Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: gJ91Jh1tAEqa671zHw3kd4+Z8FgCLr9UchA/Y28WAOM=
Subject key identifier: 44:B3:6C:D8:5D:4A:9D:D9:16:F8:72:3F:7A:97:97:42:76:C1:CF:01
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 019F927F20DCCB4DAF2D378A85803C660BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 0677
Signing time: Fri 24 Jul 2026 05:00:32 +0000
Manifest this update: Fri 24 Jul 2026 05:00:32 +0000
Manifest next update: Sat 25 Jul 2026 05:00:32 +0000
Files and hashes: 1: 7GMNamFaVxNl3WNisJcYkTD_zfs.roa (hash: HADPfR7/EErIN7lxD64OuOkMNhzpIIVuPWcxcLTTEgA=)
2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: sGLyfbDrpeeOPXeQHc8LDeFK7awIHaxPiyBKQCZUMaA=)
3: t59DTwtpsezlr8EDU-BygwzxAls.roa (hash: x2nikxPQqGzwSgfTDKs6YhYnWV/ZCJ22eSxvnYU38CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:20:dc:cb:4d:af:2d:37:8a:85:80:3c:66:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Jul 24 05:00:32 2026 GMT
Not After : Jul 25 05:00:32 2026 GMT
Subject: CN=44b36cd85d4a9dd916f8723f7a97974276c1cf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:de:3b:06:0d:1c:e5:95:6a:2c:ed:be:24:
cd:a7:74:da:15:54:57:3d:14:53:a8:bf:74:3c:bd:
dd:a1:d4:08:d9:9b:41:ba:54:5a:21:d2:f1:96:69:
fe:9f:ae:79:7e:be:54:e4:d3:36:71:72:31:11:b2:
b0:dc:e4:3a:b3:70:22:0f:67:19:18:8a:4c:f5:22:
b5:ad:34:76:60:bc:e4:75:26:46:04:2a:54:98:10:
e4:bc:0a:a5:9b:cd:ac:ff:8f:b7:30:71:66:4b:16:
bb:1b:0f:2b:8b:10:68:f5:4b:93:d5:65:d4:fd:cd:
ec:37:93:3c:f2:37:02:3e:f5:5b:8d:c2:a2:6a:2c:
09:04:68:62:44:a7:cd:35:8b:0b:30:95:93:4d:b7:
01:be:66:23:4d:2e:a9:35:84:c0:3b:e6:f0:37:4b:
26:34:2f:8f:39:14:7d:35:72:d1:a8:0b:9c:e3:1c:
0a:22:7c:c0:ea:be:16:d8:27:7a:71:61:2e:01:0d:
0d:7d:a8:2f:2b:c7:df:c8:14:d0:24:ae:69:7c:01:
b9:de:6e:aa:0d:6a:c3:be:ae:b3:c6:33:b3:51:12:
a2:34:e9:d2:c6:9f:91:6b:6e:5c:71:07:db:f0:db:
1c:d3:61:35:98:b9:06:b9:19:37:e3:16:88:3c:3a:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B3:6C:D8:5D:4A:9D:D9:16:F8:72:3F:7A:97:97:42:76:C1:CF:01
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:15:c6:e2:4f:e6:14:14:a9:22:23:cf:f2:a6:5a:bc:26:18:
ce:95:aa:f9:47:80:89:94:e2:bc:cd:4d:1b:2b:8d:10:55:2d:
bb:b2:cf:27:b7:d3:32:55:97:33:53:7d:00:fd:5d:d4:a9:2e:
ab:e8:7f:42:8d:65:7b:c0:62:b3:90:8f:ee:e7:71:b4:c1:ee:
f6:65:cb:4c:88:08:35:8a:66:58:0d:17:d9:f7:0c:0b:d3:7b:
0a:47:01:27:c6:e0:e2:8b:95:2f:a5:12:bb:b5:39:ef:92:1e:
6e:43:56:a1:ea:8d:27:a9:4e:16:c6:40:3d:4f:27:ee:79:33:
43:e5:72:3a:78:e8:df:a3:49:c1:da:f4:c3:78:8c:55:bf:32:
15:8e:af:6c:9f:3b:b6:69:dc:68:35:39:fc:20:05:7c:31:e3:
af:64:68:17:f7:0c:ab:d7:82:b4:e3:08:83:01:2f:52:c7:89:
51:10:5a:13:d4:69:b2:b4:4f:ed:ab:71:79:f2:8e:a9:ee:13:
3d:9a:ea:0d:5b:3b:14:15:81:3b:0b:33:33:42:7e:e8:4d:9f:
f3:a8:d0:52:f7:bf:35:ce:d4:bf:34:92:b4:26:05:7c:e0:55:
31:cd:fc:97:38:d3:70:61:68:37:5a:7c:df:00:b5:28:6c:1c:
1b:08:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:23 2026 by rpki-client