Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: 7ApnLT46W4spHaKyq1U1zh9Te5Aq6qz+lN9OJwFuTTo=
Subject key identifier: 12:0C:B7:47:9B:79:76:B3:DE:B3:66:BD:8B:47:5B:D4:36:F2:16:EF
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 01A0C55703378FFCF98C643221B911D246E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 04DF
Signing time: Mon 21 Sep 2026 19:00:08 +0000
Manifest this update: Mon 21 Sep 2026 19:00:08 +0000
Manifest next update: Tue 22 Sep 2026 19:00:08 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: G2dvBYuipiwobBdZThZTxB+On56h26Vwwe6J5wkyQL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:03:37:8f:fc:f9:8c:64:32:21:b9:11:d2:46:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Sep 21 19:00:08 2026 GMT
Not After : Sep 22 19:00:08 2026 GMT
Subject: CN=120cb7479b7976b3deb366bd8b475bd436f216ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:3b:21:f8:36:09:ed:c5:2b:48:b1:37:ea:
4c:f4:45:c2:f2:33:e7:43:24:28:50:98:47:42:fd:
d4:72:59:bd:9d:a9:8e:80:e2:ac:3e:94:c9:27:15:
d9:38:bf:70:74:fe:f3:35:04:28:fc:20:05:b5:aa:
d9:9f:00:c1:cf:68:cc:d4:03:12:35:16:ed:7f:cc:
90:3f:48:99:13:3c:0c:c6:9a:a2:bb:04:ef:af:e9:
a7:b4:ac:8e:b6:fe:fe:df:5a:73:6c:99:13:a8:12:
07:77:8a:ec:a5:1a:15:5f:12:29:7c:ac:14:80:a3:
5e:d2:14:92:f8:9b:ce:da:5f:8b:28:2f:85:dc:87:
12:56:b8:2d:7f:c7:de:b9:88:9e:0a:ff:71:8c:1e:
19:63:ea:07:d4:5d:53:24:58:e1:8a:13:5d:b7:90:
ec:bf:52:dc:a2:3a:3a:68:c5:68:a9:73:6d:a0:e3:
68:e2:3b:33:bb:de:20:ea:88:c6:26:a7:a6:29:eb:
03:ce:b8:2d:07:47:fc:75:3b:10:92:08:41:7b:fa:
02:36:36:20:aa:7b:86:d0:c2:b5:cd:b5:bd:06:b9:
de:73:21:31:92:46:16:67:05:e4:a8:b9:a0:c8:f8:
58:0e:1e:50:98:ea:72:0d:f9:a4:ad:86:8e:17:f6:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:B7:47:9B:79:76:B3:DE:B3:66:BD:8B:47:5B:D4:36:F2:16:EF
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a5:c7:c1:17:c0:b7:eb:5e:5a:80:8e:4a:36:56:9c:71:ed:
5b:be:84:16:da:9c:3d:ee:48:d3:a4:b0:e3:9b:53:6f:79:d5:
f9:c9:76:38:b4:e0:65:09:6f:38:a0:ef:3a:62:9a:74:2f:e0:
bb:bb:62:72:6c:44:11:f4:fe:48:0f:c5:02:48:f3:1a:53:a0:
e6:b1:69:3b:50:30:f9:97:d1:cf:b7:78:2a:0d:0a:58:26:a0:
5a:18:1f:d4:a4:97:f4:24:b6:3f:47:59:8f:2b:26:ce:3d:d4:
6c:f4:3b:91:91:8f:a2:81:bb:a5:40:b8:c5:45:d0:95:c7:d1:
57:ae:04:1c:ca:0b:aa:df:4e:99:08:c8:b4:09:77:e1:0d:04:
5d:94:5b:da:da:ac:f1:6d:60:16:1b:6a:a0:05:53:48:17:ad:
8b:99:5b:96:2e:a9:6b:dd:b2:51:13:f2:35:82:1d:0c:ad:09:
5f:43:6d:83:6b:71:94:f2:83:85:19:b8:aa:75:32:62:38:b8:
2e:20:1f:75:25:72:0e:39:24:80:34:48:6a:f1:0a:32:0e:fc:
ab:24:65:2a:82:a2:e9:f3:da:c3:76:12:1b:d7:00:b6:3a:20:
82:44:ec:cf:ac:6c:c9:48:1a:07:ff:a8:57:82:72:3d:94:95:
9f:d1:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:11:06 2026 by rpki-client