Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json)
Hash identifier: DEoM+IYHiZCxs69FvgSO1jwDsOuZ+D7hkwVLgSkpeAg=
Subject key identifier: 45:27:CC:F4:D8:D7:88:9F:DF:EF:8B:71:AC:DE:3D:C9:BA:C5:37:82
Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Certificate serial: 019D2704229A3B82E3D007ECE6C3B2B2F56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
Manifest number: 07C0
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: OvlwGYBFxr0gmaHOFLJNRqewH9FUonb7GfOKk7RMOF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:22:9a:3b:82:e3:d0:07:ec:e6:c3:b2:b2:f5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=4527ccf4d8d7889fdfef8b71acde3dc9bac53782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:21:0b:33:fc:2b:c5:32:ee:77:9b:3a:87:
c9:0f:36:df:be:e1:64:37:0e:ec:a9:68:3e:af:26:
36:ad:4d:2b:75:d1:87:5d:53:5b:3d:d7:cd:72:9d:
30:6a:9a:1c:f9:5f:73:8b:7b:2e:0b:36:b5:11:a8:
f5:a7:a1:a3:96:44:2a:4e:69:51:22:1b:dc:4a:0f:
03:a8:67:c8:c0:8e:5a:31:43:66:3d:d8:ac:46:3a:
2a:8e:d2:0e:97:94:0c:0c:c9:05:5a:40:f4:99:e2:
54:f1:73:1d:28:98:23:bb:c7:09:e8:6a:e1:34:5d:
83:4a:08:18:47:09:ce:fc:9c:ac:77:a8:81:7e:fd:
df:b0:a0:c2:4b:7b:23:8c:7b:bf:13:1e:87:9f:bb:
31:73:cb:cd:e3:1c:87:fe:91:d0:86:07:ed:41:65:
8b:cd:cb:4b:1a:61:75:e2:ee:b3:76:6c:1a:fa:8f:
a6:24:5d:a8:ca:e6:b1:10:a2:90:fe:99:2d:24:63:
30:b4:7f:60:d7:06:f9:37:4b:f0:a2:ad:63:2f:07:
a7:7a:18:c0:9a:f3:12:3d:66:51:03:b8:e8:3d:a3:
5b:b5:74:92:51:3c:07:4f:94:c6:bf:03:fa:40:5b:
52:c5:10:88:5b:45:ab:d7:2c:16:d4:aa:ab:3c:2a:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:27:CC:F4:D8:D7:88:9F:DF:EF:8B:71:AC:DE:3D:C9:BA:C5:37:82
X509v3 Authority Key Identifier:
keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:24:cd:29:a7:f9:bb:a5:7a:f9:41:18:17:e7:f8:54:5e:f8:
38:84:cf:ff:7e:b3:18:fe:51:89:d0:a7:f4:14:05:d3:2c:42:
3a:79:a4:34:14:52:84:6d:d3:47:8d:b6:bc:53:ba:db:23:fd:
46:eb:4b:34:95:17:27:7d:84:fb:dd:e8:81:d5:ff:99:3c:8e:
b1:95:f0:c5:c5:4f:56:fb:53:6d:a0:a5:7f:90:ea:7c:ef:96:
9d:55:cb:6f:ca:02:0c:5c:22:8f:5f:9e:16:55:bc:ee:18:54:
de:b2:5e:dd:c1:e9:03:8a:31:3f:55:aa:8f:d4:9d:0d:57:c4:
91:34:80:b8:73:60:ee:1e:e3:1a:29:2c:ed:5e:f9:2c:9b:c6:
d6:ba:71:49:b3:e8:5b:4e:16:33:91:b9:23:33:e5:52:42:29:
f7:44:1b:28:00:bb:86:6c:6a:c9:2c:1d:b1:37:5d:ef:18:d8:
cb:0c:7d:8c:7e:58:ee:5b:31:3f:db:4d:c0:29:2b:a5:c9:7f:
c8:e1:2f:ff:53:77:84:30:bb:7f:c7:ea:18:29:e5:dd:7f:e5:
4f:f6:19:62:f5:1d:00:70:16:2e:7a:9e:22:e3:aa:6f:a9:b9:
90:dd:f0:06:d8:ff:ff:30:da:cb:f8:db:5e:c5:54:37:d8:83:
fb:5b:7f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCKaO4Lj0Afs5sOysvVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYWEyOTliMWU1ZmExZDUxMjZkZmFkNzVkZmQ0YTliYWU0
NDNhMTcwHhcNMjYwMzI1MjIwMTE1WhcNMjYwMzI2MjIwMTE1WjAzMTEwLwYDVQQD
Eyg0NTI3Y2NmNGQ4ZDc4ODlmZGZlZjhiNzFhY2RlM2RjOWJhYzUzNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVMhCzP8K8Uy7nebOofJDzbfvuFk
Nw7sqWg+ryY2rU0rddGHXVNbPdfNcp0wapoc+V9zi3suCza1Eaj1p6GjlkQqTmlR
IhvcSg8DqGfIwI5aMUNmPdisRjoqjtIOl5QMDMkFWkD0meJU8XMdKJgju8cJ6Grh
NF2DSggYRwnO/Jysd6iBfv3fsKDCS3sjjHu/Ex6Hn7sxc8vN4xyH/pHQhgftQWWL
zctLGmF14u6zdmwa+o+mJF2oyuaxEKKQ/pktJGMwtH9g1wb5N0vwoq1jLwenehjA
mvMSPWZRA7joPaNbtXSSUTwHT5TGvwP6QFtSxRCIW0Wr1ywW1KqrPCpxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUnzPTY14if3++LcazePcm6xTeCMB8GA1UdIwQY
MBaAFMCqKZseX6HVEm361139SpuuRDoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzct
NzA0YTk5NWUzZGI2LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzctNzA0YTk5NWUzZGI2
LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCTNKaf5
u6V6+UEYF+f4VF74OITP/36zGP5RidCn9BQF0yxCOnmkNBRShG3TR422vFO62yP9
RutLNJUXJ32E+93ogdX/mTyOsZXwxcVPVvtTbaClf5DqfO+WnVXLb8oCDFwij1+e
FlW87hhU3rJe3cHpA4oxP1Wqj9SdDVfEkTSAuHNg7h7jGiks7V75LJvG1rpxSbPo
W04WM5G5IzPlUkIp90QbKAC7hmxqySwdsTdd7xjYywx9jH5Y7lsxP9tNwCkrpcl/
yOEv/1N3hDC7f8fqGCnl3X/lT/YZYvUdAHAWLnqeIuOqb6m5kN3wBtj//zDay/jb
XsVUN9iD+1t/Qg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:31 2026 by rpki-client