Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: LFTRDMs4KmdjTNvC/TOeC2Ppz1QLONaZDmVXAFqu1qU=
Subject key identifier: F1:BC:4C:4A:BE:20:D6:CD:C5:F3:FD:31:74:54:7D:25:88:AC:EF:81
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019F9436F266D22D564DBD16D125A333A87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 13:00:56 +0000
Manifest this update: Fri 24 Jul 2026 13:00:56 +0000
Manifest next update: Sat 25 Jul 2026 13:00:56 +0000
Files and hashes: 1: 0NoujwxR-gj9DnZ6yWroTaY4BNw.roa (hash: pJh/0/tjP05OBOF+hUzHImQH+O5L4YnwDljx7qItoxI=)
2: bVD0wlXUqnDXzNJOVy7YvwW-69M.roa (hash: mFyohkhL04KDc0aaqxQDLn9ojDVTdbqAMX+DlpRjsEs=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: B6bHkDSPSrSbIKOTetBf7KWzkc5RaJFDH/xBhYu+PH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f2:66:d2:2d:56:4d:bd:16:d1:25:a3:33:a8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jul 24 13:00:56 2026 GMT
Not After : Jul 25 13:00:56 2026 GMT
Subject: CN=f1bc4c4abe20d6cdc5f3fd3174547d2588acef81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:71:91:bb:bc:ef:f0:6e:46:27:1b:27:05:
7d:04:42:fb:31:7c:b3:8e:83:44:22:71:4e:45:54:
fe:16:23:db:8d:01:de:99:4b:af:a1:82:9a:a1:58:
70:9e:53:b4:fa:aa:63:5e:a4:8f:32:7d:39:b2:64:
89:b2:0e:21:82:6d:c7:c5:3a:72:f4:5c:e2:38:3d:
5a:8d:96:d8:a5:e3:34:49:95:2c:e0:17:41:b9:72:
e6:d9:43:c4:b0:c4:06:14:95:56:81:96:e7:c9:59:
a7:20:55:e9:f0:bc:83:6b:90:85:dd:ca:8d:ad:0c:
01:a4:2d:ae:5c:12:30:68:f3:c6:a7:eb:e2:15:40:
40:fb:a6:28:74:7f:5e:c7:30:f9:12:57:f5:3b:52:
83:df:f3:d9:d3:e0:e7:97:e7:bf:57:4d:89:58:b0:
e7:20:24:a8:85:fa:02:c4:90:8f:06:8b:96:39:ee:
87:e4:03:a0:95:15:bb:c8:e0:a6:4c:7e:be:3f:95:
b3:9f:81:7b:82:6b:c1:5b:97:65:09:8d:b1:cd:6f:
f4:18:d8:6f:4e:31:56:87:39:b4:3f:eb:9d:9a:24:
24:9f:32:c3:b9:c9:88:51:65:6a:58:0e:ac:95:c6:
e0:ee:1a:ac:6c:66:31:1b:63:53:be:6f:94:02:a5:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:4C:4A:BE:20:D6:CD:C5:F3:FD:31:74:54:7D:25:88:AC:EF:81
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d9:a9:61:83:d4:7e:09:c6:40:33:15:db:f3:d1:eb:6e:c5:
45:78:23:44:ba:19:b9:ea:b4:3a:cf:7e:37:58:d3:e9:a6:5c:
57:cd:72:57:f3:fe:1e:cd:c6:17:32:8f:81:a7:2f:a2:b0:f6:
3a:03:bd:15:24:2e:c0:39:f5:af:11:3e:3b:6c:ec:d8:9a:e3:
8a:8c:1a:f0:e9:44:52:fc:92:b1:74:1a:bc:5e:13:96:33:c5:
79:34:39:56:61:da:17:05:f0:89:97:5b:bf:d6:6c:46:4f:54:
0c:be:48:2f:c8:30:60:df:df:a7:d3:0e:64:7d:45:26:2f:4a:
e1:14:7a:ee:0f:e4:94:0d:3e:9f:ac:ea:5f:c7:f9:75:00:df:
34:bd:4f:2b:b0:b3:cc:e1:9f:f6:fc:a4:4b:d8:29:f4:fb:61:
56:bc:56:93:71:ac:14:68:74:39:4c:1a:21:0c:57:34:da:14:
5c:21:69:42:44:92:19:fe:00:66:83:f5:77:2f:0b:cd:47:b4:
c4:ac:35:69:ce:99:25:fc:3c:76:1f:99:17:f9:89:52:4d:90:
e7:d9:4a:31:9d:f1:d6:2e:2a:1c:11:9b:b8:08:b6:44:3a:c3:
71:50:d7:7b:6c:77:95:21:41:17:e2:e1:cf:cc:9e:1a:61:e6:
62:33:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:37 2026 by rpki-client