Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: JrOZhOKz/dYdLrKpyykioeynzYguwLlP3NycFuIOBOM=
Subject key identifier: 3C:8F:48:60:F2:73:A2:E5:1D:15:EA:9F:1F:8E:64:6B:12:AF:F4:8B
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 019F93C8BB3EA795808A179DACF16F3C905E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 11:00:33 +0000
Manifest this update: Fri 24 Jul 2026 11:00:33 +0000
Manifest next update: Sat 25 Jul 2026 11:00:33 +0000
Files and hashes: 1: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: egiVmGGyCoT/Bls4XPMPtpGTOZn7aPOoCHJI0fl/IqA=)
2: ygZwfoCP-cYa1d_8M1_L-EP0n6M.roa (hash: Fq7+FptbMkMbniftg0D76bdlcdgbjcbKaaDFblXLHak=)
3: ztVjJUiUV1rDC2jieY_0fSkWKqc.roa (hash: E90uqL2/PKft67i6lux5huLN0HrPAucj9w5VzeHEJuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:bb:3e:a7:95:80:8a:17:9d:ac:f1:6f:3c:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jul 24 11:00:33 2026 GMT
Not After : Jul 25 11:00:33 2026 GMT
Subject: CN=3c8f4860f273a2e51d15ea9f1f8e646b12aff48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:29:82:33:a8:02:82:b2:fd:fa:16:13:0a:
87:d3:a4:73:65:16:77:d8:ea:88:36:6f:14:3a:f7:
d4:42:9c:30:c5:a6:35:b1:05:e5:2c:af:15:7d:23:
ea:75:e9:9d:46:8c:70:74:64:aa:c2:90:93:02:42:
b5:d4:33:ba:63:02:b1:a3:86:f2:5b:52:e9:0d:10:
22:09:e3:29:58:ec:99:54:4e:1d:17:70:bb:71:76:
64:1c:2e:8d:f5:55:04:4b:45:0f:ca:fb:3a:44:86:
64:87:86:8e:1e:e4:a3:09:b9:b6:45:52:6c:eb:d0:
6e:ef:29:a0:6a:db:59:3f:43:65:12:2d:de:a1:c0:
70:7e:f2:9a:ba:f1:82:44:8b:1e:d9:8b:de:3d:2c:
b3:16:e4:2b:9f:83:85:ae:7f:bc:80:c0:61:d4:cb:
81:b8:ff:ff:45:f2:5d:78:6f:d3:f9:b7:ec:8e:6b:
2b:c9:ba:69:d8:3e:bd:60:7a:d1:50:a9:3d:12:e8:
06:d7:9e:d1:ee:5b:36:c4:e7:53:4e:8e:f2:0e:54:
70:1b:6b:f2:dc:97:f4:c8:24:6c:f9:48:eb:43:17:
f5:4c:e7:3a:c2:73:84:a0:c5:89:cc:6c:d3:61:73:
da:c4:ef:08:ea:8a:bd:92:d5:b0:ca:69:a8:77:97:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:48:60:F2:73:A2:E5:1D:15:EA:9F:1F:8E:64:6B:12:AF:F4:8B
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:50:30:76:fb:b3:49:ae:24:94:6d:d5:7a:2b:1e:3b:e0:97:
74:fa:4b:6c:6c:ce:52:ce:23:4f:24:aa:e4:69:7e:54:c3:82:
21:fb:ea:7d:bd:ba:4c:d5:c1:45:fa:aa:7b:56:56:9e:22:6a:
02:9b:4c:b0:0b:7a:2a:00:cd:c2:4a:80:78:f0:ff:68:48:7b:
ea:1e:ac:4c:41:3a:59:07:70:3c:fe:4d:cc:bd:48:aa:de:4e:
bb:5c:c6:76:a3:38:b1:fd:7d:e0:1d:fc:10:2d:bc:f5:b9:de:
26:b4:fd:6d:c4:cd:8a:09:92:04:1e:9b:2b:b9:20:c1:81:24:
5f:5b:c8:9c:86:5c:00:45:7f:b0:fb:4a:65:4f:6f:a2:34:8a:
c3:2a:3d:8c:0d:97:6c:ea:95:05:b9:b0:42:e1:9a:2c:72:42:
79:91:d1:36:61:8e:03:27:d4:aa:8b:fd:b3:4b:ee:52:5a:6b:
3c:95:bb:ef:ff:4a:63:d5:f3:30:06:8f:c7:11:01:b6:a1:6c:
8a:1a:49:0a:34:06:69:dd:c4:29:71:a9:a0:d1:a7:2d:3e:84:
ac:12:14:f6:45:00:f0:3b:78:d2:d5:f8:2f:7b:1b:d2:15:cb:
c0:38:ca:bc:e8:f5:4e:81:a8:29:23:fc:c3:14:66:ea:bd:f7:
7a:b9:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:13 2026 by rpki-client