
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier: i0t04Wj8OdgcBSX7lAS75kWnoVOsKQHZLXIoMSadbOE=
Subject key identifier: 0F:26:62:12:65:32:69:56:B4:61:A1:3B:8D:BE:59:04:C4:3F:63:D3
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 01A0D04898C3F385C3E5DBAE56C92CA4ECED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number: 0CE4
Signing time: Wed 23 Sep 2026 22:00:13 +0000
Manifest this update: Wed 23 Sep 2026 22:00:13 +0000
Manifest next update: Thu 24 Sep 2026 22:00:13 +0000
Files and hashes: 1: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (hash: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w=)
2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: 09bJGChP+JrhsBM4yiITtCj8c0Vhy23TVzXCNI1K7PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:98:c3:f3:85:c3:e5:db:ae:56:c9:2c:a4:ec:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Sep 23 22:00:13 2026 GMT
Not After : Sep 24 22:00:13 2026 GMT
Subject: CN=0f26621265326956b461a13b8dbe5904c43f63d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:54:48:19:fd:21:eb:dd:45:08:85:92:96:
24:74:b3:a9:49:36:11:63:25:07:a1:2b:09:58:4a:
a3:f0:3e:17:98:c9:ea:a1:57:50:cf:88:13:93:80:
e0:9f:e6:14:99:c2:84:5e:b9:c1:24:9b:b5:72:a6:
e4:c6:ca:41:c4:b0:cc:ee:d9:76:5e:60:b3:21:0a:
6f:9f:c8:2b:f0:86:2c:0f:64:75:d8:c3:f7:6c:e8:
44:13:dc:45:91:a5:db:bf:f8:6b:ba:67:ea:5f:8a:
80:f9:78:8b:24:95:c5:0d:fe:80:7b:8f:26:35:4a:
b1:37:1c:17:24:c6:9f:86:99:63:96:42:6e:55:44:
7e:e8:a6:cb:1c:bc:e3:54:23:d0:a5:6f:4f:82:0f:
02:ba:43:b1:1e:b2:ac:6a:d6:20:d4:c3:28:96:39:
38:7a:f8:91:fe:0c:7b:48:14:e9:7d:61:78:1a:01:
b0:08:df:47:be:7e:c5:cf:2c:a3:b5:af:1d:0b:0b:
9c:90:e2:e9:f1:14:cc:79:a4:2f:f1:3a:bc:20:b6:
cd:4a:d7:69:38:fc:5f:5b:9c:1a:04:49:d1:69:aa:
22:03:f6:65:0f:7e:b7:d0:f5:76:3a:67:33:d4:a0:
14:82:56:b0:9f:47:44:ff:aa:02:c7:17:53:e2:e1:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:62:12:65:32:69:56:B4:61:A1:3B:8D:BE:59:04:C4:3F:63:D3
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:5c:eb:4c:4b:63:06:c7:e1:2a:c5:58:e7:56:4c:8d:6b:
7b:43:9d:33:66:b4:34:77:62:5b:da:3b:b7:50:88:96:2c:bf:
28:6c:1b:c0:a1:30:53:4c:7f:14:9b:d0:ed:62:4b:04:69:b9:
2e:1f:b8:dc:45:fc:4b:76:e7:c4:92:84:dc:fb:44:05:fa:40:
49:ae:a9:d6:11:72:29:2f:ad:f6:f6:1c:ff:5e:81:b7:21:79:
ab:c4:92:2c:61:71:60:9e:e8:00:1e:3c:fb:10:7f:6d:f8:8c:
cf:f3:02:2f:c3:75:fd:37:4e:35:b4:5b:77:f5:87:6b:b3:a5:
34:c5:42:0f:30:01:0c:e5:16:4a:a8:79:cc:97:60:72:8e:55:
b1:30:e7:27:72:be:82:80:79:47:97:2c:a5:43:e0:b3:69:ad:
6b:d6:90:cb:67:b4:9b:3e:ec:77:40:f5:9f:43:8a:70:9d:27:
28:fd:cf:ec:dc:54:d0:6e:23:25:e8:56:4e:a5:ad:6a:a4:51:
be:b4:f6:c0:e3:55:eb:af:b1:45:1e:a3:11:ff:40:70:fa:e3:
d8:79:1c:22:00:f1:f4:12:ae:26:ab:c9:15:a0:2d:a7:37:b8:
c9:c3:2d:ae:36:e6:d9:cf:62:8b:dc:bd:af:c9:dd:11:03:73:
a6:1d:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:04:17 2026 by rpki-client