Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: DKyg57/8ogwvVh9WzYYXXQHopmqy+cLjFq2GBOReK7g=
Subject key identifier: F0:65:50:19:69:9E:6C:09:5F:96:86:F5:48:07:F0:29:7D:25:11:A7
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019D9999A53DB4CE9A0C6D889B561812D7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0939
Signing time: Fri 17 Apr 2026 04:01:16 +0000
Manifest this update: Fri 17 Apr 2026 04:01:16 +0000
Manifest next update: Sat 18 Apr 2026 04:01:16 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: BEHtpmECoWSy3KNgORInG5o36Nc/g7KqmC3z1qiJBwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a5:3d:b4:ce:9a:0c:6d:88:9b:56:18:12:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Apr 17 04:01:16 2026 GMT
Not After : Apr 18 04:01:16 2026 GMT
Subject: CN=f0655019699e6c095f9686f54807f0297d2511a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:af:15:c8:00:ec:dc:ef:f2:47:4e:73:83:
72:92:3f:d0:d7:1c:42:1e:04:33:ef:d7:07:d0:8c:
67:64:b5:46:54:a6:ba:92:ed:fb:3a:18:fc:5e:22:
00:01:25:f5:9a:04:24:6b:16:40:df:58:11:5f:88:
9a:63:a7:f5:40:e6:e9:b4:a7:b6:7f:8d:87:75:ce:
a9:97:1f:b4:0b:52:31:c1:8f:b9:47:b4:36:3d:98:
0a:d3:90:52:5b:a7:db:e4:d3:2b:d8:60:52:f8:83:
02:d8:3a:0b:10:bf:a4:54:5b:3e:67:18:ec:c2:95:
f4:f7:9a:ae:27:8e:c6:f3:a2:f4:bf:8c:33:37:ee:
69:c6:39:e0:bb:5c:d2:c8:75:c0:3d:82:0b:50:60:
dc:e2:bb:a8:be:a8:52:48:0d:4d:d6:27:b8:16:b4:
d4:c9:62:81:8d:6d:01:a0:90:9d:34:16:70:d6:28:
de:07:47:ed:bf:7d:10:bb:df:b2:78:05:90:da:a8:
11:da:7b:c8:f9:8c:32:e2:f3:1c:74:cc:a9:a7:17:
ec:30:06:b0:6e:0e:be:b9:4f:88:58:3c:73:33:16:
c7:53:3e:3f:24:7d:12:98:60:09:8b:96:69:80:f6:
84:67:e8:cc:f0:4c:37:8a:20:da:83:b4:db:e7:a4:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:65:50:19:69:9E:6C:09:5F:96:86:F5:48:07:F0:29:7D:25:11:A7
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ff:75:cd:a3:b0:60:f9:e9:d4:4d:51:5f:29:db:b9:a6:c0:
df:2a:41:ac:98:f0:0a:4c:e6:c2:db:40:f8:3f:80:63:7d:e0:
d8:7a:51:26:3e:af:67:25:fd:4f:28:b2:69:74:96:79:42:f4:
99:1c:50:00:e9:d1:0e:1e:7b:1f:26:7f:e3:c8:17:f2:4d:e3:
7c:de:f2:7d:15:ef:5f:0a:4c:ba:b6:75:05:f5:e3:db:35:a3:
e6:ae:d2:c4:25:98:25:c1:1c:79:df:0b:b1:fe:51:a3:00:15:
37:7a:1c:e5:01:7a:73:62:c8:58:6c:eb:2b:78:e3:5d:dc:01:
3e:9c:06:f0:26:c0:c3:66:6f:9f:d4:1a:41:99:03:95:cd:3a:
63:1f:09:df:13:85:01:a3:12:76:bb:17:76:ab:50:0e:3f:4e:
f3:87:46:d0:8e:f8:a5:55:32:48:95:c1:91:f2:e8:d2:70:e9:
01:76:27:56:26:ef:b9:58:fb:8e:e5:78:32:c9:f6:a0:85:66:
a2:51:08:ac:85:de:af:ef:84:73:03:4c:48:e0:ba:bf:f3:bc:
dd:cb:dc:7b:39:86:ff:c6:f8:67:c7:d4:07:02:97:07:7a:32:
b5:95:cd:a4:62:5e:2c:16:25:10:15:58:6f:0d:e6:a7:63:46:
5e:fc:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:55 2026 by rpki-client