:ec:e5:6d:
8c:7f:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:58 2026 by rpki-client