Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: wfWf+BCLhWjg0uT09glT5gMXvLr/05O0KQ/NBxSAB4A=
Subject key identifier: 4C:A1:AF:34:60:09:8C:4B:B1:FA:47:C0:61:82:17:01:21:5C:A7:A1
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019F93FFBB5014E1DC750D20BBFBA303090F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0FCC
Signing time: Fri 24 Jul 2026 12:00:38 +0000
Manifest this update: Fri 24 Jul 2026 12:00:38 +0000
Manifest next update: Sat 25 Jul 2026 12:00:38 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: s6FmQhSDfiiLD1k+y1mHLMsBQevZod01ApaqfWdDpxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:bb:50:14:e1:dc:75:0d:20:bb:fb:a3:03:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Jul 24 12:00:38 2026 GMT
Not After : Jul 25 12:00:38 2026 GMT
Subject: CN=4ca1af3460098c4bb1fa47c061821701215ca7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:d4:be:64:e3:e8:79:e5:4b:de:69:50:a9:
77:e8:18:d3:c5:d9:6e:3b:4c:b6:d6:ca:48:f9:7d:
5f:5c:69:4d:d8:14:51:d6:11:ed:c8:fa:1d:ce:12:
81:27:2e:e1:f0:7e:84:2e:e0:e3:f6:9a:9d:93:4d:
c2:e8:f7:5d:d2:b1:c5:4b:d8:29:1e:fd:d9:25:05:
f0:32:d7:2c:e4:3b:74:91:f5:d1:90:f1:4d:0d:45:
35:6b:84:b5:5f:7e:b3:b0:83:43:a8:86:32:75:7e:
07:6e:be:8d:82:7f:66:a7:31:75:4d:5b:1c:80:6a:
d0:16:b7:45:52:ab:13:9b:ff:5d:13:9f:7d:ea:2a:
f3:15:2c:1b:ae:b9:d2:5a:e3:5a:e4:e5:28:73:df:
1c:ad:0e:8e:a3:22:fe:44:e7:a8:f1:65:8f:a3:c9:
88:de:f3:63:92:de:1e:12:e8:5b:0c:61:22:08:94:
49:e9:a5:12:42:29:ab:02:dd:93:51:08:93:f5:22:
2b:87:80:65:cb:ff:19:d9:9a:f7:bd:00:7b:c8:d4:
27:36:6e:81:b8:37:00:d1:fd:72:3d:df:29:e2:65:
1c:c1:be:ad:da:fa:5f:e5:3d:30:f9:b3:db:4a:e6:
04:2f:7a:58:5d:ad:ae:6f:35:04:57:b8:44:75:3c:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A1:AF:34:60:09:8C:4B:B1:FA:47:C0:61:82:17:01:21:5C:A7:A1
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:84:78:98:14:6d:e5:d9:bc:0e:6d:81:a5:be:38:c3:97:ee:
7d:cc:92:88:77:05:2a:da:50:9b:11:95:41:fd:91:b3:be:15:
b8:f1:d0:1a:28:c4:67:2e:41:41:f0:51:55:38:98:8d:e7:90:
06:97:52:6a:25:28:6c:81:d5:d7:ae:e2:c9:7a:60:80:2c:9a:
31:dd:4e:a6:fc:d6:7e:3d:92:60:05:47:1e:7c:30:90:13:c0:
1b:08:13:7d:92:3e:d9:57:a2:f4:61:28:50:ba:e8:6d:21:52:
90:fd:9f:16:a5:8e:d1:9a:10:48:9a:2e:37:d0:97:ff:68:a1:
df:82:4c:4f:da:c2:f5:c6:03:f9:42:7e:91:b6:28:55:e6:50:
a4:ff:fc:da:2a:1b:0c:c9:02:b7:09:86:1e:14:41:7a:d9:b4:
cf:05:b5:29:f0:03:77:87:80:23:db:3c:66:fc:71:af:b4:a0:
25:d8:47:10:5e:f1:1d:ed:f5:5a:8c:24:0b:ff:1d:0f:1b:26:
73:25:5c:f6:ca:5c:09:5b:94:ee:a5:00:9c:00:24:21:48:d7:
14:8c:20:1c:16:2f:bd:6a:42:79:fa:48:56:e5:c9:b9:4d:b5:
88:f0:d4:84:1d:68:fb:1d:64:59:32:e1:a5:9d:a1:ea:86:fc:
f0:a7:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:15 2026 by rpki-client