
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: YWXUc7J7yFwsUQPSpuWEhSvMRT1q8VOTYqY7t/8nbYQ=
Subject key identifier: 0B:69:33:BE:01:47:2E:9F:6F:74:23:29:C3:46:24:45:43:48:6B:9F
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 019D27723733AA905FA651A3255335910A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 04E2
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: NpGUmqE9n-wLzkQYMJgktAVQDec.roa (hash: jKDsKPpujuY8oxz+Om3wlzTAhMZxAodY1X1VfsB0nws=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: WgkAB8ADDxIhU7BmrhhgGZ3FtnB6xsvxGqLj/khTfyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:37:33:aa:90:5f:a6:51:a3:25:53:35:91:0a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=0b6933be01472e9f6f742329c346244543486b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:cf:f4:e9:dc:96:2f:80:9c:38:8d:17:f8:
38:a1:17:6a:06:85:19:a6:6d:7b:60:67:99:ee:22:
1d:78:10:26:2d:4f:08:6d:24:01:ec:d3:f9:0c:15:
d2:ea:16:6a:94:ab:be:97:24:d1:71:65:3e:71:71:
fb:45:8e:bd:cb:24:09:94:67:eb:85:bc:32:fa:90:
f2:4c:d3:14:99:3a:61:b7:16:56:6c:62:54:24:52:
c6:43:58:c7:a9:2d:7a:5e:5f:0e:36:09:6f:4f:ab:
fa:58:86:44:b6:63:1e:c6:4f:82:52:72:6d:69:14:
c6:b9:24:69:31:dd:42:c0:55:67:99:53:be:86:6a:
b7:39:30:63:6b:05:96:e0:6f:c7:6e:a2:76:dd:2e:
24:3e:7d:59:32:a6:56:a6:3a:c1:ce:62:7e:f8:58:
af:25:c6:f2:b9:86:d3:d2:f0:8e:ab:59:08:22:a4:
52:df:85:af:62:df:8a:4c:43:26:c2:84:d3:59:de:
26:61:08:bc:03:b8:90:ab:8a:a2:bb:f1:1b:0d:1f:
96:1d:40:8f:46:37:1b:61:44:af:97:b7:a6:83:71:
c9:96:f0:93:5f:61:03:2d:d4:73:7f:80:97:a4:c3:
95:10:c0:3f:20:d5:f3:88:e4:c9:a6:96:bf:b1:93:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:69:33:BE:01:47:2E:9F:6F:74:23:29:C3:46:24:45:43:48:6B:9F
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b0:fb:de:f5:85:3c:07:fa:18:d0:cb:96:4c:6c:83:68:5b:
ef:36:33:74:04:ec:68:94:34:fd:93:b9:02:a1:d2:49:73:63:
26:cc:fd:13:a4:3a:5e:fc:f1:b1:37:9e:e3:c0:f4:c3:64:40:
96:18:95:83:ae:c2:6f:68:cb:bf:af:48:a7:d2:f5:fc:b7:c4:
2e:73:6d:02:7b:da:76:f8:1a:a6:b9:0d:34:5a:1e:86:97:27:
08:9d:e8:46:c3:91:6a:e1:39:a6:bf:f4:90:61:7c:04:16:e1:
6c:55:2b:63:41:f0:f2:a5:96:a2:5c:9d:0f:8c:3a:7f:13:ac:
ee:f8:00:2f:7e:38:a6:8e:c8:bc:07:3d:ae:46:87:93:34:66:
62:6d:c0:ed:0f:92:b5:e0:e0:1c:0f:cd:82:82:16:2e:b3:85:
2c:51:73:b6:b3:fc:bc:1a:57:aa:d5:6b:90:97:52:fa:34:f0:
2f:1b:ec:5a:7b:e0:d6:2b:89:aa:c3:1e:29:a4:a8:f1:10:17:
f9:5f:99:ad:6e:f5:45:6c:ef:21:55:52:d8:e5:c4:83:fe:1c:
37:f7:9f:e6:df:dc:0a:ac:d8:76:aa:ba:64:00:a0:92:56:92:
f7:25:ab:2c:15:fa:c5:e8:be:fd:a6:5e:c3:c5:7e:7b:3a:df:
3c:3e:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:46 2026 by rpki-client