Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: 2EIhuGOES8Kw02/Ct9Eeya0wdNdWVxttuAJFP9dmGug=
Subject key identifier: 28:D0:93:B3:FC:26:82:76:D8:D8:A7:87:E5:CF:8E:98:65:62:D9:A6
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019F9248459311005824778785A80445F8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 0440
Signing time: Fri 24 Jul 2026 04:00:37 +0000
Manifest this update: Fri 24 Jul 2026 04:00:37 +0000
Manifest next update: Sat 25 Jul 2026 04:00:37 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: 6AvpJSzwXyuJhmV/96vURLI3HlxR2sl5P7xb2xE6cJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:45:93:11:00:58:24:77:87:85:a8:04:45:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Jul 24 04:00:37 2026 GMT
Not After : Jul 25 04:00:37 2026 GMT
Subject: CN=28d093b3fc268276d8d8a787e5cf8e986562d9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:dc:a9:f3:95:1f:45:ad:5b:f5:ff:f8:f1:
85:86:9f:0a:c9:b5:94:2d:ae:60:c4:01:11:54:59:
71:dd:cc:9b:33:e8:d7:df:50:90:8f:47:8e:bc:ee:
41:56:06:8c:d2:9b:62:01:68:a0:77:dd:e2:be:ab:
dd:60:c4:34:ee:2f:f3:c8:ea:65:8a:77:ef:84:fe:
ec:90:57:98:51:ab:b4:58:19:f7:c0:10:ec:63:88:
81:31:b4:75:26:84:ab:a7:17:7a:50:28:b5:b2:3f:
62:c4:10:ab:f2:c0:3e:01:5d:ba:0b:99:05:d5:19:
ed:36:a2:95:8e:01:dc:6b:2f:1d:0b:8c:9d:ba:9b:
88:95:91:fc:60:8a:90:02:d7:bf:4a:72:49:a4:28:
46:f1:fb:9a:49:96:34:07:1e:f1:fe:f0:b2:9c:ad:
3b:e9:93:a2:7c:90:59:d5:ab:69:33:b9:09:09:ba:
05:92:28:17:92:56:2c:c3:db:bc:f9:a7:0f:39:8d:
b6:51:c2:b0:1c:cb:b3:eb:10:41:c0:24:6b:e0:9d:
92:30:e5:71:60:ff:f5:75:90:ac:af:6e:25:a8:c8:
31:a5:ab:83:81:c3:e4:4c:77:1d:1d:9a:42:11:bf:
e0:46:e2:57:d0:c8:2f:b2:f6:50:b9:a2:43:13:36:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D0:93:B3:FC:26:82:76:D8:D8:A7:87:E5:CF:8E:98:65:62:D9:A6
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:66:ca:13:45:2d:34:d4:b3:a9:99:dd:37:65:23:67:71:d7:
a5:a2:c9:d1:ea:ec:18:cb:8d:31:b0:db:1e:89:0e:63:56:1d:
48:51:0b:65:c5:ba:6d:c7:51:ce:6a:bb:c6:c5:f5:dd:71:11:
87:c3:29:4e:9f:16:7a:23:74:5e:aa:93:55:84:9d:1c:94:9e:
86:9f:30:ac:b9:54:a4:f2:8e:6a:63:eb:e6:c9:ca:47:26:8f:
b7:05:f9:2e:04:40:fa:69:06:7c:c8:67:21:49:d2:2c:f7:61:
ad:dd:ce:59:21:65:f4:d0:15:54:9a:66:70:73:d5:81:28:71:
e0:92:d8:6e:d3:42:f3:7c:9b:60:96:b0:ee:80:98:36:b5:6d:
44:d6:6f:ed:e6:3f:0a:6f:52:87:27:46:f9:ef:11:15:79:b6:
6f:01:08:47:cc:cf:59:d4:87:ee:69:3d:55:ac:47:fc:25:ad:
68:a9:b4:67:39:35:87:ad:82:7c:70:4c:0e:be:23:e5:c6:d9:
ba:61:fd:18:bc:cc:52:39:c3:44:61:83:25:59:eb:64:b4:41:
88:4d:17:13:af:fe:7b:d2:d6:45:11:a3:18:38:05:cc:d5:4f:
28:84:59:24:63:ab:2a:94:c5:e7:96:63:2b:d8:11:81:da:bb:
81:02:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:04 2026 by rpki-client