Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: b4m26ZEjG9nXjCDkvuBKaWsd9giKTRNbMsH84C+XdAs=
Subject key identifier: 32:F4:60:94:03:A0:E7:41:B9:07:68:F8:5D:E8:0B:39:0A:E9:67:A5
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019FAB63BEE866C6FF4C03DE04421B2F1122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0625
Signing time: Wed 29 Jul 2026 01:01:08 +0000
Manifest this update: Wed 29 Jul 2026 01:01:08 +0000
Manifest next update: Thu 30 Jul 2026 01:01:08 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: kM9VQgwzaND8g6JJUdafmYnvThbVfSTqEDvQcBQRKBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:be:e8:66:c6:ff:4c:03:de:04:42:1b:2f:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Jul 29 01:01:08 2026 GMT
Not After : Jul 30 01:01:08 2026 GMT
Subject: CN=32f4609403a0e741b90768f85de80b390ae967a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:30:33:01:60:c2:32:40:70:b7:21:15:3b:87:
4a:87:58:90:fd:e6:f0:e1:80:99:93:fa:47:99:1e:
30:67:0b:50:91:ab:61:3e:cc:89:da:56:b1:41:d3:
58:9c:7d:b6:c0:36:45:a4:1c:2b:4d:0d:72:35:18:
6f:84:ba:08:6d:57:8e:76:5d:26:9c:81:ab:92:ac:
50:d1:cb:85:b2:b5:a5:06:32:30:69:e8:f0:0f:ed:
b3:4f:50:91:e4:ce:93:26:81:5e:e0:15:8b:09:f2:
63:d3:af:ec:7d:a9:ca:48:4e:49:75:78:b0:b6:a1:
8c:20:a7:d7:a7:70:de:2b:ec:c8:27:af:b2:6d:91:
24:38:35:2a:ad:60:eb:ac:86:49:b2:b6:d8:f0:c0:
19:27:f3:c9:ff:d3:50:f4:85:b2:31:4d:50:a5:69:
a3:c6:ac:10:00:2c:39:a8:0c:2f:28:5a:1b:d6:dd:
bc:ad:3b:e4:16:01:43:fa:1e:b8:b5:ae:fb:8e:bf:
6f:11:6f:56:5a:29:da:7c:0a:b0:49:fb:a7:84:33:
55:5b:e6:a9:38:38:e9:33:19:15:2e:32:95:00:e3:
d9:59:46:b0:e9:e4:6b:e1:29:f3:b3:bc:12:e5:c5:
49:69:fe:12:37:34:28:0b:3e:f0:99:9f:de:08:2f:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:60:94:03:A0:E7:41:B9:07:68:F8:5D:E8:0B:39:0A:E9:67:A5
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:50:24:71:ab:fb:87:34:e7:3c:9b:e0:4e:d9:a2:84:6e:
1f:bd:6d:cc:65:63:83:5e:8f:27:32:bc:ae:4b:02:57:38:30:
56:c6:30:0f:9a:d3:e9:44:41:76:69:5e:77:b5:ac:58:07:53:
37:48:10:13:8f:f9:ac:ba:70:06:f5:69:c8:93:8a:66:48:c3:
35:5d:e2:79:97:c3:d0:33:38:50:f5:2f:ef:79:3c:06:16:b5:
0d:24:59:ca:c6:5b:0e:1a:ff:8b:18:6c:bd:f7:62:06:6c:87:
20:7f:f4:8f:9c:69:18:6b:f0:5a:67:23:08:91:0d:ef:eb:dc:
e6:93:9e:02:53:28:a4:34:88:71:57:d9:41:78:1c:61:d7:eb:
e0:8b:b4:9e:c3:5b:ba:e4:90:64:23:99:e8:68:15:b0:08:7e:
c5:62:86:0e:64:b8:f2:ff:a0:cc:72:56:8b:b7:07:85:cf:78:
eb:b0:47:f5:51:55:fc:e7:a3:4c:11:3f:f9:96:e7:a0:f5:90:
e8:20:bd:84:d7:95:64:83:3d:a2:c2:68:95:8f:6b:49:32:c1:
60:da:bb:83:55:82:4a:b1:ef:3d:f1:9a:d0:f4:79:31:e9:e1:
5c:e8:31:db:60:29:b3:77:e5:6e:7b:1a:92:2d:38:b7:c2:ce:
b7:fd:f5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:02 2026 by rpki-client