Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: j+/A3Rq0534zyXXSItiZLH8oTxcqqEpjzcsmSqRWV38=
Subject key identifier: 0F:01:3E:B6:AF:AA:A9:2F:1C:1F:0C:2F:8D:78:D3:A0:27:60:57:12
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 019D270424532CDDEEED6DF25A808948C5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 0290
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: fi7RYQzNkJXY19cZqQsL0JY+8Wq7g5UH5+fxgFoVQII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:24:53:2c:dd:ee:ed:6d:f2:5a:80:89:48:c5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=0f013eb6afaaa92f1c1f0c2f8d78d3a027605712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:33:ac:d7:ec:9d:0d:50:08:11:64:03:17:
bb:d4:1f:79:ae:2d:97:3b:be:87:c4:1c:c7:ba:aa:
69:23:12:d2:ac:46:e7:7e:e8:7c:2e:22:b4:b6:43:
cb:8a:2a:50:cc:76:b9:c9:ae:de:3c:71:b6:12:8a:
31:a5:a9:0a:5b:06:f0:1d:e5:c3:f8:f2:c3:86:dc:
98:78:2d:4e:50:08:8b:d7:71:26:be:a9:28:ef:67:
ca:61:53:25:42:c7:70:ee:0c:cc:d3:81:9c:dc:bf:
52:36:30:22:1f:7a:32:48:25:aa:bc:d3:de:8e:8d:
13:2b:f0:c3:34:f0:cd:a3:50:fc:53:0b:7e:83:d2:
70:f9:ab:ba:1a:13:a8:59:e2:65:68:86:e1:90:67:
36:bd:07:11:14:96:f9:c4:94:3c:cb:c0:7d:50:31:
74:49:21:c1:ee:39:9f:62:49:68:5f:7c:a1:7e:44:
60:d3:4e:62:5b:f9:cb:c8:1f:10:16:8a:66:88:35:
de:39:b7:ab:11:e6:7a:ed:07:67:b0:eb:7a:40:de:
c2:39:ae:a5:e6:42:a0:59:73:af:ac:4a:5f:20:0f:
0c:f4:62:a7:e8:53:bd:b5:ab:2d:d7:dd:ab:e7:78:
27:54:72:e7:dd:ab:84:fa:82:05:69:1c:61:ca:d8:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:3E:B6:AF:AA:A9:2F:1C:1F:0C:2F:8D:78:D3:A0:27:60:57:12
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:f7:8d:fd:c4:ca:1d:7b:5a:d7:17:94:9a:b0:d0:d9:79:
06:d5:7d:31:cc:42:82:c2:6f:30:2e:d9:82:01:aa:9a:a2:c4:
ed:8c:6a:2d:0c:f4:f6:11:15:c4:15:47:96:33:fa:cc:76:f9:
0b:e8:fd:d8:e2:5a:78:1d:b1:3c:6a:fa:aa:e0:ce:eb:3a:bc:
87:de:d1:9f:62:a7:9f:75:3f:fd:e3:36:85:06:db:f2:42:b0:
6e:cf:7f:b0:8b:0d:31:a1:cb:0f:d0:3b:7f:5a:dd:46:3c:dc:
7c:9a:94:4b:2f:16:8d:f1:15:03:fe:1b:e9:36:8f:60:4f:82:
51:d9:ba:4a:d1:36:6b:e5:1e:b0:ec:e4:77:e4:56:aa:8b:1b:
7d:ca:8b:44:cb:74:2f:b6:e6:b1:9a:5b:fa:f8:95:95:da:c5:
86:9f:b3:ec:48:a3:a5:1c:9e:93:4f:9b:a0:86:ad:b8:ca:3a:
be:e4:8d:62:36:29:67:4d:2d:80:5e:73:c2:1d:b3:ea:92:e0:
ca:5d:a2:38:c5:e6:69:99:56:09:b3:1f:67:5f:f4:11:41:27:
b6:e7:f9:31:07:a1:1b:12:ac:3d:38:2f:93:96:df:76:bd:27:
da:9c:a1:23:9e:5c:83:d6:4a:ad:e5:31:29:e1:95:1b:33:dd:
42:36:20:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCRTLN3u7W3yWoCJSMW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTM5OWI0NjdjOTA2NjYyZGUwMGVjNzY2Y2M3ZTAwMGVh
ZWMyN2IwHhcNMjYwMzI1MjIwMTE1WhcNMjYwMzI2MjIwMTE1WjAzMTEwLwYDVQQD
EygwZjAxM2ViNmFmYWFhOTJmMWMxZjBjMmY4ZDc4ZDNhMDI3NjA1NzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHgzrNfsnQ1QCBFkAxe71B95ri2X
O76HxBzHuqppIxLSrEbnfuh8LiK0tkPLiipQzHa5ya7ePHG2EooxpakKWwbwHeXD
+PLDhtyYeC1OUAiL13Emvqko72fKYVMlQsdw7gzM04Gc3L9SNjAiH3oySCWqvNPe
jo0TK/DDNPDNo1D8Uwt+g9Jw+au6GhOoWeJlaIbhkGc2vQcRFJb5xJQ8y8B9UDF0
SSHB7jmfYkloX3yhfkRg005iW/nLyB8QFopmiDXeOberEeZ67QdnsOt6QN7COa6l
5kKgWXOvrEpfIA8M9GKn6FO9tast192r53gnVHLn3auE+oIFaRxhyti6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8BPravqqkvHB8ML41406AnYFcSMB8GA1UdIwQY
MBaAFMATmbRnyQZmLeAOx2bMfgAOrsJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JPWnRHZkpCbVl0NEE3SFpzeC1BQTZ1d25zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80Yzg0OWYtODY1MC00YTFlLWJlNTkt
MWU2M2JiZDcwZDk2LzEvd0JPWnRHZkpCbVl0NEE3SFpzeC1BQTZ1d25zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80Yzg0OWYtODY1MC00YTFlLWJlNTktMWU2M2JiZDcwZDk2
LzEvd0JPWnRHZkpCbVl0NEE3SFpzeC1BQTZ1d25zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhT3jf3E
yh17WtcXlJqw0Nl5BtV9McxCgsJvMC7ZggGqmqLE7YxqLQz09hEVxBVHljP6zHb5
C+j92OJaeB2xPGr6quDO6zq8h97Rn2Knn3U//eM2hQbb8kKwbs9/sIsNMaHLD9A7
f1rdRjzcfJqUSy8WjfEVA/4b6TaPYE+CUdm6StE2a+UesOzkd+RWqosbfcqLRMt0
L7bmsZpb+viVldrFhp+z7EijpRyek0+boIatuMo6vuSNYjYpZ00tgF5zwh2z6pLg
yl2iOMXmaZlWCbMfZ1/0EUEntuf5MQehGxKsPTgvk5bfdr0n2pyhI55cg9ZKreUx
KeGVGzPdQjYgTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:57 2026 by rpki-client