Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: amxEhceQ/qvB5kiGnii42mqw+NQLUMidI/egT5pjCYo=
Subject key identifier: 75:26:26:EA:F4:6B:16:9A:9B:8E:29:83:C2:4D:03:75:4A:DF:21:30
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 01A0C5FC97E673E48FFBCC38C7165BADBE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 0470
Signing time: Mon 21 Sep 2026 22:01:00 +0000
Manifest this update: Mon 21 Sep 2026 22:01:00 +0000
Manifest next update: Tue 22 Sep 2026 22:01:00 +0000
Files and hashes: 1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: VCTf6PQpsiP9ufLfjdu+/5sQv9iIAADGWDSnNFJScm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:97:e6:73:e4:8f:fb:cc:38:c7:16:5b:ad:be:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Sep 21 22:01:00 2026 GMT
Not After : Sep 22 22:01:00 2026 GMT
Subject: CN=752626eaf46b169a9b8e2983c24d03754adf2130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:06:6d:6f:8c:62:23:04:82:a7:35:cc:a9:
a3:35:0e:0a:88:8a:1b:56:9d:19:0d:50:0a:40:14:
6a:63:42:86:99:d3:22:9c:bf:28:9b:5c:d9:ea:38:
4a:e5:c3:55:3f:39:ef:ad:f6:0e:9d:91:8f:0c:c6:
e0:d0:65:e3:77:2c:b0:6e:89:d3:8d:53:66:59:10:
9d:91:8a:7d:35:a9:52:f7:84:3b:33:69:bf:b9:40:
28:79:0d:f5:b4:25:d1:56:e8:fe:be:ca:bf:59:cd:
e2:08:42:92:e6:22:e1:6c:43:e1:c3:03:9d:18:5e:
7e:0e:2d:26:22:8a:b7:0c:75:52:a5:5a:da:38:80:
d2:84:f2:d1:2f:70:aa:9e:f3:57:97:95:f0:1c:b5:
35:2d:12:8d:b0:8c:ea:a8:bb:36:71:bd:6d:47:3d:
af:be:83:79:7f:d4:de:d1:d4:f8:67:bd:1f:51:0e:
a1:c4:8f:ec:06:ed:fc:ef:7e:73:8d:86:36:f7:a0:
56:af:06:80:9b:f5:e7:0d:7f:5e:fb:bc:9a:d5:5b:
b5:79:65:0f:4f:2d:95:45:36:e8:2a:15:97:1e:c9:
87:0c:4c:06:0e:54:e0:03:9e:78:ed:a3:a2:43:1e:
c8:9e:33:96:1b:2d:e4:48:b8:eb:5b:90:09:81:29:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:26:EA:F4:6B:16:9A:9B:8E:29:83:C2:4D:03:75:4A:DF:21:30
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:4c:71:84:52:96:8a:77:99:d8:44:83:b4:8c:40:21:8e:
0c:cf:e6:43:51:e7:85:0d:16:f4:0e:30:3d:b9:f6:22:15:38:
77:b8:ff:ad:41:96:2e:16:43:18:82:4e:89:22:0e:62:87:33:
9c:44:2a:63:f8:4f:30:05:dc:d7:7a:6d:fa:c1:5e:37:80:0c:
4d:c7:4b:09:47:7e:ea:38:cb:17:f3:78:28:c0:69:8f:ca:7f:
64:4a:8e:11:a3:99:f7:64:27:b2:ba:41:16:40:80:77:d0:c4:
6c:ee:ca:8c:59:b8:be:77:db:2a:51:2a:34:57:aa:09:77:e5:
b7:8c:f8:c6:44:c9:df:09:59:59:72:85:a2:07:48:ed:cd:fe:
df:db:23:5d:55:7b:18:68:4f:2f:90:b6:b3:a2:76:2f:58:c1:
3f:7f:e8:0b:a8:03:ca:2a:a0:42:06:49:0f:bf:3b:3e:91:33:
79:b1:ba:d3:72:bf:8e:cb:de:f2:81:ef:66:9f:c2:08:0d:87:
04:4f:58:d8:06:8c:ca:84:60:44:3a:46:21:99:ed:95:db:05:
62:f4:8f:f1:81:04:45:53:23:a8:dd:ca:be:b1:0a:8b:4a:e2:
90:e1:19:39:89:e2:32:48:2f:cd:78:f6:57:1b:c0:dd:8e:e5:
d8:a5:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:25:43 2026 by rpki-client