Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: Cef+q4MEZuxryselZc02pQWnjP+KE7PK0YqPIMwVED0=
Subject key identifier: A1:70:AB:99:4E:BE:63:A7:3D:EF:50:73:83:E4:73:60:B1:80:F6:F3
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019EBFC8C2FE05C40223962B6E9C3C16E093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 03D3
Signing time: Sat 13 Jun 2026 07:01:05 +0000
Manifest this update: Sat 13 Jun 2026 07:01:05 +0000
Manifest next update: Sun 14 Jun 2026 07:01:05 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: g2QIdsP4hGEcludFraB0J9arrTNnS6YCjdkpCCZt+Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:c2:fe:05:c4:02:23:96:2b:6e:9c:3c:16:e0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Jun 13 07:01:05 2026 GMT
Not After : Jun 14 07:01:05 2026 GMT
Subject: CN=a170ab994ebe63a73def507383e47360b180f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:6e:58:ed:42:b4:21:48:36:03:b3:85:2c:
33:4e:e7:2d:a0:a3:07:e9:b0:39:08:3c:e0:db:23:
d1:c3:05:5b:10:c1:91:bb:3c:d3:0d:36:42:ee:49:
f1:fe:54:19:38:77:c8:f7:7c:78:e5:4c:4c:26:ec:
77:e2:01:1b:13:1b:a1:99:02:bb:61:56:03:c9:77:
88:d0:22:7a:a6:74:48:c5:9d:a8:3d:b1:7c:56:b8:
52:2d:bb:6f:7e:cb:cd:b6:b4:ac:7e:96:f8:c2:38:
d8:dc:8c:14:2d:f1:c1:02:d7:e0:df:8b:0b:1d:30:
4e:81:86:65:8d:c2:8c:3a:04:76:c6:2e:60:5c:60:
2c:e2:0e:fd:5e:a3:05:14:55:2c:50:a0:23:a1:bb:
04:af:46:4e:a1:1f:fa:f0:5d:39:45:f2:bd:22:31:
73:8b:d0:62:bf:ef:14:80:db:ab:9f:05:66:8d:50:
58:db:14:75:04:a0:52:02:c0:02:44:27:43:84:be:
13:dc:5d:27:74:38:eb:69:27:3c:d8:2b:54:81:4a:
a4:fc:83:83:a6:ea:c7:aa:80:40:3e:cb:26:41:03:
aa:1b:12:98:c2:a2:be:7e:7c:a5:b9:a3:c6:b6:8e:
da:1a:49:6d:02:e3:32:b8:a3:bc:23:d5:9f:e0:24:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:70:AB:99:4E:BE:63:A7:3D:EF:50:73:83:E4:73:60:B1:80:F6:F3
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a4:52:eb:a3:a1:65:e9:c2:f8:2b:96:fe:72:92:d7:95:34:
98:89:22:96:94:b6:d1:ef:bc:ec:00:d0:40:83:52:73:2f:15:
bc:b7:06:96:4c:30:42:19:ad:f5:e7:3a:27:9f:bc:82:a8:c0:
3d:7d:e6:9f:ff:11:01:0a:6c:23:f9:85:34:db:57:13:f4:6a:
88:60:54:30:98:e8:76:99:2d:04:59:ef:7a:4e:78:fd:53:36:
d0:0d:e8:57:03:b5:56:dd:e3:9a:cb:b8:31:09:86:7a:da:f3:
43:88:05:0c:39:5e:06:53:00:24:80:1d:ef:9c:0a:fb:e0:bd:
6a:58:81:e2:59:1b:e1:f4:e4:1b:dc:4f:dd:cc:ae:d5:9c:9b:
7a:f7:41:6d:5a:f4:17:09:a7:1c:42:9a:ad:aa:97:c2:c9:4c:
48:9d:53:1e:94:05:2f:40:19:14:d6:53:03:96:7d:e2:11:f3:
2c:94:79:87:a2:ac:65:36:af:03:c8:6b:0c:96:35:15:d5:47:
43:10:80:60:74:05:57:80:5c:5f:24:88:69:08:5b:f4:fb:93:
1c:07:7c:d2:33:12:d9:33:af:37:94:87:8b:e5:cb:1e:70:20:
e6:a8:b6:17:ef:47:84:42:91:60:57:8c:85:3c:b6:77:0c:a2:
41:ff:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:41 2026 by rpki-client