Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: ue1gaMUOE4N9cm+hnbfMucThIx2s/RvZm314q2KQi30=
Subject key identifier: 24:B8:33:54:8B:3A:6F:D2:F7:BD:16:BB:80:5D:05:B2:51:4D:BF:58
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 019D2628A2999534C2479D4153A3E38109F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 07FB
Signing time: Wed 25 Mar 2026 18:01:30 +0000
Manifest this update: Wed 25 Mar 2026 18:01:30 +0000
Manifest next update: Thu 26 Mar 2026 18:01:30 +0000
Files and hashes: 1: 5HeMO4zDu-Aw5hUDH_h00aWRAfU.roa (hash: rvSp2TE3yHxwYyM7Q6koLSjsHsuVLORSAbQms57XIPo=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: 4iKoyAFYDy/AHabbPKxyGTctvX3F/NpXMwzcLUuYE0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a2:99:95:34:c2:47:9d:41:53:a3:e3:81:09:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Mar 25 18:01:30 2026 GMT
Not After : Mar 26 18:01:30 2026 GMT
Subject: CN=24b833548b3a6fd2f7bd16bb805d05b2514dbf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:a5:36:87:73:24:23:10:1d:b9:66:f9:eb:
03:9c:59:0e:51:79:e5:14:66:ad:9c:9e:2f:fc:5b:
9c:c0:de:b0:72:0f:45:06:c1:96:2d:8c:89:af:fe:
4c:69:c2:a6:b8:57:fd:57:f8:1d:4e:20:4d:04:11:
87:da:5c:a0:19:53:81:58:04:3a:72:cb:c9:43:6c:
f4:4c:79:dc:cd:12:ab:fa:4d:8b:ae:8f:ca:e5:e2:
40:1a:fe:72:c6:6a:68:36:d1:6a:a1:6e:c1:af:ca:
3a:02:e5:70:d2:f2:f8:83:1d:74:10:88:ef:a7:86:
95:06:c3:34:ed:22:8b:e9:ab:50:ea:99:44:a6:b5:
ce:74:73:7f:0d:cf:9e:e4:98:6b:12:af:6e:42:52:
c4:50:88:44:7c:97:b3:ee:b5:17:dd:20:0d:c6:6d:
12:ee:ce:08:5a:b4:30:1b:ec:29:ff:bf:02:11:b9:
59:58:22:bc:21:51:29:b5:48:8e:f0:4c:d4:c6:d2:
f9:3d:fa:e5:1b:35:96:b3:3c:b4:97:ec:16:60:b6:
07:7e:1e:9f:98:14:ab:d4:dd:b3:89:a3:82:65:f5:
43:c8:c4:a6:1b:fa:d1:01:05:79:c5:4a:47:75:7b:
97:96:35:78:9f:ad:0c:63:b5:8f:0f:13:84:db:7f:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:33:54:8B:3A:6F:D2:F7:BD:16:BB:80:5D:05:B2:51:4D:BF:58
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:34:4a:ff:63:bb:55:fc:22:ce:70:62:84:91:00:aa:ac:2a:
85:67:3a:6e:f6:ca:0c:d2:2b:6e:25:5b:1b:ff:1a:6e:01:8c:
71:5e:aa:06:06:db:74:8d:d6:b7:a5:35:74:5a:22:cb:77:60:
fe:86:bb:e4:c1:77:98:65:6a:6d:66:31:cb:57:e7:43:f1:04:
69:be:24:bd:63:0c:9c:21:21:a5:aa:90:96:43:0e:d2:43:b9:
aa:41:a1:d8:af:e3:29:2e:dc:4b:f9:90:54:99:e5:25:34:b9:
db:9e:e0:44:22:cc:05:8e:cf:98:12:d5:39:84:e5:9a:c2:46:
c3:94:c9:e3:15:fb:19:f2:e1:a3:2e:45:db:08:0b:44:da:30:
c8:4d:04:f3:13:8e:3a:8b:06:79:aa:2a:5f:7f:0d:15:ec:6a:
78:f0:5c:81:71:0b:34:00:7e:9b:ea:68:b5:1b:3d:86:d0:01:
26:56:f5:8b:33:d1:ed:7a:d9:96:6b:86:d2:24:57:ae:74:02:
9e:41:7b:aa:2b:91:2e:df:4a:32:eb:74:ed:64:82:d2:56:79:
5d:3f:76:83:fd:60:d7:58:a6:31:a1:e0:44:7a:a1:7d:95:87:
41:62:03:1e:6a:24:e2:ff:a9:2c:7a:ce:f2:61:e1:a3:a8:a3:
94:81:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:12 2026 by rpki-client