Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: zG9/jp75J+dGiSDoQpSdvaoAMhTmXG4f2NFtX9S8+pA=
Subject key identifier: 4F:4C:C3:2E:8F:6C:A8:C4:D0:CF:AF:A9:72:3D:5F:7E:43:9C:73:63
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 019D28F2B1ED6C445459BC3AE7D389DB5B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 07:01:27 +0000
Manifest this update: Thu 26 Mar 2026 07:01:27 +0000
Manifest next update: Fri 27 Mar 2026 07:01:27 +0000
Files and hashes: 1: 7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa (hash: eTH+b7uyka3O9YkXOpD+DkbzSM2UIMZvJWqni2nrhis=)
2: 8gg12X3s1LPBf_d0sIf23T4p0tk.roa (hash: 319DbafJhZd2xmNMsWkQ3NZC3fYpVLzj/Zav+e/7chk=)
3: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: W4WDk1JoU7G9lVi1jyoOtJPoAvSaaKf6JJ7OnEFR7m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b1:ed:6c:44:54:59:bc:3a:e7:d3:89:db:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Mar 26 07:01:27 2026 GMT
Not After : Mar 27 07:01:27 2026 GMT
Subject: CN=4f4cc32e8f6ca8c4d0cfafa9723d5f7e439c7363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:27:81:35:09:4d:af:0f:0e:77:51:d6:f0:
40:9d:fa:60:1f:2f:d5:1a:63:47:5d:a5:67:26:3f:
55:bb:e6:00:72:d5:8f:86:f0:99:fc:ba:08:30:a0:
f3:f4:f9:78:96:b9:7c:43:01:55:79:03:bb:78:86:
d9:a3:1a:75:b9:af:2b:7d:b0:a3:56:69:ee:b6:e3:
6a:0e:4a:b6:72:d9:e5:c0:3f:e6:82:02:aa:a4:4d:
3b:4e:e8:79:fe:82:92:96:17:ee:e8:a8:64:55:04:
21:d8:01:ab:cc:8e:72:79:19:91:f5:11:e8:71:5d:
47:4e:5d:92:34:bf:2b:0d:1a:61:3e:d2:14:81:0f:
09:fc:53:b2:46:53:9c:53:37:e7:ad:6e:86:75:3e:
12:07:c7:ea:21:d3:4b:de:a8:26:28:82:46:e1:d0:
bf:b9:b6:fc:1e:94:6b:b6:39:55:0c:d9:6f:cf:c9:
b6:8e:6c:44:2a:ee:b0:35:77:e2:cf:ae:73:07:02:
c3:e1:b4:50:1d:32:e5:70:0d:3a:e6:ef:69:7b:a0:
62:bf:22:ad:fc:8e:36:eb:e7:ed:28:51:a5:77:ac:
55:d9:2f:51:0a:fc:ee:fc:56:8a:d0:02:27:55:fd:
cd:6b:11:98:bd:ab:20:48:f7:4d:5b:01:b0:6f:14:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:C3:2E:8F:6C:A8:C4:D0:CF:AF:A9:72:3D:5F:7E:43:9C:73:63
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ec:70:dc:c4:91:d0:9f:d7:9b:08:6d:1c:2f:59:70:2c:b5:
d6:37:53:36:1b:e1:2d:b3:ee:54:ce:aa:02:d9:c0:23:9e:77:
61:63:24:0d:31:a0:4c:96:fd:71:a4:5e:0e:dd:c2:a3:d6:80:
9a:b7:10:a1:bb:18:1a:66:01:ce:d9:79:04:4f:c0:06:a2:cd:
59:1f:6d:47:30:54:cc:c7:6d:13:7a:d8:3f:b4:00:f2:20:af:
f8:13:1f:bf:0a:19:12:0e:63:99:1e:d6:a7:42:2b:6e:60:57:
79:4a:56:92:b4:bd:a8:ba:9c:f2:a4:07:5b:f8:24:31:dd:31:
d6:d0:33:dc:54:f2:a8:2b:af:0c:50:98:df:db:c6:5c:1a:7b:
94:2b:05:26:8e:4e:ab:fb:1f:02:66:a0:99:69:53:45:a3:a5:
5e:dc:17:31:39:42:37:1d:de:b3:e3:38:8d:11:76:be:a0:43:
e1:59:d0:12:5d:0d:33:19:49:85:9b:05:0b:9a:6f:83:8e:52:
bc:b7:42:3d:be:7c:94:09:b2:d1:6e:99:1f:4e:2c:50:fa:8d:
5f:e4:32:73:ca:3a:51:5d:12:14:08:df:d1:f7:a4:c4:b8:82:
21:26:7c:34:b8:df:0d:5f:52:10:07:25:cb:78:c3:29:85:72:
86:a4:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:49 2026 by rpki-client