Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: JepqcLu131LShmRr+zPN11U3m8Ey3jwQp8ECMTKaYXA=
Subject key identifier: EA:60:DC:2D:54:5F:49:4A:4C:AB:BF:CE:CD:7C:36:0B:7D:33:A8:B5
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019FAABE74FB44C7F00F43B2C21E280E4266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0A4B
Signing time: Tue 28 Jul 2026 22:00:36 +0000
Manifest this update: Tue 28 Jul 2026 22:00:36 +0000
Manifest next update: Wed 29 Jul 2026 22:00:36 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: /eavD91RPEdMTPga/S7JxjJn+Qm9WHDoNon73RrIo5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:74:fb:44:c7:f0:0f:43:b2:c2:1e:28:0e:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Jul 28 22:00:36 2026 GMT
Not After : Jul 29 22:00:36 2026 GMT
Subject: CN=ea60dc2d545f494a4cabbfcecd7c360b7d33a8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:15:80:ce:be:90:3b:36:2b:19:03:64:c3:
8b:0f:c6:cc:88:91:16:4f:99:70:7b:f0:41:c0:83:
06:89:85:71:3d:5a:c3:aa:cc:df:1c:f1:67:e8:85:
a7:6a:c8:88:42:5c:fd:2e:6f:28:a3:92:5e:86:db:
13:7e:29:0a:34:e1:d3:95:c2:27:a8:06:ca:4d:7c:
0b:48:4c:a6:3d:4d:1c:eb:b6:c8:3f:36:68:bd:d2:
1d:4f:92:92:03:91:66:a1:9f:cc:3a:27:ca:af:43:
2f:be:bf:9f:06:67:a0:5d:81:fa:a4:76:b1:56:92:
4b:f3:0b:d5:e9:ca:f9:d8:fa:b7:af:6b:ea:dc:84:
08:76:d4:17:82:dc:77:99:5f:fc:f7:06:f7:91:58:
39:73:51:76:f9:65:c2:cd:12:f2:01:53:03:c0:07:
35:fe:2d:39:cc:66:84:bb:a7:6a:03:5c:3f:ea:82:
ad:ad:06:ee:b7:10:ac:fa:45:0e:a3:1c:1b:9f:72:
20:a4:a8:03:29:18:ea:d5:07:32:fd:be:6d:ce:e9:
19:3e:95:ea:58:38:56:be:43:88:a8:2a:af:e9:62:
f5:fd:d0:6f:fc:fd:ea:3f:a5:bc:cc:5f:66:5b:7e:
ca:c7:a5:97:7b:3e:4d:19:cd:79:fa:40:42:f0:2d:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:60:DC:2D:54:5F:49:4A:4C:AB:BF:CE:CD:7C:36:0B:7D:33:A8:B5
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:9c:21:8b:68:22:1a:a6:8f:5e:44:7f:4c:02:bf:a7:5f:
56:e0:d8:0e:8a:58:a8:77:6f:a2:33:81:d7:30:e2:f9:da:4e:
df:0c:55:57:02:98:54:fc:9d:0b:ea:9f:9a:b3:5a:d4:c9:9f:
40:88:a2:a2:25:f7:6d:f8:4d:5d:a5:7a:e9:51:fd:1c:cd:48:
97:8f:dd:e0:b9:f2:13:32:3e:a9:18:71:30:45:e1:7c:7d:be:
56:2a:72:dc:a3:6e:18:32:dd:57:a9:88:38:2c:5c:4e:35:24:
79:b3:fe:ab:a0:fa:ef:19:6e:34:6b:90:fc:e0:58:9c:10:14:
38:2f:a9:36:d8:b2:80:63:a3:03:31:76:cd:98:fb:7c:0b:18:
76:ed:15:5c:79:c8:8e:4c:77:63:68:86:cf:d5:98:03:17:29:
1b:20:39:93:01:a8:46:03:df:58:d2:d4:0c:48:55:e1:2b:ae:
82:b1:63:42:4e:ad:31:10:7a:49:a1:a4:ab:8e:a8:30:9f:04:
23:47:23:1a:ce:d4:f5:ed:63:d0:0c:72:f7:05:1b:da:aa:3c:
98:57:c4:54:05:74:0a:10:cd:a8:1e:27:80:e5:20:d8:14:75:
a4:f4:3d:20:84:06:6d:37:92:d3:f1:c7:42:40:c2:c2:cf:3c:
16:b2:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:25 2026 by rpki-client