Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: u7X8cJchDSZXU8PG2oqtXUT0W4nUp0daLclJuU9gg/4=
Subject key identifier: A6:76:3F:67:BC:9C:21:75:ED:48:F9:94:8D:0F:59:1A:AE:98:79:28
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 019D9AE3AA24427123D151E7C29298B5E2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 02CC
Signing time: Fri 17 Apr 2026 10:01:44 +0000
Manifest this update: Fri 17 Apr 2026 10:01:44 +0000
Manifest next update: Sat 18 Apr 2026 10:01:44 +0000
Files and hashes: 1: 0s8tL0Q1QILcjqJD45JZQbwKg78.roa (hash: 6+vXx/14vnk9op/uvmqp2IT+hITOVzEp+mNjBhNt+UY=)
2: iGHuti3bfXeKLlRe4RyqUp48_pM.roa (hash: rz/wputcXDXSuVHOQWYYAZZAeIzA3BtffeOIuAvh3AM=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: tjQhK1LwamwBYImbyro221h7i8GbhwI5lBHheFOW3r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:aa:24:42:71:23:d1:51:e7:c2:92:98:b5:e2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Apr 17 10:01:44 2026 GMT
Not After : Apr 18 10:01:44 2026 GMT
Subject: CN=a6763f67bc9c2175ed48f9948d0f591aae987928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:e2:96:c1:3e:66:af:3f:14:0f:1a:38:a3:
98:19:ed:87:9f:8c:d8:a5:d4:8f:d3:7c:5e:12:4e:
7e:7b:2c:83:84:a6:43:7e:d9:67:ef:a4:e8:2a:05:
11:bd:78:87:db:42:0f:15:8f:bf:9f:b2:dc:17:de:
21:36:44:f7:d7:51:f1:86:3e:3a:69:68:ae:44:70:
50:13:4f:62:da:81:73:1a:20:59:eb:3d:c7:88:24:
68:8f:f1:a7:f2:3d:fd:66:79:14:10:b2:38:91:35:
ed:4a:0b:d5:33:ac:56:85:85:91:8b:03:11:32:28:
9d:6a:e4:68:33:ef:5b:75:f1:c9:1c:a3:76:53:e0:
a4:32:dd:f5:84:d9:45:ec:b0:1e:73:0e:74:c2:3a:
87:81:5b:92:12:a7:93:ef:f6:b9:22:4b:06:23:c4:
cd:41:5f:e5:0e:20:4b:28:c3:45:71:e7:06:84:d2:
89:82:44:d7:d0:da:92:d9:eb:54:9d:2a:21:55:08:
3d:96:8b:45:ac:9b:26:08:f0:fd:37:bc:84:b1:34:
48:ca:98:f2:6d:61:c3:28:3d:d0:9b:9d:32:6c:a9:
2a:46:66:ce:86:9c:69:b1:65:fc:72:f5:2b:33:f6:
2d:aa:57:69:13:af:ab:b2:94:17:03:57:ee:8a:95:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:3F:67:BC:9C:21:75:ED:48:F9:94:8D:0F:59:1A:AE:98:79:28
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:07:d1:2a:e0:40:39:22:01:19:75:c1:64:83:c1:2e:a1:f9:
c2:cb:46:ff:3d:04:3c:de:9c:6d:48:8c:e5:54:00:21:b2:a2:
9b:f9:82:2c:68:d8:01:41:a9:75:7a:49:26:75:ae:b5:6a:11:
52:66:48:4e:33:26:70:1c:ea:50:0c:b7:35:fc:6d:5a:e0:4b:
30:44:12:5d:b4:11:95:0c:b0:63:da:30:49:70:5e:65:56:7d:
d2:16:62:00:40:7a:3d:5b:14:0c:95:bf:ee:8e:e7:4d:93:ea:
a7:4e:66:22:7d:32:6e:19:b3:e6:4f:c3:87:55:62:db:8a:91:
9a:29:5c:32:b8:94:60:dc:8d:f9:55:ac:a7:a2:32:8d:4f:a7:
96:90:5f:a2:bc:1f:85:fe:cc:06:76:5d:ef:7b:d6:d5:14:9c:
87:f8:79:9f:c9:2d:96:ef:a1:2a:0f:22:09:77:b0:25:7e:22:
1c:f7:96:5f:ba:aa:fa:0c:07:cf:04:77:ed:e9:58:0c:da:65:
cb:5f:09:42:24:c7:4d:41:65:12:3a:21:48:56:a5:f9:43:26:
20:37:83:c0:54:87:a6:c0:89:4c:80:13:4a:fe:7b:3b:5a:63:
e6:3f:5f:91:04:59:2b:52:64:54:e7:36:b6:45:b5:ff:a1:71:
0e:2b:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:15 2026 by rpki-client