Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: GEBpafN8MXAoQE4JRSZjNf+3zkK4xFtCo3YzMyOX2oA=
Subject key identifier: 25:8E:A9:5E:08:7F:7D:C0:73:DB:02:E7:90:65:C1:53:08:31:D4:59
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 01A0D0EDC0E6B0485611BF2DE8C4AFB0AC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 04E5
Signing time: Thu 24 Sep 2026 01:00:37 +0000
Manifest this update: Thu 24 Sep 2026 01:00:37 +0000
Manifest next update: Fri 25 Sep 2026 01:00:37 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: rqOYnVoKldC78MkYPz/+vn/xVFJPq4PYUBpEzSN6Agg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:c0:e6:b0:48:56:11:bf:2d:e8:c4:af:b0:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Sep 24 01:00:37 2026 GMT
Not After : Sep 25 01:00:37 2026 GMT
Subject: CN=258ea95e087f7dc073db02e79065c1530831d459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:8d:88:fa:c9:ec:da:5b:8a:4a:7f:dd:c5:
e6:3e:6c:1b:e7:d9:59:e8:f3:3a:fe:30:4a:32:8a:
7b:bd:ce:72:d3:6c:9e:d0:2b:cb:7c:3e:21:57:1d:
eb:57:40:38:42:12:02:9a:62:29:91:fe:93:b8:74:
f2:07:94:cf:54:30:f8:dd:58:a6:20:ca:a9:e2:42:
ad:c2:5d:91:56:e9:90:0b:4f:d3:31:c7:a8:48:7d:
16:a3:2d:4c:66:ff:f1:31:12:0e:59:f4:df:cf:7c:
79:ea:e9:f0:ff:fa:bd:2f:d4:40:2a:34:85:4b:df:
01:98:b7:d0:54:95:3d:ca:50:5b:a4:6a:09:c1:57:
d6:84:e7:ac:23:50:35:19:1b:28:14:d3:9a:cb:55:
a9:44:f5:37:a8:5b:05:26:f6:46:c1:d6:d6:be:e1:
25:98:f3:0c:b1:94:7d:a9:f8:70:ee:31:26:19:6b:
f2:b8:a5:38:c5:a5:a1:ac:29:b0:33:4a:23:c8:23:
43:46:39:f1:fa:61:4f:f1:dc:2e:db:52:cc:16:e1:
2b:82:2e:f3:b7:5f:f8:e7:10:49:3a:d2:bb:40:aa:
ae:a2:01:11:50:37:3a:b0:ea:14:a6:18:1d:d3:b2:
c9:8e:a8:64:e6:02:e5:3b:cf:ff:3a:27:57:2b:88:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:A9:5E:08:7F:7D:C0:73:DB:02:E7:90:65:C1:53:08:31:D4:59
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7d:d1:5c:13:2d:d4:32:38:c2:78:21:c0:60:ff:8c:0d:50:
c7:de:c0:c2:57:70:95:66:06:96:ed:2a:ff:2a:f8:6c:01:57:
7a:e1:5e:9a:b9:34:e5:da:0c:57:c6:6a:26:bc:23:51:47:ac:
01:ed:1b:cd:77:f0:da:95:b2:5a:f8:21:a2:fb:e2:63:a5:45:
33:cb:1d:76:89:43:92:c7:24:41:8d:b8:e8:65:ae:2f:85:36:
84:22:10:db:9a:d4:74:8d:3e:af:8f:3b:6c:a5:32:ce:77:c3:
12:ba:e3:c1:f3:86:40:7d:ab:65:64:a2:a2:ef:bf:c8:b4:cf:
14:37:5e:3f:5f:32:6b:e9:c3:12:0f:06:c4:72:26:8e:3b:d1:
bb:2f:75:8e:0c:2f:c9:75:bb:6e:9c:94:d7:9e:50:11:09:67:
aa:41:25:39:c8:3e:96:47:24:cb:78:29:2a:c0:8f:50:04:f5:
77:15:6d:24:08:44:13:ff:fc:d5:cd:a0:49:96:0c:69:c0:ca:
c4:62:0d:c7:dd:63:bf:ec:c2:ed:b3:92:29:ee:61:67:24:7f:
53:80:49:2f:78:14:05:31:0e:da:85:f3:f8:92:69:ad:96:52:
d4:da:2d:91:f4:b4:ef:1e:96:97:26:1d:5b:aa:3a:cc:6b:83:
72:a6:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:12:28 2026 by rpki-client