Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: IiMTuCuV13LEYYsEYQ0un8+8klpWOnZ7LLMjPy4597Y=
Subject key identifier: BC:02:57:67:7B:AD:9E:8C:C8:21:7B:B4:EA:9C:40:64:AD:7D:A0:C4
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 01A0DBDFFCB982FCCB644F14706249BC9971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0AE9
Signing time: Sat 26 Sep 2026 04:01:24 +0000
Manifest this update: Sat 26 Sep 2026 04:01:24 +0000
Manifest next update: Sun 27 Sep 2026 04:01:24 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: dV92SNte/eeCkB5Ms0PnP2dX70It3ZdThE7Lb1cWpVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:fc:b9:82:fc:cb:64:4f:14:70:62:49:bc:99:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Sep 26 04:01:24 2026 GMT
Not After : Sep 27 04:01:24 2026 GMT
Subject: CN=bc0257677bad9e8cc8217bb4ea9c4064ad7da0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:b4:1d:5e:95:6c:c0:f8:2f:c5:8c:73:65:
35:ce:48:70:27:11:5d:42:97:d8:b2:ec:a0:ab:a1:
2b:3d:27:c5:72:24:b2:94:77:12:6c:fa:cb:c7:0e:
d6:04:ec:c9:a6:95:16:32:9f:38:c2:f0:02:c7:20:
14:88:ae:2c:71:3f:17:88:c3:92:35:12:59:81:bf:
7b:00:37:f6:f4:45:90:cf:b1:1d:b6:ac:ae:dc:6b:
82:f2:3e:d0:d4:3f:9f:ab:46:21:e3:fe:46:cd:a4:
4d:9c:9f:1b:8b:4c:00:36:0d:72:40:97:0e:ef:df:
f6:64:af:f2:b2:a3:f2:4c:f7:9c:d7:e9:ca:84:9b:
db:67:28:4b:33:2b:96:b2:fb:e1:3e:38:3e:d2:5f:
84:1a:f3:64:cc:21:88:53:3e:84:4f:9b:95:0a:52:
a9:0d:33:4e:ab:70:bd:29:2e:6c:e4:eb:7e:24:d4:
9e:5a:39:ed:d1:e2:8c:23:1a:81:09:85:e8:3c:9e:
4c:13:33:97:e4:0e:03:f8:0d:a7:7a:a6:d9:b3:f5:
7d:89:42:1a:25:bf:00:09:c4:41:48:c1:62:7d:4c:
6d:27:0b:e8:5a:ca:5e:54:08:8b:9f:29:90:47:5c:
86:bc:6e:d0:e2:74:b4:7c:73:9e:e5:5a:fa:01:49:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:57:67:7B:AD:9E:8C:C8:21:7B:B4:EA:9C:40:64:AD:7D:A0:C4
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:32:d9:f3:ad:a0:64:d4:ed:eb:f0:9c:98:0c:fd:1d:7c:ce:
df:9c:24:28:5d:83:35:38:df:30:43:71:56:1d:51:06:2e:df:
a5:37:bc:6c:d8:11:34:6a:b1:e1:95:8f:f9:2e:ad:b3:46:05:
3c:e9:d2:d5:ca:1b:93:0b:62:f2:ec:0f:d7:13:ad:39:cc:c5:
13:c0:51:c9:75:cf:ca:83:7f:fe:69:b4:84:da:49:53:d1:b4:
ca:92:57:52:8b:cd:2c:a6:fe:27:cd:f0:82:55:2c:d7:d5:b4:
c5:54:c2:20:79:3f:49:ca:f8:cd:6a:2b:d9:ba:de:b1:2d:6a:
89:99:95:93:6e:7d:b1:b6:99:b9:d3:80:7e:a7:98:4f:8f:35:
1b:9a:88:33:99:59:f7:17:fb:8c:ae:8f:28:3f:d5:a5:be:cd:
8e:67:af:98:0d:c4:f6:d2:c6:7e:5c:7c:15:65:10:68:64:4d:
f5:44:2b:08:06:4f:9c:b4:ce:b6:ea:b6:85:bf:f9:82:14:7b:
0c:7a:a2:ec:82:61:3d:59:8a:4c:75:56:f5:08:d9:89:e2:c3:
64:a5:6e:28:82:2f:82:ed:b9:a1:0c:61:92:b6:6a:a0:40:39:
ba:94:40:5c:df:bf:3a:32:b7:60:fe:b8:7b:67:2e:08:93:97:
5d:19:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:46:10 2026 by rpki-client