Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: Kpa5Cy65E+j8Tf7yz1ayAfel2T7f5eRWrKFtHe6t4ew=
Subject key identifier: 38:59:90:04:5A:1A:F4:55:DD:EE:1B:17:9B:60:F1:F7:5A:CC:44:F8
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019ED34F8D4E5C8261007C123298A106D793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 196A
Signing time: Wed 17 Jun 2026 02:01:06 +0000
Manifest this update: Wed 17 Jun 2026 02:01:06 +0000
Manifest next update: Thu 18 Jun 2026 02:01:06 +0000
Files and hashes: 1: Be5RoMw-ds5u2XTKB0fRW06anJM.roa (hash: /kKlE5noyKkxWgeKwC5k06c0zlzs+Aq9eYc5li0SiaA=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: r4D7a5TUNe+KZDoUA/90zwN3vLiMbU1Ggi276VjAE28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:8d:4e:5c:82:61:00:7c:12:32:98:a1:06:d7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Jun 17 02:01:06 2026 GMT
Not After : Jun 18 02:01:06 2026 GMT
Subject: CN=385990045a1af455ddee1b179b60f1f75acc44f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:02:43:b8:fc:04:58:d7:d2:70:3b:b6:88:
b8:5f:04:a9:3a:fe:bd:1c:fc:7b:28:95:9e:0c:62:
fa:7f:e1:fe:f8:d2:86:5d:40:d4:42:3a:49:ae:b7:
78:79:5d:1d:73:0d:a8:3f:23:0d:ac:54:18:64:95:
b0:52:d3:23:05:97:ec:ed:eb:d1:ba:5c:e5:8d:1b:
7d:3b:00:7b:a1:b8:d1:cf:d7:1a:90:85:ca:12:ba:
a3:c4:65:45:b9:64:2e:4d:cb:4c:90:41:28:c7:7d:
11:f5:ca:45:d0:b3:48:20:09:94:e9:dc:62:d4:f6:
54:be:34:8f:2d:cd:59:71:73:ac:5f:6a:bb:fc:3c:
51:74:6b:82:24:6a:fe:29:87:ac:de:bf:d2:56:92:
c3:46:72:3d:2f:8a:64:b9:ce:18:9f:e2:56:7f:d4:
af:b6:17:b9:c1:35:25:81:8e:5b:6b:57:d2:84:4a:
a6:16:23:24:8c:2d:26:b7:cb:33:c9:c0:fd:9e:70:
c4:a9:41:02:9a:5b:ec:9d:d1:81:ba:35:32:d8:96:
8a:d3:a8:9b:4b:ff:71:23:7a:95:14:1a:9c:3f:4f:
36:33:62:43:25:a4:d9:d2:70:90:fd:0a:70:ff:32:
70:4b:b3:0e:b1:74:34:30:b6:54:96:e6:3a:43:ac:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:59:90:04:5A:1A:F4:55:DD:EE:1B:17:9B:60:F1:F7:5A:CC:44:F8
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ef:50:17:4b:cd:3c:5b:47:1e:51:a0:34:84:25:cc:d2:ab:
09:6d:f6:56:b1:ea:89:c2:b9:a2:6f:26:60:1d:a4:48:1e:c4:
30:7f:67:9f:51:9a:64:df:79:c3:b3:f2:d1:b5:19:3b:bc:63:
88:85:f0:67:c2:f1:3e:70:b6:66:f4:ac:c4:15:a5:05:26:a1:
6e:86:1a:20:25:4d:74:79:56:34:36:17:4c:5c:b4:39:2b:8a:
45:ea:3c:5b:cb:88:3c:9c:06:2b:7c:ba:6c:13:54:df:23:f2:
c6:aa:21:c7:29:fd:85:f0:91:8f:7d:51:c5:8c:19:5c:5f:09:
54:54:70:c8:43:80:f1:12:cd:5d:e4:32:56:9b:92:51:3d:95:
00:e2:9b:84:68:cc:c2:ce:d8:70:4a:d3:9e:56:9c:9a:af:94:
d0:94:54:5f:9f:26:9f:0e:74:d8:3d:01:34:8f:6e:cb:65:b6:
a2:b6:17:8d:ba:64:1b:d4:d1:78:82:0d:b3:e5:f1:c7:e5:34:
8e:f2:42:b4:17:87:27:91:30:ed:72:be:39:c5:10:40:ba:61:
2f:6b:e6:09:bd:d8:41:09:d8:6b:7f:c8:a9:a6:61:d9:4e:9b:
72:7b:c7:9e:c7:22:3b:5c:0f:18:b8:8c:2b:b9:06:f0:ee:ec:
f8:99:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:13:50 2026 by rpki-client