Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: MnL4UXUFZ3TuQ/Y/EyETgdJCVAMEaMKs5fkA5G+7Q54=
Subject key identifier: CF:F1:B2:37:26:F3:C9:7D:D9:34:77:D0:26:C3:4E:DA:64:8A:B4:17
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 019FA82B0A3C59153FA732BAE146D2EDEC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0AA2
Signing time: Tue 28 Jul 2026 10:00:20 +0000
Manifest this update: Tue 28 Jul 2026 10:00:20 +0000
Manifest next update: Wed 29 Jul 2026 10:00:20 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: QBJSuuVtN+EI9jJ+ycCSocfQZzjzXewbjSl7VjO1tW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:0a:3c:59:15:3f:a7:32:ba:e1:46:d2:ed:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Jul 28 10:00:20 2026 GMT
Not After : Jul 29 10:00:20 2026 GMT
Subject: CN=cff1b23726f3c97dd93477d026c34eda648ab417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:69:b5:6d:1d:2d:0a:74:b3:60:14:3b:c0:
b9:56:9d:86:e9:30:33:b5:42:12:1c:ab:51:54:0d:
10:c1:53:b3:33:fb:ea:c3:8f:6a:84:eb:9e:5b:ac:
92:95:e7:9e:2d:9c:c7:d7:02:72:a0:d2:52:b0:a9:
c1:8a:d2:61:53:1b:4b:48:03:93:f2:87:e0:3b:bd:
93:9f:2f:a5:f7:1a:6b:6b:e3:d7:5e:54:58:6b:00:
9c:72:e7:c3:d6:e6:a9:b1:c0:1b:0e:e8:7b:fd:c7:
a6:2e:25:4d:83:6b:c7:50:d4:f0:55:12:a8:37:d6:
ab:bf:04:bb:64:24:be:8d:9a:23:24:2f:45:5a:cf:
9e:23:ab:cd:73:c8:1e:1f:a7:a7:7e:cc:93:fd:33:
c6:38:2e:53:5e:3e:d3:3c:a7:2d:d1:a2:6c:16:bc:
41:e7:92:e9:89:73:21:06:a0:49:23:33:06:35:e5:
8f:eb:b3:be:76:62:3f:d8:0a:40:e1:fa:3a:0a:ee:
4c:77:36:1d:2d:d7:91:76:85:3f:05:c2:27:d9:85:
5d:21:67:2a:e5:ce:be:27:f2:4d:4e:a1:26:33:2a:
ea:1d:4c:12:32:e8:75:26:7a:3b:9b:47:77:a5:78:
b6:24:e9:82:82:f5:36:86:7f:99:82:5b:f1:44:03:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:B2:37:26:F3:C9:7D:D9:34:77:D0:26:C3:4E:DA:64:8A:B4:17
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:de:24:55:21:08:00:7c:22:ee:1e:46:db:f5:ed:66:1f:01:
f4:05:5a:56:55:d4:4f:2e:f5:06:db:f4:8c:33:16:dd:0a:5b:
bb:69:da:ba:0e:13:86:34:3a:b0:9e:ab:e7:f3:70:cc:6b:ad:
86:49:d0:b1:ba:83:28:a6:0d:75:ed:0d:c0:13:46:ae:f6:83:
a3:ab:08:44:ea:eb:4c:19:77:34:e4:9b:37:d9:d9:67:4d:fb:
e3:5c:8d:f1:0e:48:a8:be:fd:dd:21:cb:69:d1:ff:5f:09:e9:
b3:63:d1:76:9e:76:7d:36:6c:0d:ec:8c:c6:dc:4e:38:1d:94:
b1:e3:16:f5:f8:dc:1d:ea:48:f4:07:5b:0c:60:72:0a:1b:3b:
aa:67:05:45:2a:2a:6b:01:7e:3b:59:3c:fd:95:34:a3:2e:10:
aa:62:22:9b:e3:45:c2:ad:fd:16:cc:30:ee:22:08:cf:8f:93:
df:8e:80:09:aa:86:be:d7:90:98:c7:46:fd:37:9f:28:e2:73:
f7:64:d6:7c:49:8e:bf:3b:9d:b7:82:d8:7f:38:76:58:1c:4c:
b5:56:0d:2e:92:f0:df:68:53:8d:95:42:09:79:6f:98:04:25:
91:3b:8d:9a:06:eb:89:fa:fe:e2:78:c5:b1:a6:53:cd:9a:cb:
f9:63:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:01:08 2026 by rpki-client