Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: tQGEhC1gZZvprjqfbiAWEqcOwks7TX+HdYnfPD2nR1I=
Subject key identifier: E8:6E:C9:E3:F3:05:7A:A7:4A:89:A3:F3:F1:17:A6:7E:72:CE:6C:6F
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 01A0DE3C9ABBBA7F5CE0B610107893D89ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 0BB7
Signing time: Sat 26 Sep 2026 15:01:48 +0000
Manifest this update: Sat 26 Sep 2026 15:01:48 +0000
Manifest next update: Sun 27 Sep 2026 15:01:48 +0000
Files and hashes: 1: P6M-72-M_-Fh0sMTBYVf1Rshk-U.roa (hash: YdZxjvUHxNyePgVOq7kiUc6TY9YPFuLkHb/SI6OEgJo=)
2: nEy541UFzlN6P0F9I2bsEEph-cs.roa (hash: d2+ST2uFiZBynaCqkW8gIN3GVRBmdeSe/M6bjBS3bkQ=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: C3S64XN8MCeG3kB4AwLPQb8t2MtFm+tSBkCkSZ2wcpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:9a:bb:ba:7f:5c:e0:b6:10:10:78:93:d8:9a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Sep 26 15:01:48 2026 GMT
Not After : Sep 27 15:01:48 2026 GMT
Subject: CN=e86ec9e3f3057aa74a89a3f3f117a67e72ce6c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:f2:c5:2d:2c:af:06:0e:09:8d:66:31:e9:
8f:f5:82:01:d8:50:41:52:5d:65:6b:af:67:0c:98:
40:69:a8:ed:14:fa:14:a9:30:41:a4:0c:fa:28:40:
00:b6:fa:bb:d4:d6:cd:98:d5:69:c0:4d:d9:ae:90:
34:91:41:95:e7:cf:9c:1c:d9:39:50:8c:c6:6a:14:
36:f3:f6:db:49:13:51:a0:8c:71:b6:e2:ac:1c:a3:
61:75:d2:25:17:87:64:64:94:f3:90:92:de:03:b0:
05:4f:e2:c6:be:b5:51:88:de:9a:7d:97:21:83:66:
31:00:34:71:fe:31:4c:ad:d1:02:69:7b:51:48:eb:
d1:7e:1a:ee:bc:db:48:2c:54:2c:93:d5:ba:2a:98:
59:56:77:c9:5d:3c:e8:99:7b:7d:b5:51:70:b8:ab:
84:ae:2c:45:09:75:f0:84:4b:bd:a7:cb:1c:25:fa:
06:46:ac:f0:42:66:d6:8c:29:ef:cd:57:42:16:f9:
0e:83:d2:97:86:9e:65:14:23:6f:8b:16:f5:60:10:
34:33:15:2c:02:2f:d8:ac:35:0b:69:dc:43:cc:05:
66:f5:78:8d:4e:01:da:7d:b1:cc:ca:3d:5f:32:f8:
a2:b9:45:33:0a:74:e3:b3:84:69:54:b8:fb:f4:36:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:C9:E3:F3:05:7A:A7:4A:89:A3:F3:F1:17:A6:7E:72:CE:6C:6F
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:be:65:35:a0:01:67:e2:31:c2:e3:b1:33:00:56:b5:4c:5b:
98:f4:f5:56:d4:ff:b5:b7:89:fa:89:57:43:2f:4c:c4:4c:6b:
b2:eb:05:9e:f6:45:13:90:78:61:d9:25:71:75:50:8c:ef:e4:
7f:69:7d:00:74:36:e6:dc:25:47:fe:ca:88:e8:25:87:cf:83:
f5:be:d0:c3:6d:8c:6a:6c:2e:8e:b0:90:34:1d:58:3a:e4:2b:
0c:af:f8:89:7c:61:d9:8d:d8:82:86:13:c7:37:dd:f7:b3:c1:
6a:22:6c:ac:06:9a:de:47:82:8b:8b:e9:26:f0:08:f5:51:6b:
3d:89:dc:ac:7f:cd:50:58:ec:6f:6e:86:73:97:a8:50:20:c5:
48:f4:14:41:9b:6e:cc:22:7d:b2:1d:a2:77:5b:f6:b8:77:07:
4c:13:43:81:43:cd:6c:47:db:6c:90:e5:a3:ee:50:02:d8:10:
16:23:49:bc:83:35:bf:65:90:ff:49:1b:a8:e9:a4:61:b5:0f:
69:a4:c3:ca:69:42:27:f0:2f:34:fe:c3:dc:f8:9a:45:f5:a8:
1c:cb:aa:6e:8f:b8:53:a7:2e:4a:7d:f6:90:db:31:39:d3:ed:
13:fb:88:4d:89:1b:0b:10:b4:28:fc:25:55:a6:00:db:55:be:
03:11:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:21:05 2026 by rpki-client