Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: KGRWGCZ9eKUKRuPQL1jnLj299M+xH6rMbtXJ2piv4TY=
Subject key identifier: 87:D7:D6:0B:16:67:2F:B2:AC:24:6F:DC:0A:DF:CB:87:18:49:6F:14
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 019D28166FF924DED22319BEEF5F55CD592E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 0712
Signing time: Thu 26 Mar 2026 03:00:52 +0000
Manifest this update: Thu 26 Mar 2026 03:00:52 +0000
Manifest next update: Fri 27 Mar 2026 03:00:52 +0000
Files and hashes: 1: lV9CMhz_3PFwnZdWl_EZLvM-2A4.roa (hash: Db/0BlhSAHqLGE4mtBqvJ8NyCXiNUptWO0NntS5+WMw=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: ddJC/wBCc06g0C3HLnZ+5TPJRFpq97+SET6NMOYnfW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6f:f9:24:de:d2:23:19:be:ef:5f:55:cd:59:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Mar 26 03:00:52 2026 GMT
Not After : Mar 27 03:00:52 2026 GMT
Subject: CN=87d7d60b16672fb2ac246fdc0adfcb8718496f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:9a:19:d9:53:5a:a6:ad:a6:0e:7f:22:12:
54:4d:ce:40:4f:1b:e9:cd:d4:b8:e5:96:f7:8f:c3:
c6:8f:64:20:81:06:ed:1a:ee:22:a9:47:f1:ba:a6:
26:4d:5c:38:28:06:ec:51:a0:4f:42:8c:3b:3c:5e:
cb:70:7b:b2:ff:f7:a1:96:27:1b:d0:ac:5f:8c:a4:
6c:a9:a8:e6:c9:21:5c:ed:00:d7:7e:41:2a:4d:23:
13:71:60:65:ff:d1:eb:64:8e:03:38:e9:74:cf:45:
26:b0:55:d4:17:c7:fb:ac:d0:ca:90:f2:b4:db:a0:
ef:14:62:35:e7:19:ba:d0:26:a6:2a:cd:15:1e:28:
6a:4a:86:bc:69:3b:30:f4:e1:1d:b8:61:86:27:de:
b6:22:c8:c0:fd:0b:3b:e4:45:cd:a9:ce:11:d6:48:
b4:35:36:71:ff:a4:74:09:0b:58:0b:35:2c:5f:37:
6e:b1:ec:91:3d:f8:79:05:f5:81:6c:7f:9f:53:8e:
f4:44:1e:13:62:8d:2f:af:1d:65:38:62:96:7c:7d:
8b:e8:29:49:fd:f6:b1:82:13:cb:4e:c5:c2:0d:aa:
94:15:7d:36:10:cc:e3:ed:0d:73:f2:26:94:e6:7e:
e0:fe:6b:1f:75:6e:38:a2:d0:2e:eb:b3:95:7f:36:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D7:D6:0B:16:67:2F:B2:AC:24:6F:DC:0A:DF:CB:87:18:49:6F:14
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f0:69:69:b4:c6:81:57:47:dc:0b:61:01:fe:03:fc:01:c5:
30:82:03:24:df:29:ec:40:7a:5b:c8:31:a1:0f:43:c7:9e:35:
58:ea:3b:d2:3e:25:b5:12:41:3d:4a:1c:a4:b9:9c:70:9e:5b:
e9:35:b0:49:73:7b:bb:b4:0b:4a:b9:84:41:85:ff:27:3c:34:
0f:a4:f1:fa:4b:49:b6:32:f1:29:16:98:76:36:d8:a9:87:19:
9f:72:e7:90:df:5b:e3:dd:eb:bb:5f:fe:9a:85:43:f9:8d:6b:
8f:5f:ea:d7:ed:87:41:fc:50:e9:0c:9d:b2:31:e5:b1:d2:6a:
68:e4:96:89:7f:4d:73:96:3e:42:b1:74:a9:bb:06:2f:e8:82:
0a:ab:20:f0:ef:8f:ee:92:b8:24:b5:8c:7b:e0:8d:35:a5:ce:
f7:1b:7e:f3:20:bc:cb:ad:e5:25:f0:0c:9e:ca:5f:0f:ef:27:
d2:f9:d2:c6:ae:ca:6b:bb:f5:d8:72:1b:72:67:7a:7a:1f:ad:
b6:90:ce:74:e2:67:e5:20:13:17:b6:5c:cd:72:16:c7:52:a6:
07:0a:d5:65:b0:f1:08:cf:6b:db:f5:8a:03:8a:e3:7f:29:de:
85:57:7e:d7:6f:5c:34:95:a4:b3:e3:e0:5f:e3:63:70:ec:08:
fb:a0:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:44 2026 by rpki-client