Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: XjpJor3XCnrqZAX/2V2X/rXLz3w6YoAwju0DeUaMfQE=
Subject key identifier: DF:6C:49:0A:0A:37:A6:B8:2B:80:D0:94:36:97:BC:B4:58:D6:7F:CA
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019FAC3ECBC3B1B35F23F2D1DFBE9CD0DFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:24 +0000
Manifest this update: Wed 29 Jul 2026 05:00:24 +0000
Manifest next update: Thu 30 Jul 2026 05:00:24 +0000
Files and hashes: 1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: OTnUfzr1sRLXjj1bcH0hTPJWZDYhEIc5uO0HAiJfN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:cb:c3:b1:b3:5f:23:f2:d1:df:be:9c:d0:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Jul 29 05:00:24 2026 GMT
Not After : Jul 30 05:00:24 2026 GMT
Subject: CN=df6c490a0a37a6b82b80d0943697bcb458d67fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:75:55:89:a4:0f:86:62:d1:77:61:c9:c9:
6c:6f:ed:d9:9e:d7:13:80:8e:9e:e6:97:d7:05:fb:
fe:2f:a5:98:72:00:87:ad:a4:78:70:d5:73:f9:bf:
72:76:c2:d8:20:4c:21:53:d9:bf:eb:d0:fc:01:f0:
97:9c:ee:d1:04:80:77:e4:15:42:0c:d1:7e:6c:61:
23:d5:bd:b1:70:95:50:a7:26:69:e1:f8:e8:a2:5f:
a8:9a:c7:fb:a6:ab:d8:c2:4f:30:e2:bf:bc:2d:e0:
c0:84:bf:77:8f:1a:f1:83:51:05:fe:53:e5:89:82:
f6:fa:d9:aa:95:1f:71:65:a5:d5:e9:b3:56:46:27:
24:cc:78:ee:b0:5f:1c:cb:e9:e8:4f:19:61:90:35:
46:d8:a2:72:8a:ba:3a:bd:e6:8b:f8:ae:fc:4f:87:
b3:d8:e3:3d:82:51:3e:78:84:dc:fc:2e:75:2a:e0:
de:86:32:ca:9b:a0:68:07:92:0c:c6:98:b8:12:9a:
97:92:69:17:27:34:08:84:50:54:37:88:b8:9f:b9:
ce:bd:5f:83:12:2e:55:3c:2c:ab:02:1b:27:ce:0e:
b8:87:b2:28:2f:ce:3e:c8:45:4f:4b:9a:42:a8:46:
76:aa:a7:59:0a:3a:db:23:50:1d:0a:84:e4:3b:fa:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6C:49:0A:0A:37:A6:B8:2B:80:D0:94:36:97:BC:B4:58:D6:7F:CA
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:47:88:66:96:f0:3a:b4:13:31:00:b7:60:28:2d:99:b7:ae:
b3:7c:17:c8:e4:ac:55:da:28:ff:bf:17:21:66:d1:21:f4:51:
76:62:22:7c:c7:19:aa:20:a1:84:52:53:4a:04:c1:71:3e:e9:
28:49:31:0f:af:59:ad:36:36:9b:4c:23:26:ba:c2:4c:81:8a:
7d:c0:22:c9:7e:0a:05:a3:df:f3:96:b1:1e:7a:f8:58:4e:e5:
be:d8:32:96:fa:07:06:93:1e:9a:65:1f:bc:c6:7a:b6:a5:21:
b7:85:39:24:66:c5:2b:5e:d8:e1:73:20:3e:1c:53:34:7e:92:
15:93:de:b0:2f:e6:e1:a9:b1:48:63:b1:32:24:23:0a:a1:7c:
1a:3c:2b:7c:32:c9:a1:04:a2:d3:fa:c9:20:32:5e:f9:6d:7e:
0c:88:82:e6:ed:57:ca:31:33:13:af:06:70:3c:67:9e:86:76:
8c:81:29:db:3c:8a:36:df:b6:a7:23:cc:30:5f:7c:e4:11:e7:
46:7e:65:05:24:f7:79:77:cc:61:27:24:11:4e:4d:b6:e1:10:
b0:d0:76:56:a5:da:04:6b:8a:ac:0c:4c:1c:c3:58:75:d7:86:
27:b2:0b:4b:ba:6f:5c:b4:26:70:8e:6a:aa:b9:65:01:1b:09:
4b:b2:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:18:11 2026 by rpki-client