Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: yZ2H6pRzwNh8s43IZWLgYU7PbPXjop6m18U+/Gaz/JI=
Subject key identifier: A8:AA:C3:CE:44:16:DC:25:81:4A:1D:30:2E:12:79:46:AC:1A:72:0C
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019F94A5501596D9A41A777A4D8EEB98BBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 054D
Signing time: Fri 24 Jul 2026 15:01:29 +0000
Manifest this update: Fri 24 Jul 2026 15:01:29 +0000
Manifest next update: Sat 25 Jul 2026 15:01:29 +0000
Files and hashes: 1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: qfJMPcSdQUp9pH+13nUbrJa5hfWIX6aubXwD+yyID8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:50:15:96:d9:a4:1a:77:7a:4d:8e:eb:98:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Jul 24 15:01:29 2026 GMT
Not After : Jul 25 15:01:29 2026 GMT
Subject: CN=a8aac3ce4416dc25814a1d302e127946ac1a720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:0a:8e:38:01:25:98:c4:10:5a:2d:b4:48:
ba:c9:50:53:57:f4:b5:44:5f:00:85:aa:82:4f:06:
8c:03:d7:12:6b:08:cc:c5:fa:d6:34:b4:0f:60:34:
89:8b:0a:51:bf:d0:36:9c:60:e6:ff:e6:bb:c0:bb:
73:ad:ca:fa:cd:4c:b1:e2:f4:44:5d:52:37:58:5f:
84:0d:78:b4:0e:e2:02:dd:a6:ba:13:31:a5:4c:87:
86:5a:11:b7:72:55:ec:c2:52:22:bc:7f:e1:1a:d9:
ed:8a:cd:0f:91:37:46:b8:c0:07:bf:a2:24:c9:b9:
5d:7a:f6:c9:a3:99:67:a0:dc:ee:f8:e6:6a:82:85:
81:62:d8:87:6a:5c:04:60:9c:d9:d7:0c:6c:00:39:
50:40:fd:4d:17:ce:81:72:ed:f0:3f:52:d9:94:23:
7e:37:db:8a:e8:7d:26:6b:53:23:bc:ae:0a:c9:33:
44:3a:07:78:18:05:85:d2:3d:94:91:d7:35:4a:a4:
38:4d:d2:1e:42:b2:69:1c:b9:ec:cb:b7:a6:67:91:
24:b9:54:8a:0c:24:da:9a:ab:dd:7f:2d:7d:33:f6:
5d:20:95:9d:09:b4:0b:2a:b8:31:34:61:7a:e8:cd:
5b:5f:a6:08:52:0a:bd:58:3a:5a:c1:c5:e9:10:ab:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:C3:CE:44:16:DC:25:81:4A:1D:30:2E:12:79:46:AC:1A:72:0C
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4d:0d:d4:c9:7c:b4:b9:ac:f8:0b:60:07:7a:5e:f2:03:35:
e5:87:32:90:99:8b:22:dc:cd:a8:22:ba:36:1e:60:b3:71:26:
49:00:a5:11:a8:06:39:a5:41:e7:b6:0f:e9:7d:86:9f:6f:32:
b9:bb:93:8d:00:aa:c2:5e:94:ea:a7:8b:b0:f1:96:f7:a0:35:
41:97:69:7a:c9:52:dd:6e:56:3c:a8:0f:5d:5b:af:f8:e4:64:
72:3c:90:c2:3c:de:d6:1f:e0:d6:c2:1a:99:91:91:6e:bb:10:
2d:a0:6c:c8:ee:da:9c:10:12:57:b1:97:c7:47:ca:61:00:3b:
91:e0:64:48:88:44:53:61:58:c4:ae:4b:85:64:06:b2:8d:ad:
d9:56:7b:53:9e:99:aa:00:b8:f8:6b:52:72:41:54:e7:8a:89:
c9:9a:d8:96:8a:d1:aa:b3:6c:9e:be:56:7f:77:80:65:d1:0e:
21:b4:68:c6:be:f4:a2:d1:46:82:24:03:04:ce:5c:4e:66:98:
b3:68:de:70:35:ef:2d:8e:9a:41:9c:b8:d5:80:ad:52:1e:fd:
03:22:4b:30:26:ed:37:fb:a8:4f:fc:55:f1:c3:b1:1d:35:ab:
31:dd:f6:de:a5:22:6a:2c:92:03:97:15:77:f1:b3:85:81:32:
af:0f:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:17 2026 by rpki-client