Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: Orf/CUZpXNmuBjP0gvp1C8eLy3j34Cuo26/DnMu+OwY=
Subject key identifier: 40:1F:EB:ED:2C:09:93:FC:B8:C6:4B:87:DB:21:48:06:54:E9:23:93
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019E1E6C28F4AE43086975106EE368B2BB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0FD5
Signing time: Tue 12 May 2026 23:01:05 +0000
Manifest this update: Tue 12 May 2026 23:01:05 +0000
Manifest next update: Wed 13 May 2026 23:01:05 +0000
Files and hashes: 1: U7ys6itFnvuaePn4ScsbAtbzsp0.roa (hash: d+i6tJ5mzYcRwG/S0qIlnLIWWa0XIkizyeSNRfnsoAI=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: Ibq/tI4sRxYi51FwGLX8K4eN0S3qBMMI5zDWp8i5o1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:28:f4:ae:43:08:69:75:10:6e:e3:68:b2:bb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: May 12 23:01:05 2026 GMT
Not After : May 13 23:01:05 2026 GMT
Subject: CN=401febed2c0993fcb8c64b87db21480654e92393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:e0:30:18:37:57:0d:b8:01:2a:7e:9f:98:
af:5f:36:fa:b2:7b:d5:9f:d1:0c:cf:ac:73:bd:a3:
da:8a:53:4e:f0:d6:8f:9b:e6:27:c7:77:42:26:cb:
50:b7:41:ba:05:3e:6f:c2:20:7c:35:c9:ce:d8:0f:
6c:b0:d1:cb:31:35:3a:cb:ea:fc:c2:50:3e:3e:1c:
83:3a:4c:f9:aa:90:ba:94:9b:7c:4e:74:8c:68:a7:
00:ff:ce:4d:51:25:6e:33:e4:b2:d3:dc:fc:39:67:
e4:57:f0:d9:ad:75:2e:08:80:de:87:c0:f1:fe:5e:
54:6d:12:71:a0:e6:ce:c3:f5:17:f4:fe:e5:f1:0d:
48:b4:33:01:23:18:50:c6:ef:b2:50:4d:f4:69:22:
c0:09:62:e7:91:70:9d:76:70:d5:65:c9:b1:e6:35:
cd:92:e3:44:5d:39:96:67:e2:5d:f1:7a:99:5b:29:
47:8b:6a:60:f2:cb:b8:b8:e2:73:90:4e:99:d0:0a:
3f:1c:5f:55:fa:2b:e9:02:da:5b:21:b8:d0:c4:fc:
ef:65:d6:02:4c:5f:82:88:9e:8a:d3:20:54:da:9a:
cc:06:30:e5:75:60:3d:9c:36:06:31:51:16:e3:84:
00:c4:33:14:72:69:fb:e2:28:eb:e8:0d:9d:ab:37:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:EB:ED:2C:09:93:FC:B8:C6:4B:87:DB:21:48:06:54:E9:23:93
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c4:e9:cd:e6:2f:e8:83:a3:89:42:6e:ab:28:b5:38:f4:c4:
d8:52:d4:fc:4d:ec:50:09:b2:35:a7:61:b9:16:6a:20:ae:53:
e6:cb:ff:4e:95:9a:d4:71:aa:49:1e:97:4a:37:19:9e:7f:e4:
b3:33:80:93:7a:8c:1e:a5:a6:b7:9f:ba:63:79:b6:58:86:c3:
a7:e8:2d:4e:b6:d2:70:1b:1f:e7:51:e8:71:6a:03:39:cb:69:
ad:41:2a:b2:92:31:72:fd:04:66:7d:a2:cd:5b:3c:ce:7d:82:
9a:bf:9a:0c:b0:d2:23:ae:00:01:92:ae:e2:24:03:8c:da:95:
0a:ac:1e:3e:7f:42:c7:83:1d:51:7d:c1:73:eb:9e:df:66:01:
a9:b6:f1:87:d7:78:38:c9:05:f1:ab:7b:17:16:f0:b3:b0:3c:
a9:2f:24:33:a0:47:4f:40:34:38:40:a9:d8:5d:25:19:93:3b:
9f:98:23:ed:cd:d8:6b:da:d6:8e:89:e4:f1:11:51:5b:7d:4b:
0b:ad:77:3b:a6:3c:c6:b6:70:c7:16:64:8b:4e:2a:83:d2:66:
ff:63:70:f0:29:2a:31:55:be:bd:3b:35:db:4f:b7:3d:f9:79:
66:8a:3b:14:e8:31:00:12:74:03:57:91:67:c1:0a:c2:a1:94:
71:f7:74:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebCj0rkMIaXUQbuNosrsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjBlZTk4NDI2MjcwMzFlY2EyNjRkYWM2NWU1ZmVmNjM5
NDNmOTgwHhcNMjYwNTEyMjMwMTA1WhcNMjYwNTEzMjMwMTA1WjAzMTEwLwYDVQQD
Eyg0MDFmZWJlZDJjMDk5M2ZjYjhjNjRiODdkYjIxNDgwNjU0ZTkyMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJHgMBg3Vw24ASp+n5ivXzb6snvV
n9EMz6xzvaPailNO8NaPm+Ynx3dCJstQt0G6BT5vwiB8NcnO2A9ssNHLMTU6y+r8
wlA+PhyDOkz5qpC6lJt8TnSMaKcA/85NUSVuM+Sy09z8OWfkV/DZrXUuCIDeh8Dx
/l5UbRJxoObOw/UX9P7l8Q1ItDMBIxhQxu+yUE30aSLACWLnkXCddnDVZcmx5jXN
kuNEXTmWZ+Jd8XqZWylHi2pg8su4uOJzkE6Z0Ao/HF9V+ivpAtpbIbjQxPzvZdYC
TF+CiJ6K0yBU2prMBjDldWA9nDYGMVEW44QAxDMUcmn74ijr6A2dqzehhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAf6+0sCZP8uMZLh9shSAZU6SOTMB8GA1UdIwQY
MBaAFMDw7phCYnAx7KJk2sZeX+9jlD+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAt
YzZlY2U1OTAxNTgwLzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAtYzZlY2U1OTAxNTgw
LzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsTpzeYv
6IOjiUJuqyi1OPTE2FLU/E3sUAmyNadhuRZqIK5T5sv/TpWa1HGqSR6XSjcZnn/k
szOAk3qMHqWmt5+6Y3m2WIbDp+gtTrbScBsf51HocWoDOctprUEqspIxcv0EZn2i
zVs8zn2Cmr+aDLDSI64AAZKu4iQDjNqVCqwePn9Cx4MdUX3Bc+ue32YBqbbxh9d4
OMkF8at7Fxbws7A8qS8kM6BHT0A0OECp2F0lGZM7n5gj7c3Ya9rWjonk8RFRW31L
C613O6Y8xrZwxxZki04qg9Jm/2Nw8CkqMVW+vTs120+3Pfl5Zoo7FOgxABJ0A1eR
Z8EKwqGUcfd0Pg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:31:38 2026 by rpki-client