Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier: SPMWZYFKDzrVVTX6qWixdmA8yNZZTEI2nP58ZYl0A/Y=
Subject key identifier: EE:9F:79:8B:0C:9F:DF:DA:5C:61:C0:79:91:E0:0D:FF:6E:DA:EF:7B
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 019D284D9AA4642C24BA9C2074BF818D9577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number: 07DC
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: q3u9GktXoLgCZIQQoRw88D77rK0.roa (hash: Wq1luHTlsjej4HJm0sE4531JEh3otjUKEdcgSuym7L0=)
2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: Nuw/nxf5rMMMYmUDSdKqMxthfs5RvVAXhl658I5YIzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9a:a4:64:2c:24:ba:9c:20:74:bf:81:8d:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=ee9f798b0c9fdfda5c61c07991e00dff6edaef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:8b:8b:07:39:52:03:7f:53:cd:8e:54:2a:
9a:ea:2b:2b:e3:8e:48:d2:54:35:ae:c8:f9:f9:b3:
23:85:80:96:b1:bd:16:ab:09:43:e5:9e:36:5f:42:
5b:4c:40:67:69:ba:99:21:2b:35:69:3e:e4:5b:2c:
f9:ee:c3:ca:d9:0f:e6:c1:86:86:ca:cf:80:bb:b1:
8d:f7:03:49:16:28:12:63:6b:61:bf:68:68:7b:54:
d3:6b:24:74:24:f9:34:3f:0e:e8:35:cd:ca:7b:49:
76:fe:63:7b:4c:18:58:69:15:79:9e:75:e5:ac:b5:
11:08:c9:f0:4b:0a:3f:9e:47:b9:78:df:3a:33:5f:
f4:4e:51:c8:58:db:31:f5:7a:dd:c4:5a:81:a4:27:
cc:1c:47:8d:54:4f:a3:12:c3:95:8e:ea:60:8b:98:
f1:4d:c9:82:88:be:d4:ba:42:56:a0:46:0e:52:e9:
9e:a5:04:fe:01:de:bd:f6:18:10:83:92:9f:73:4d:
22:a3:b1:95:9b:7f:f3:8a:ee:f0:0d:95:31:41:e6:
60:78:ed:83:88:46:bd:73:53:f8:e5:7e:56:69:a0:
52:1b:c8:9f:eb:23:61:1e:df:46:eb:85:19:12:88:
de:e2:df:8f:94:e0:93:f7:56:bc:b9:94:2e:41:bf:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9F:79:8B:0C:9F:DF:DA:5C:61:C0:79:91:E0:0D:FF:6E:DA:EF:7B
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:be:d4:a5:f6:26:18:4b:a8:a1:9c:a0:7d:5f:0a:0e:87:c1:
d0:18:f7:a5:88:50:e4:5c:cc:98:b1:3e:0e:cc:bc:0c:07:28:
3f:bc:66:d7:4e:fc:ef:0b:6c:61:70:b0:a3:dc:d0:c8:9f:fc:
4e:4b:83:74:52:02:5b:19:71:77:31:c8:17:c4:12:5d:5f:21:
6d:cc:f6:43:42:69:8b:a8:99:08:0c:a6:b7:4a:32:9d:43:7c:
10:a9:79:9a:b5:19:26:2b:56:a5:11:9d:d3:c2:4e:a5:da:5f:
04:6f:50:52:ee:ce:d9:50:59:76:54:41:04:b0:8b:b6:43:ec:
f0:ba:e8:cb:f0:ef:a4:92:99:be:d7:2d:1c:4e:e0:16:33:d6:
9f:bd:51:44:f6:6e:2d:18:a8:c4:6e:5f:00:d0:86:ce:88:88:
7c:fd:e0:58:16:9c:93:e0:04:6f:45:86:7c:68:22:f6:24:63:
87:31:58:a5:7a:6c:16:cc:2b:e0:65:cf:e9:0f:fc:07:55:12:
77:81:5f:d1:c6:3e:66:8c:0b:0f:10:92:3b:9e:ca:87:36:f4:
18:7f:9f:f9:5b:47:fd:d0:d5:29:a9:46:41:af:82:29:aa:08:
72:ca:f8:64:30:5b:7f:7f:5c:07:8a:c1:5a:31:a9:f1:5e:d3:
e6:4d:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:15 2026 by rpki-client