Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: 4dD1vRfPX6OKEHM5KkKgVWlQNW0tSp0LqB3q1oTWvpQ=
Subject key identifier: AA:C2:50:A8:4D:84:9A:2C:75:5C:58:63:F1:B7:A1:94:18:F2:75:64
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 019FAA88F7335644BAEB18C7E6D497134405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 0CD9
Signing time: Tue 28 Jul 2026 21:02:10 +0000
Manifest this update: Tue 28 Jul 2026 21:02:10 +0000
Manifest next update: Wed 29 Jul 2026 21:02:10 +0000
Files and hashes: 1: aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa (hash: YgDV6lSWXJsx/Tra+FgUOmYQqBP8G4F9S/WJqO8pRPM=)
2: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: CfxpDhsmXhQ69muo3mZG9BiTMAVG9wCx/Q0VztmWghU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:f7:33:56:44:ba:eb:18:c7:e6:d4:97:13:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: Jul 28 21:02:10 2026 GMT
Not After : Jul 29 21:02:10 2026 GMT
Subject: CN=aac250a84d849a2c755c5863f1b7a19418f27564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:59:1f:0c:06:49:ec:2d:7a:ee:fb:9f:60:
05:cf:14:fb:60:99:10:87:88:37:39:dc:6a:50:ad:
e5:49:0d:1c:b8:e9:a9:b8:f5:40:b0:a9:c3:07:bb:
a2:18:6d:b3:52:d0:e4:ae:a7:47:62:08:a0:72:ed:
42:7c:c8:9c:86:71:e9:9a:a0:a8:72:c2:5d:e0:e8:
32:4d:18:87:83:47:9a:23:0e:be:bb:6a:1e:a9:97:
cd:78:64:41:6f:38:d5:ea:ac:df:cb:26:1f:20:5d:
4f:21:c1:f6:ef:84:12:ae:70:d1:81:61:5d:34:c7:
96:f2:1a:fb:60:0a:c6:e9:8d:59:e0:1b:ca:c7:9c:
70:b2:f1:88:2f:b6:70:0d:94:e2:06:6f:a4:e1:c5:
72:47:b3:f8:89:48:9c:e9:75:db:e0:bb:dd:41:69:
86:b2:31:76:12:51:0b:a6:84:54:1d:3c:56:88:c0:
9b:4a:15:a3:e7:99:1f:d5:55:68:63:0c:41:85:ec:
11:21:5e:a2:a3:8b:3b:31:6a:f6:f0:29:bd:d1:6c:
0e:1e:f9:db:6c:e8:8e:6a:e0:95:43:e0:67:37:d1:
ec:cf:1b:2f:b1:e9:0f:bf:8a:d6:41:07:21:d6:ec:
40:e9:ab:31:7c:d6:ad:47:a6:b7:b2:f4:5a:cd:3d:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:50:A8:4D:84:9A:2C:75:5C:58:63:F1:B7:A1:94:18:F2:75:64
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5e:d7:27:00:fc:b0:44:8d:8b:48:73:67:68:3c:3e:1f:b3:
ae:be:a2:40:25:5d:ce:6d:f2:17:04:29:3a:35:c7:71:41:cf:
6f:f2:ab:4e:92:d9:a6:a2:96:c6:bf:91:cf:4f:8d:ba:bc:55:
1c:c5:e6:4d:a9:98:2f:1c:4e:26:6c:4f:24:d4:b4:d4:f0:18:
ff:3b:05:5e:80:c5:e8:90:2c:12:6a:39:75:bd:b0:51:77:8b:
f2:08:61:9a:d9:23:60:cb:02:f8:0d:07:b4:82:a5:0d:8b:60:
e2:8e:3e:b5:b1:4c:33:c0:82:91:00:a5:e4:a6:1e:cd:c8:9a:
60:d7:84:78:35:33:0c:30:a1:eb:3d:7b:e2:cd:2f:1f:9f:5e:
ed:f0:2f:5c:87:ea:88:a5:51:80:55:c3:52:ca:87:3c:cc:59:
26:2c:74:32:25:e8:90:73:8f:21:5f:d6:9b:37:76:9e:df:43:
58:92:15:22:43:c7:17:d3:04:a2:e8:08:10:41:bf:52:b5:d7:
93:aa:7c:98:03:7c:f0:75:e1:69:c2:83:a4:28:79:7b:ef:39:
69:19:44:ac:f5:48:50:f8:96:e7:4a:94:c8:c1:47:b5:a0:01:
b1:0c:32:f3:a0:73:74:7b:5a:3d:1c:69:ee:fe:bf:59:8f:78:
4c:0d:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:39 2026 by rpki-client