Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: J2ZGwO8sJRFS1NtyQzIKw3OGn2KOqutSfvyLtd+Cirs=
Subject key identifier: 85:3E:18:55:92:AA:D2:2C:81:02:50:0C:60:1C:45:C8:98:35:08:6C
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019EC149095AFA9807E4C52A78D1658F7EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0FBC
Signing time: Sat 13 Jun 2026 14:00:49 +0000
Manifest this update: Sat 13 Jun 2026 14:00:49 +0000
Manifest next update: Sun 14 Jun 2026 14:00:49 +0000
Files and hashes: 1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: 230TKf8GNBhjSgaPmYVHEV0tLHHeNmkFJ6iC5CPbuOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:09:5a:fa:98:07:e4:c5:2a:78:d1:65:8f:7e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Jun 13 14:00:49 2026 GMT
Not After : Jun 14 14:00:49 2026 GMT
Subject: CN=853e185592aad22c8102500c601c45c89835086c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:44:16:46:af:5e:51:97:56:2e:ba:41:b4:
64:fc:a3:b3:13:cd:27:1c:52:d8:b3:69:65:cc:95:
a7:77:4f:56:2f:ac:e3:d8:7d:34:af:a1:ce:4b:14:
59:e2:af:3a:37:bf:6f:70:08:e8:ae:27:27:b1:32:
7a:c5:3c:cf:62:b2:38:81:cc:d9:ee:83:dc:54:a9:
69:1d:50:e2:ef:7f:72:e8:91:9c:6e:54:a9:4e:89:
51:85:e2:76:d1:af:16:06:75:d2:92:a1:56:7e:2e:
e0:26:43:b1:eb:6f:a6:7e:2e:6d:60:a9:31:29:b6:
2a:95:93:5a:af:53:67:51:76:e1:82:e6:2e:98:d1:
cb:04:2c:e4:ba:24:5e:ba:30:5f:d3:75:89:ea:6e:
48:a6:49:55:fb:4a:b9:18:60:dd:95:35:4f:69:f3:
da:7e:1b:60:6f:d1:b7:0d:9d:db:96:af:cc:d0:18:
2b:65:fb:16:00:78:bc:5d:b8:76:3d:06:ba:49:1a:
3f:cb:ad:d2:8b:56:be:f3:ab:17:99:d1:39:8a:db:
57:9c:88:64:01:8b:f1:4b:3c:bd:42:a4:f1:08:18:
99:6a:f0:e3:ae:41:15:28:0d:30:90:b0:9a:f4:00:
75:83:2d:99:ea:a4:e9:d5:9e:fc:9f:9c:ad:27:e1:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:18:55:92:AA:D2:2C:81:02:50:0C:60:1C:45:C8:98:35:08:6C
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0c:ae:1d:61:0c:d8:8d:8a:d7:7a:70:c0:10:05:b2:d2:b6:
a7:29:c0:c3:9b:29:a0:bb:97:fa:62:18:df:bf:5b:b7:49:5c:
54:24:18:a2:5e:ac:1b:8b:c7:62:b2:7e:09:f4:94:16:80:9b:
18:3f:81:c5:ad:b3:02:19:18:49:ce:d6:12:29:dd:e5:06:d8:
93:bc:f3:5b:08:3e:2d:46:47:06:0e:f6:74:a1:35:ec:9a:38:
92:18:42:9b:07:90:46:0a:30:a3:8f:fa:f8:8a:3e:06:37:8b:
79:ad:29:b2:f1:f3:01:69:42:38:22:66:55:ac:11:0d:80:7f:
08:54:1b:c9:96:49:a6:41:64:c3:ef:f3:0f:b2:44:2a:1a:f1:
82:bb:fc:03:b3:64:ad:93:5a:bc:88:d5:21:0d:e7:aa:bc:52:
1d:85:94:a8:92:47:e1:b6:f8:76:1b:c2:4f:0b:f2:d9:2f:ae:
bd:5b:af:a1:6a:12:aa:9f:19:31:e3:73:3c:2c:30:f4:4f:55:
62:8a:0c:1c:95:72:f4:8b:95:73:e2:ab:ce:7d:e8:74:47:f4:
a8:55:8d:99:fc:15:7d:d3:6d:3a:1c:c4:ae:f4:db:e2:f0:cc:
6d:22:a1:b2:fc:5f:39:1e:e4:a7:8a:3a:ad:cb:65:1f:eb:aa:
db:4a:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:33 2026 by rpki-client