Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: y6dVro2suIvIdRc70OCwY9iz+7Pn/+Gv3TIwWnd5VXo=
Subject key identifier: 1D:50:A5:23:8F:70:1B:7A:E0:10:65:02:BE:02:AA:FC:D5:76:7B:79
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019CAC0FF3B39AC0CCD8E938DC1AD53A3C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 08BE
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: 4UCDT/0tp82ZjV8XqPpgbLJgMCFWS1x+vah6PLN1/aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f3:b3:9a:c0:cc:d8:e9:38:dc:1a:d5:3a:3c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=1d50a5238f701b7ae0106502be02aafcd5767b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:06:c1:bd:6f:15:cb:f5:f5:b9:82:54:ed:
36:f6:7a:4c:c4:cf:f6:cf:0b:19:dd:1f:e3:70:0d:
31:3b:b4:25:bf:8a:23:76:2c:d5:28:d3:66:c3:3b:
fb:8b:4f:19:74:5d:f8:01:21:51:4a:33:59:b2:d2:
ee:16:da:3d:1b:d9:01:ca:c2:45:f9:cc:55:e8:1e:
be:c2:4f:d9:56:ea:bc:ed:24:b6:50:d5:fa:34:bd:
00:fc:ea:b8:35:27:ac:7c:05:22:b4:88:a7:06:f2:
e5:64:82:2d:fc:11:a1:a4:9c:7f:ff:76:53:be:ff:
1f:77:bd:94:0d:67:9f:f7:81:2e:af:b9:0b:b0:8b:
88:3d:4d:31:14:cb:29:57:3e:f7:fb:9e:cb:c4:d9:
e7:20:b7:e6:c5:d2:d3:6b:ef:d4:af:b7:c0:3c:53:
d9:28:9f:d3:68:81:20:52:5c:a5:71:8c:bf:e5:03:
58:1d:04:48:ce:56:fb:fc:97:e2:c0:b3:dc:01:6a:
6a:d2:c8:8a:c3:a4:20:5c:43:c4:8e:44:2b:53:46:
6e:cb:ff:ea:c8:b8:67:d6:51:d2:28:14:75:e1:5f:
88:58:3c:cd:15:c9:16:be:cb:6f:97:6b:6f:80:0c:
f4:0d:54:3a:36:11:d8:54:0d:23:ff:db:1e:90:81:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:50:A5:23:8F:70:1B:7A:E0:10:65:02:BE:02:AA:FC:D5:76:7B:79
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6b:58:bc:75:87:44:6c:f8:c6:e0:08:00:ba:05:d2:5f:8d:
1b:a3:f9:be:06:eb:fc:c5:0a:68:0b:2d:a0:da:c5:32:17:8a:
c4:38:ee:5c:96:a7:19:b7:81:e9:8a:04:8f:1e:8c:d5:1f:f4:
2a:99:9e:d9:61:e4:03:16:2e:ac:c2:6f:59:1a:ca:1a:a2:6d:
5c:8b:8f:7c:4f:5a:f1:89:db:7c:b0:41:68:99:06:32:7e:7a:
da:24:44:c6:e8:ea:2c:bc:78:46:ae:19:48:c5:f6:3e:9c:1c:
0a:dc:4a:e0:38:e8:79:2f:ca:b5:06:65:13:f7:38:a3:26:af:
e2:f3:e7:e9:b6:76:c1:f2:c0:aa:68:5a:15:05:04:78:69:ce:
eb:69:93:ea:84:ac:ca:06:26:93:f9:01:e9:e5:ae:da:65:24:
fe:ca:6e:28:6d:ef:1c:8d:69:45:ce:8e:2f:b4:25:f5:af:d5:
48:14:25:9e:ed:8b:83:88:d1:e3:ce:62:5d:0d:b0:84:a1:5c:
19:3f:5e:23:c7:4e:f5:ce:81:ac:20:af:f4:6e:ba:c6:65:96:
a7:18:a2:8a:73:3b:71:48:f4:fe:43:a2:23:70:25:9b:8c:3f:
91:28:57:36:41:f2:a5:ec:fc:20:11:06:d8:ce:7a:8b:3c:0a:
8a:00:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:04 2026 by rpki-client