Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: 7bWOUWpwwvmCcGiKE38EtcXxWKPElWgvPnM9F0P/7WY=
Subject key identifier: 7D:C7:94:95:8D:38:71:2B:F0:3A:44:26:DE:97:61:45:69:6D:E8:9B
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 019D25F21DD2EC9AEAC13ACEC5034E972413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 0CFE
Signing time: Wed 25 Mar 2026 17:01:57 +0000
Manifest this update: Wed 25 Mar 2026 17:01:57 +0000
Manifest next update: Thu 26 Mar 2026 17:01:57 +0000
Files and hashes: 1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: w9kZz89OsCYPwAX9rVTp8veAYF+dF4QOorfMPilmLtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:1d:d2:ec:9a:ea:c1:3a:ce:c5:03:4e:97:24:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Mar 25 17:01:57 2026 GMT
Not After : Mar 26 17:01:57 2026 GMT
Subject: CN=7dc794958d38712bf03a4426de976145696de89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:ef:d5:6f:40:bd:4f:00:1e:87:6c:eb:85:
31:cd:0c:fa:f2:f5:52:69:24:01:cf:4b:f1:67:e8:
29:e7:4b:c9:ec:b2:06:b3:1d:b2:43:9a:df:08:57:
d6:34:04:f6:72:26:b8:16:f8:83:4f:7a:04:90:8b:
88:43:55:e0:fa:93:b3:33:e2:0b:c8:da:ff:59:7b:
d2:9c:34:85:b7:90:d6:c1:ff:e0:fc:bd:77:04:d9:
71:e0:7b:82:20:6f:90:37:46:a7:f4:4c:e8:44:54:
c3:d9:5f:e1:32:1a:c5:e7:22:8c:12:c0:2d:97:f4:
b1:68:05:4b:2d:80:14:b0:d4:d8:e4:4b:00:cc:0b:
e0:41:99:c3:50:3c:2c:3b:d0:d9:ec:c8:6d:8c:53:
7a:58:50:30:a6:95:2f:e8:b9:41:39:82:86:d8:b3:
ca:7a:a9:91:cb:55:01:e2:bf:9e:41:ac:63:25:c7:
58:a1:3a:43:04:ec:24:68:8f:b9:e7:39:e3:d9:b8:
6e:6e:df:6f:93:64:62:4f:3c:06:10:2b:fd:83:bd:
98:6a:7f:ee:1d:5d:ea:d6:aa:45:f1:11:8e:f2:8d:
83:db:b4:88:cb:11:fc:43:c6:bd:cc:0b:28:e5:1d:
0e:99:15:6a:ef:e6:7c:75:13:5d:d3:80:da:d8:58:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:94:95:8D:38:71:2B:F0:3A:44:26:DE:97:61:45:69:6D:E8:9B
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b3:8c:b2:2b:6a:63:81:0e:f9:c3:dc:35:ad:e9:24:a0:17:
a5:48:0a:8f:ce:e9:bb:fa:46:85:c6:ae:c9:c6:87:a8:e4:05:
1c:fc:df:53:d9:0a:2d:5c:11:76:b9:fe:d6:87:6c:f7:f2:e9:
81:2d:ec:5d:a1:5b:3b:0b:26:56:36:9a:cd:bb:7f:68:f6:67:
1d:b7:1c:f0:7c:ce:6a:15:79:04:ad:4b:8b:df:ac:4f:03:87:
82:f6:e1:28:c1:7e:d3:c9:76:2d:c6:ef:8e:26:09:ad:27:da:
41:f2:22:4d:96:cc:64:ba:48:ac:ee:88:bc:c6:11:a3:e8:60:
fc:4d:9f:13:61:dc:f6:40:a0:a7:98:20:48:fb:cd:21:8e:28:
b5:d1:57:b0:2c:ec:12:4d:33:86:be:b3:10:cc:2c:bd:64:cf:
99:e1:bc:fe:2b:b5:93:27:a7:dd:4b:f6:13:59:55:ae:7e:9c:
38:3a:f8:26:49:75:bd:01:9b:e5:1d:c3:c4:4c:d5:74:89:d9:
f8:3c:67:10:51:a7:07:02:00:9f:1c:84:e1:4d:5e:3d:00:c0:
a9:32:19:e3:f3:ee:e1:62:e1:c0:da:97:95:86:19:84:14:a4:
3c:6c:16:71:04:c9:eb:a0:c6:d5:6a:6a:b9:61:91:3b:ab:f6:
52:9c:a9:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8h3S7JrqwTrOxQNOlyQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1
ZGRhOGUwHhcNMjYwMzI1MTcwMTU3WhcNMjYwMzI2MTcwMTU3WjAzMTEwLwYDVQQD
Eyg3ZGM3OTQ5NThkMzg3MTJiZjAzYTQ0MjZkZTk3NjE0NTY5NmRlODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIbv1W9AvU8AHods64UxzQz68vVS
aSQBz0vxZ+gp50vJ7LIGsx2yQ5rfCFfWNAT2cia4FviDT3oEkIuIQ1Xg+pOzM+IL
yNr/WXvSnDSFt5DWwf/g/L13BNlx4HuCIG+QN0an9EzoRFTD2V/hMhrF5yKMEsAt
l/SxaAVLLYAUsNTY5EsAzAvgQZnDUDwsO9DZ7MhtjFN6WFAwppUv6LlBOYKG2LPK
eqmRy1UB4r+eQaxjJcdYoTpDBOwkaI+55znj2bhubt9vk2RiTzwGECv9g72Yan/u
HV3q1qpF8RGO8o2D27SIyxH8Q8a9zAso5R0OmRVq7+Z8dRNd04Da2FgBXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3HlJWNOHEr8DpEJt6XYUVpbeibMB8GA1UdIwQY
MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt
ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi
LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLOMsitq
Y4EO+cPcNa3pJKAXpUgKj87pu/pGhcauycaHqOQFHPzfU9kKLVwRdrn+1ods9/Lp
gS3sXaFbOwsmVjaazbt/aPZnHbcc8HzOahV5BK1Li9+sTwOHgvbhKMF+08l2Lcbv
jiYJrSfaQfIiTZbMZLpIrO6IvMYRo+hg/E2fE2Hc9kCgp5ggSPvNIY4otdFXsCzs
Ek0zhr6zEMwsvWTPmeG8/iu1kyen3Uv2E1lVrn6cODr4Jkl1vQGb5R3DxEzVdInZ
+DxnEFGnBwIAnxyE4U1ePQDAqTIZ4/Pu4WLhwNqXlYYZhBSkPGwWcQTJ66DG1Wpq
uWGRO6v2UpypDQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:52 2026 by rpki-client