Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: t6XM5hvDgJdxzroJKy+fEihtC5Acjy1x9ctoqbN8cT4=
Subject key identifier: 49:75:23:92:49:AB:DE:24:B1:12:86:E5:9C:8B:A1:91:BC:9B:67:67
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019ED318C9C4F40C6CB16FCA81D04610E7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 196A
Signing time: Wed 17 Jun 2026 01:01:17 +0000
Manifest this update: Wed 17 Jun 2026 01:01:17 +0000
Manifest next update: Thu 18 Jun 2026 01:01:17 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: MThWZJ2tMf/BDp4oVK8Ytz4XSfwiiS8OZk63PJNmQM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:c9:c4:f4:0c:6c:b1:6f:ca:81:d0:46:10:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jun 17 01:01:17 2026 GMT
Not After : Jun 18 01:01:17 2026 GMT
Subject: CN=4975239249abde24b11286e59c8ba191bc9b6767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:91:90:15:46:1a:38:f3:60:bb:14:db:89:
29:48:54:c6:fb:53:42:f5:00:91:05:23:65:5b:86:
16:49:1f:64:8c:b4:b7:92:f9:a0:ca:a6:92:3f:db:
73:53:66:d2:f5:2e:ff:e1:e3:dd:97:41:ac:09:8e:
45:87:3e:48:c2:6a:65:21:57:a7:d4:b9:5b:6c:d2:
fe:44:73:60:cb:c7:4c:31:a6:20:89:70:e3:8a:41:
66:0b:5d:e3:6d:8c:a9:c9:5a:35:0d:79:4f:33:05:
bc:ad:40:e2:04:1c:e1:52:ee:86:82:70:92:4b:66:
db:9c:cb:3f:8a:4e:b8:9a:ef:cc:6f:e0:7b:b8:d5:
b5:39:07:20:ef:b8:3d:14:a1:ed:69:08:f6:ce:a9:
c0:b9:85:48:86:ff:31:22:94:af:ee:2b:ab:3d:11:
be:52:57:3f:4d:cc:7e:98:89:03:0c:6b:5c:9b:2d:
7a:55:f3:43:2d:db:c8:51:89:1f:c8:26:ff:6d:ce:
57:d9:63:ee:c0:9f:6f:f4:cb:0d:d5:b9:62:02:81:
a3:43:a0:93:26:03:a1:ea:18:5d:58:6c:ff:75:ff:
74:7a:d4:08:1d:76:71:e8:7d:58:e7:02:25:36:56:
84:c2:b1:24:b9:63:c1:56:b6:1a:f2:c1:81:c1:1d:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:23:92:49:AB:DE:24:B1:12:86:E5:9C:8B:A1:91:BC:9B:67:67
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0e:d9:7f:3c:fe:a9:a9:5e:d8:7e:4e:50:0c:07:a7:8d:7d:
f5:95:01:0f:8e:73:a0:00:dd:4a:b8:4c:ea:cc:3b:ce:8a:0e:
45:c2:a8:15:54:ab:17:cf:8d:09:d5:23:0b:43:e9:99:76:ff:
34:9c:0e:ca:e8:13:02:8d:a0:af:c4:d5:e1:6a:3a:9d:53:68:
20:41:55:f8:70:cf:0c:8e:07:4c:cb:99:c2:fd:f5:b0:6e:94:
b3:2f:d7:a7:f3:8c:26:70:e2:15:04:02:f2:48:bf:97:84:d2:
56:6d:9e:d5:78:5e:d3:bb:9c:9d:22:fd:c3:fd:2d:b9:6f:7d:
d6:cf:39:3c:94:03:6e:74:4d:b3:76:aa:17:8e:90:d5:09:46:
66:e2:67:42:aa:be:35:29:f3:b2:7c:d2:9a:45:4d:53:37:72:
de:51:f3:ef:b9:7b:3d:30:0e:c6:23:9f:9c:93:da:77:19:1e:
d3:bd:13:c8:79:6b:68:82:20:52:9f:ad:b9:03:2b:9c:23:e3:
e5:df:02:2a:86:07:1b:a5:fa:9a:85:23:c8:67:49:ee:5b:32:
46:18:04:29:e5:3d:74:ba:1d:eb:42:2b:87:af:6d:b8:b1:fa:
71:9f:be:84:28:4e:cb:6c:d8:e8:a8:5b:fe:9e:f4:8e:bf:14:
01:61:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:56 2026 by rpki-client