Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
File: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft (raw, json)
Hash identifier: +hbKI7NkRgv27ycQuGL82/I3pjbkaBxLs3llv80BaOs=
Subject key identifier: 17:85:14:99:6B:D2:CC:C9:55:A7:F3:58:F0:49:0D:55:B2:13:DB:64
Authority key identifier: C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
Certificate issuer: /CN=c25ed6de23b320e302888f9427723f2201f2919f
Certificate serial: 019FAA873E8A1E0B8338B4361A889B050B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
Manifest number: 014E
Signing time: Tue 28 Jul 2026 21:00:17 +0000
Manifest this update: Tue 28 Jul 2026 21:00:17 +0000
Manifest next update: Wed 29 Jul 2026 21:00:17 +0000
Files and hashes: 1: IR-d51vm-EzO-y0ahHT7GPsKa_s.roa (hash: 9bFsqn1B7GFofQPFT4XuTf48JjlvEIGyTh6l5dNJXig=)
2: i9kzZBEPSIQwbMZfNqvulYgSaao.roa (hash: 9Og3ibdmWGNSIjDGBXMLymE/K8GzzlULzDfKShanqjc=)
3: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl (hash: uj0oDy0sEnTr2+lLDTbVpUNLwmKxwSUmHEPrQffd9Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:3e:8a:1e:0b:83:38:b4:36:1a:88:9b:05:0b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25ed6de23b320e302888f9427723f2201f2919f
Validity
Not Before: Jul 28 21:00:17 2026 GMT
Not After : Jul 29 21:00:17 2026 GMT
Subject: CN=178514996bd2ccc955a7f358f0490d55b213db64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:e7:da:ee:b8:49:dc:14:32:9c:cf:35:c8:
1a:c1:5d:22:15:28:e5:6b:14:7b:f3:dc:dc:ae:04:
8b:67:e0:a4:54:f6:e3:61:8e:2f:c2:2a:d8:cb:6e:
6a:12:58:97:b9:38:43:65:d2:65:56:96:12:e5:5d:
8e:ac:74:28:4b:e4:80:9f:37:e8:f3:77:d0:71:bc:
53:16:e6:c4:dc:75:25:67:4e:5e:87:b9:3c:3b:4a:
60:d2:13:52:2d:2d:6c:67:f2:85:f1:23:48:50:e9:
33:9f:5b:eb:df:0c:47:65:56:b1:68:a8:0d:2e:a6:
7b:3c:ea:33:d0:4e:d9:a3:82:f6:89:1c:86:d6:b5:
a4:51:56:d1:03:65:28:d0:d8:24:c0:0a:9e:2d:b0:
9b:23:8d:86:79:9e:41:23:a1:3a:27:c0:93:d6:b2:
6b:31:06:c4:72:60:91:cd:06:fd:66:e1:c3:cb:76:
3f:f4:f2:aa:bc:25:e3:42:a2:72:b4:71:8d:66:f6:
63:ee:0d:22:a7:7e:bf:a5:d6:0e:c4:3a:62:2b:43:
52:d6:d2:38:d0:65:b2:7b:61:37:3c:8c:ff:56:cd:
00:b0:b6:e8:98:b5:e2:2d:3a:1b:58:d7:5e:cc:0d:
87:95:0a:12:d1:3d:a2:c7:ba:f9:43:6f:39:a6:9f:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:85:14:99:6B:D2:CC:C9:55:A7:F3:58:F0:49:0D:55:B2:13:DB:64
X509v3 Authority Key Identifier:
keyid:C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1d:53:0c:f0:5f:6d:81:f4:ed:e6:55:93:11:65:42:c8:2b:
c1:55:f6:6a:69:56:80:14:8b:53:45:0e:85:21:2f:e8:6d:db:
ed:5c:27:98:fa:39:cb:24:0c:96:b7:49:71:0c:df:9d:50:1e:
b4:84:5f:7a:f8:19:89:61:88:6a:93:76:50:6a:9e:9a:bd:32:
be:e1:bd:29:33:01:eb:1d:3a:dc:dd:fc:5d:a7:4c:e0:23:bd:
d9:b4:d1:1c:75:a9:34:59:10:d7:04:6e:f6:c8:45:ec:95:66:
94:0c:3d:a5:ce:5a:e2:4b:72:97:61:f8:d1:2e:8f:55:fd:b5:
42:dd:0a:5f:ea:d0:b5:4f:38:2e:6d:e9:29:37:40:f0:13:5a:
95:38:c3:2b:af:00:83:b7:22:d7:f7:f5:d0:a3:4e:89:24:a4:
97:a4:c1:ab:76:2b:c2:42:a4:f2:a4:66:c8:9c:b9:3f:d3:83:
e1:6b:31:2f:f0:17:ea:c6:de:5b:57:62:c2:cb:36:66:07:d4:
9c:dc:ce:cd:34:f0:df:5c:1a:83:16:1d:7c:61:0e:37:d9:bc:
91:3f:52:0f:74:c3:17:9b:57:94:22:be:2e:4a:66:cf:74:14:
8a:99:de:ed:f2:5a:e5:1f:44:8f:76:df:1a:6a:13:b0:18:75:
24:d0:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:57 2026 by rpki-client