Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: c4NCR87oPWxUkhka46e13hVw3vhoKphTazdZ68HnWbs=
Subject key identifier: C6:75:14:6A:E5:52:91:7C:80:5A:54:28:A2:AB:69:7E:1B:14:FD:EF
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019D9A3ED2BEB9D94E62D81092D0E8235CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 033B
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: xvb/ghuscj79e6saVMWK9kOoLAJKAhXUa8MZZVe3/qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d2:be:b9:d9:4e:62:d8:10:92:d0:e8:23:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=c675146ae552917c805a5428a2ab697e1b14fdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:22:36:ab:17:88:d6:9f:97:29:53:91:4d:
55:54:0a:0f:79:d3:c5:c7:d0:86:7e:2f:be:41:01:
cf:0e:bf:6c:e8:98:f1:00:20:64:fb:29:3f:64:ed:
47:87:6c:9f:f3:49:06:bd:7f:ca:4f:60:68:88:db:
6c:95:c8:4d:f0:9a:d9:1f:e0:88:8f:1c:ec:5c:79:
1a:8e:d5:3a:bf:56:f4:e4:27:15:9c:cb:21:65:dd:
6c:e3:52:54:9b:44:13:43:c7:a8:71:71:8c:e7:42:
96:3d:a0:ad:76:f9:ea:2b:64:68:ad:16:fa:33:c6:
a4:16:90:38:bd:f2:b5:5c:8d:4f:46:67:ce:6e:f2:
45:0d:9c:19:f8:98:2f:5d:42:12:bf:ef:c3:49:f1:
a3:7a:9f:71:8f:02:b3:08:2f:6c:f3:04:b6:18:0d:
f1:99:14:42:2c:05:1b:d8:e2:09:37:80:5d:bc:72:
6d:0e:ec:72:01:81:41:22:49:35:1a:2b:1f:cb:00:
aa:f3:2c:53:90:5e:fe:a5:c9:2b:3e:2d:b5:d3:ba:
d0:a8:1b:4a:09:a1:9e:63:31:71:79:67:c4:db:f5:
9d:19:a7:a3:2b:94:c7:69:ab:ab:fe:59:55:c2:e3:
23:c8:31:c7:a5:62:8b:6b:0f:5c:7b:7a:1e:c5:74:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:75:14:6A:E5:52:91:7C:80:5A:54:28:A2:AB:69:7E:1B:14:FD:EF
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:56:9a:90:b4:6d:86:f2:c4:a2:86:52:dd:b0:f5:59:52:cd:
f4:cb:cd:09:7a:63:5b:29:5f:09:d7:a9:86:bb:64:a2:34:80:
94:06:a3:b6:3a:5c:e4:40:5a:14:81:cc:71:a6:27:ac:e1:f5:
52:5b:95:48:9c:68:d9:51:bd:6f:59:1c:6d:8e:5f:ea:43:27:
a3:96:de:5a:92:af:f7:3c:0e:06:cc:d0:41:3e:98:3e:60:49:
2a:e9:ff:fb:89:16:77:ec:0e:4b:8c:58:da:70:c2:b9:88:b8:
94:30:8e:71:3d:25:a2:e7:db:12:2b:90:7a:4b:9f:fe:d2:c6:
db:91:ee:47:8e:d3:fa:c1:47:d5:79:5b:d2:be:c4:5f:c0:d7:
35:e7:11:1c:37:e7:1e:58:52:61:22:45:db:fa:2a:4d:a7:59:
fb:e8:c0:2b:6a:f1:0d:74:ff:f3:1a:74:15:7c:32:ca:a7:12:
3c:8c:01:6d:4a:72:65:0f:ef:a2:bb:91:18:51:d2:03:32:31:
32:20:b2:5d:92:b7:22:b2:4f:dc:38:5d:ec:20:85:d9:95:78:
bf:8b:cf:fd:8a:e3:0e:ad:d1:20:64:84:86:0d:85:57:0e:53:
64:00:68:82:3c:a7:7e:03:0a:99:68:4c:66:80:6b:d3:a9:c4:
f5:ba:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:39 2026 by rpki-client