Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: ZryVX8kyOjzYXjj4dc6BfLscJ4X9du9eKaiv+wcyj1A=
Subject key identifier: 4A:44:FD:4D:B1:35:0D:DE:CA:8C:DA:03:DE:9B:AE:AD:7C:52:3F:6F
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 01A0C5579D1A89BFBBE544BC9B34742F8960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 06B7
Signing time: Mon 21 Sep 2026 19:00:48 +0000
Manifest this update: Mon 21 Sep 2026 19:00:48 +0000
Manifest next update: Tue 22 Sep 2026 19:00:48 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: LXtShs3i4rTdC08fzkIAVdGRA58wFT5covEaUojMjFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:9d:1a:89:bf:bb:e5:44:bc:9b:34:74:2f:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Sep 21 19:00:48 2026 GMT
Not After : Sep 22 19:00:48 2026 GMT
Subject: CN=4a44fd4db1350ddeca8cda03de9baead7c523f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:aa:a9:6b:9c:c1:fc:5f:8e:22:fb:07:e1:
0f:56:a6:40:28:ff:c9:bf:db:96:73:9b:67:9e:a6:
9c:68:be:58:fe:57:7b:04:3a:a5:a1:6d:3d:a9:86:
44:31:ce:fd:24:6a:d7:31:32:55:26:6e:cd:2d:29:
9d:64:1e:9a:0d:67:24:ad:28:f1:12:a3:8e:20:60:
79:90:35:49:0f:5d:e7:59:9c:83:ae:54:75:cd:06:
d9:76:77:94:ee:1a:52:e8:5c:b4:48:fe:c5:56:38:
db:51:90:69:cc:26:1c:b1:27:f0:0c:96:79:47:ad:
53:31:f8:51:65:e9:84:1d:15:b2:f0:4d:d7:a0:be:
86:bb:4f:ab:07:fd:e5:0a:66:12:c5:59:60:2c:d7:
0c:ab:e3:b4:c0:7d:e0:13:81:63:03:f6:74:fe:21:
fa:fd:0a:c0:fe:81:14:d6:e9:46:e2:a7:57:e5:cc:
fc:89:75:a5:2e:ef:20:ea:c6:24:d2:55:f9:89:93:
12:23:00:68:2c:83:d8:b4:59:97:59:08:35:e3:13:
4f:04:25:da:76:d7:38:09:f1:f2:05:a1:8f:82:ad:
30:5a:8a:ed:fc:7f:fd:29:6a:5a:51:2b:a9:44:c7:
a7:4e:51:b5:3c:ed:86:14:31:6a:ae:a1:2d:7d:22:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:FD:4D:B1:35:0D:DE:CA:8C:DA:03:DE:9B:AE:AD:7C:52:3F:6F
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b8:23:e3:10:3a:6e:c1:c3:4d:7f:d6:bc:e6:4c:71:06:68:
92:30:17:cf:fa:f3:26:81:d2:93:fa:04:9f:bd:37:5e:0c:de:
59:66:7d:f3:44:ec:83:da:8d:83:75:92:9d:99:eb:95:5c:d5:
8b:4b:90:7a:c7:a4:db:cb:0f:07:17:ce:a2:3c:4b:c4:b1:c1:
6e:19:d2:b0:a1:3c:06:82:1b:e5:b3:46:51:c1:44:dd:a4:14:
76:f0:7d:18:e9:85:b2:6d:02:22:59:32:32:64:f4:57:4c:93:
10:45:f2:5f:63:fe:8e:f9:73:c2:3a:3f:79:8e:3d:81:fb:c0:
78:d0:0d:e7:84:58:d2:b7:f4:75:96:53:8d:7c:1b:ba:49:f2:
c0:7b:b8:ec:5a:e9:aa:95:00:5d:4a:75:ae:c6:60:36:b0:9a:
1c:dd:a8:ca:d8:f3:65:da:4d:d2:4a:a9:5c:a2:5a:82:d1:37:
79:55:1c:22:c9:0b:19:d6:5a:d9:a8:db:47:f9:b1:04:c4:7a:
87:fe:1f:6e:04:ff:a7:95:ac:66:ab:9c:11:6f:0b:06:54:d5:
db:4f:56:4c:2f:1b:31:10:f7:80:43:f7:e4:e5:98:3d:3f:1b:
07:03:b2:30:14:5b:8a:a9:e2:fb:ff:d4:7e:46:a5:4c:63:8a:
b7:aa:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:56:59 2026 by rpki-client