Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: nVXBmK++T8FwKihXDu31jtSmm+4D+selYa4lRzV6GlM=
Subject key identifier: 44:BE:E0:93:F1:EF:83:2F:A9:91:6C:55:76:03:C3:AB:DF:6F:8E:4E
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019EC300AA465DC0DD39DFD9D20B7F8616A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 09D3
Signing time: Sat 13 Jun 2026 22:01:00 +0000
Manifest this update: Sat 13 Jun 2026 22:01:00 +0000
Manifest next update: Sun 14 Jun 2026 22:01:00 +0000
Files and hashes: 1: l-hgDYjbw5yT2K4L7tI-0c38Q2I.roa (hash: WXcPkvW+EiO70Zda3fEJ9VpmcOJPMXJjg2uUR+uTzFE=)
2: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (hash: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk=)
3: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: Oj1ADBFbV+MEVeg5cjVHzvBL2qaun4AwUgzUD6vqswA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:aa:46:5d:c0:dd:39:df:d9:d2:0b:7f:86:16:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Jun 13 22:01:00 2026 GMT
Not After : Jun 14 22:01:00 2026 GMT
Subject: CN=44bee093f1ef832fa9916c557603c3abdf6f8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:06:e9:0f:60:f3:f6:6c:33:cb:3b:43:d9:
33:63:0b:65:0f:c4:26:25:8c:94:fa:5c:b8:fa:5e:
f6:66:e9:cc:7a:ca:ad:e9:1a:ea:be:22:24:b4:70:
34:49:81:b3:6a:6b:fe:37:7b:52:be:64:24:f6:7b:
84:07:a5:97:79:86:c6:1b:2c:10:31:b0:b2:b3:13:
ff:05:4c:3e:81:4b:c2:ea:84:ce:d0:90:46:28:cc:
7b:69:5b:c7:6d:a8:c6:af:fe:fc:d8:48:87:37:ea:
a6:c6:45:38:90:16:ff:67:30:d0:b1:7d:de:5f:8d:
ef:a6:c6:63:3d:23:45:4c:b0:c2:c0:30:1b:89:11:
bc:5f:95:c4:5c:d3:e1:7b:8b:f2:eb:a2:52:da:67:
9e:df:e6:65:77:de:b8:e1:53:b9:76:18:9c:9b:d7:
06:4a:24:14:99:bd:d3:88:86:08:c3:b0:22:af:dc:
80:40:5e:17:02:e6:6e:38:7c:52:e6:11:b7:8d:ab:
f9:4e:96:9e:e5:8a:b3:39:c5:ef:fa:aa:5d:f6:c8:
4f:cc:a6:e7:bd:f7:e3:85:6b:bd:9c:18:cc:1f:1f:
52:70:81:b4:70:89:25:6e:f5:89:40:dd:07:89:08:
2f:07:fc:4a:ab:80:71:48:04:64:92:07:58:85:b8:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:E0:93:F1:EF:83:2F:A9:91:6C:55:76:03:C3:AB:DF:6F:8E:4E
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:28:e3:87:a1:d8:0c:1e:cf:a8:b9:a0:c9:3d:32:55:26:0c:
87:f3:0b:aa:01:c3:89:af:34:ad:4e:b7:55:14:da:bc:fd:c2:
39:bf:d0:8f:b8:24:4d:e2:a0:0b:14:5d:d8:54:6d:1c:70:ad:
9b:e3:d6:47:a1:9d:dc:8d:f4:45:d9:65:42:b1:3b:e6:5e:7c:
31:e7:72:c1:8d:25:68:8f:ba:5f:4c:75:9f:ca:4a:4f:8c:16:
02:c5:21:e9:ab:d5:21:f8:cc:4f:42:41:c6:e4:6d:44:a6:15:
e9:6f:34:5f:6b:52:59:8e:70:32:cf:9c:97:81:c2:b1:49:82:
91:c0:93:45:af:94:41:99:46:98:c0:3f:f3:42:40:92:0f:c2:
90:4b:94:3b:8f:c0:81:88:b8:73:a1:bc:4f:9c:2d:c5:80:31:
1b:77:2d:55:b6:f5:be:45:65:f2:88:73:7d:b9:ca:25:50:e8:
92:a4:df:67:3d:c6:65:92:9f:07:2e:d2:c1:66:d0:2e:d4:af:
fa:1c:42:2f:43:90:05:b4:df:cf:15:59:2a:e4:56:d1:8c:59:
48:85:9c:fa:f3:ef:1e:ad:07:d8:fe:28:aa:9b:a0:91:92:de:
d4:b6:41:ea:0c:46:f3:de:0d:10:9a:2b:9c:f9:5f:db:09:02:
78:82:1d:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAKpGXcDdOd/Z0gt/hhapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMDkzNTE4NWM2ODAzNmEwZmFlZGVlYWFhNmJmZWY0ZTYy
YTBjOTMwHhcNMjYwNjEzMjIwMTAwWhcNMjYwNjE0MjIwMTAwWjAzMTEwLwYDVQQD
Eyg0NGJlZTA5M2YxZWY4MzJmYTk5MTZjNTU3NjAzYzNhYmRmNmY4ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dYG6Q9g8/ZsM8s7Q9kzYwtlD8Qm
JYyU+ly4+l72ZunMesqt6RrqviIktHA0SYGzamv+N3tSvmQk9nuEB6WXeYbGGywQ
MbCysxP/BUw+gUvC6oTO0JBGKMx7aVvHbajGr/782EiHN+qmxkU4kBb/ZzDQsX3e
X43vpsZjPSNFTLDCwDAbiRG8X5XEXNPhe4vy66JS2mee3+Zld9644VO5dhicm9cG
SiQUmb3TiIYIw7Air9yAQF4XAuZuOHxS5hG3jav5Tpae5YqzOcXv+qpd9shPzKbn
vffjhWu9nBjMHx9ScIG0cIklbvWJQN0HiQgvB/xKq4BxSARkkgdYhbj3/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES+4JPx74MvqZFsVXYDw6vfb45OMB8GA1UdIwQY
MBaAFMAJNRhcaANqD67e6qpr/vTmKgyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FrMUdGeG9BMm9QcnQ3cXFtdi05T1lxREpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iZTMwNmYtMGY4Yy00Njc0LTkzZmYt
MmE5NzEyYmY2MDNjLzEvd0FrMUdGeG9BMm9QcnQ3cXFtdi05T1lxREpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iZTMwNmYtMGY4Yy00Njc0LTkzZmYtMmE5NzEyYmY2MDNj
LzEvd0FrMUdGeG9BMm9QcnQ3cXFtdi05T1lxREpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSjjh6HY
DB7PqLmgyT0yVSYMh/MLqgHDia80rU63VRTavP3COb/Qj7gkTeKgCxRd2FRtHHCt
m+PWR6Gd3I30RdllQrE75l58MedywY0laI+6X0x1n8pKT4wWAsUh6avVIfjMT0JB
xuRtRKYV6W80X2tSWY5wMs+cl4HCsUmCkcCTRa+UQZlGmMA/80JAkg/CkEuUO4/A
gYi4c6G8T5wtxYAxG3ctVbb1vkVl8ohzfbnKJVDokqTfZz3GZZKfBy7SwWbQLtSv
+hxCL0OQBbTfzxVZKuRW0YxZSIWc+vPvHq0H2P4oqpugkZLe1LZB6gxG894NEJor
nPlf2wkCeIIdBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:35 2026 by rpki-client