Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: O49q0v60Vg9kbeEeQWBxEr5/gcDPG8juy9vtrzbhsS0=
Subject key identifier: 24:5A:DE:BB:11:DD:3E:29:00:50:B7:9D:46:C5:F2:D1:83:17:26:98
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019F9624D73BD6CEFB7A56177189F5121501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0BF2
Signing time: Fri 24 Jul 2026 22:00:24 +0000
Manifest this update: Fri 24 Jul 2026 22:00:24 +0000
Manifest next update: Sat 25 Jul 2026 22:00:24 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: VBUgmjJyMx4dH92wMZZ1OCIr1thbIAo1nLeAZHJ/pls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:d7:3b:d6:ce:fb:7a:56:17:71:89:f5:12:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Jul 24 22:00:24 2026 GMT
Not After : Jul 25 22:00:24 2026 GMT
Subject: CN=245adebb11dd3e290050b79d46c5f2d183172698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:0d:f7:31:08:55:3f:a7:54:a5:56:df:ec:
b3:59:ba:48:21:9c:e3:c7:0e:0b:78:c9:c1:08:9b:
4c:22:d4:c5:41:8d:df:00:68:94:70:e6:c5:97:78:
13:c3:70:15:d4:4a:d1:0c:9d:94:af:ab:e1:9c:ae:
7c:47:a8:45:8b:63:bb:7c:2d:92:58:8b:cb:27:ac:
7c:9f:63:ec:ce:e9:b3:8b:2b:27:bb:28:39:b2:6e:
18:2a:a6:d8:99:71:7c:bf:1b:e9:88:52:73:71:f5:
dc:0f:f4:98:09:fc:35:24:71:55:82:c7:38:3f:01:
af:bb:0b:a4:cb:cf:fa:0a:67:89:72:fd:ce:2d:07:
42:e5:d0:ec:ac:92:d6:87:e9:77:73:ca:c2:31:7a:
6d:a1:26:ce:c2:e2:03:a9:4b:b1:dd:41:ec:6e:1f:
77:64:b2:b0:89:ba:78:e9:0f:7f:b0:cc:6b:aa:c4:
6d:a7:e6:c8:2b:60:9a:14:89:67:04:ed:91:e8:dc:
5d:cc:18:c5:c6:f9:d0:4b:2c:2c:d3:96:07:66:d2:
5e:44:06:dd:29:df:39:c3:6f:a0:0d:e5:71:95:32:
98:0a:94:73:66:77:37:b5:b6:32:57:35:f9:27:02:
ab:0e:99:0a:f3:2a:c6:18:1f:ac:40:30:5d:35:5a:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5A:DE:BB:11:DD:3E:29:00:50:B7:9D:46:C5:F2:D1:83:17:26:98
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4b:e6:eb:56:0e:2a:ef:6e:6d:f3:d5:19:39:b6:9d:ea:c8:
d6:71:7a:2c:aa:03:48:16:67:09:44:bd:c6:42:c6:70:4c:24:
79:86:39:4d:eb:7e:07:78:f5:67:98:41:e5:ad:37:1d:2e:48:
13:9e:5f:59:8d:04:f5:76:a4:59:13:b6:7e:e9:0c:4d:96:2b:
8c:60:9a:d1:a2:9a:6e:47:3c:c7:1a:bd:23:1d:40:e5:9f:1e:
e3:1b:03:ba:65:7c:a9:72:73:66:ea:7b:8b:4b:ab:55:15:7b:
b9:7f:eb:85:37:54:67:0a:b3:8d:1f:37:74:b2:83:3d:24:f2:
97:1f:ac:8b:7a:dd:b2:97:ea:50:cb:8d:55:a2:1a:bc:8b:44:
a4:59:dc:09:90:24:16:4b:c0:80:ee:f5:7d:6c:df:05:d5:1a:
a5:e0:be:5c:30:a4:13:52:24:13:63:98:45:8b:90:47:d9:a9:
ef:bc:fb:08:44:8d:e1:48:03:16:0f:a3:4f:2b:42:10:83:e8:
38:0a:99:b3:7e:12:d0:0c:68:0e:87:20:68:c1:e4:55:06:58:
3e:fd:74:f0:6b:68:ea:52:f1:9a:77:ee:52:95:b0:da:7b:3c:
82:0b:82:17:cd:5d:fa:41:8f:51:30:72:3e:85:42:17:03:bf:
84:43:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:21:01 2026 by rpki-client