Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: jlWMAoCdIjp9p8dyETD7LMeKyvWyxgTwG84Bd6u1j8U=
Subject key identifier: FB:45:CE:CE:DB:16:EE:AD:02:2E:5F:35:04:DA:89:E5:73:41:71:01
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019F927F2E85E6E61ABA9B88642BA8AE4AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 05:00:36 +0000
Manifest this update: Fri 24 Jul 2026 05:00:36 +0000
Manifest next update: Sat 25 Jul 2026 05:00:36 +0000
Files and hashes: 1: Be5RoMw-ds5u2XTKB0fRW06anJM.roa (hash: /kKlE5noyKkxWgeKwC5k06c0zlzs+Aq9eYc5li0SiaA=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: y3okf58RUjg0TT7CBlojDIEcCJ7NvYMGcLPrqwHWi/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:2e:85:e6:e6:1a:ba:9b:88:64:2b:a8:ae:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Jul 24 05:00:36 2026 GMT
Not After : Jul 25 05:00:36 2026 GMT
Subject: CN=fb45cecedb16eead022e5f3504da89e573417101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:84:e4:41:9d:f9:36:7c:69:86:cd:93:2a:
88:69:ed:38:34:96:27:e2:9c:05:a3:a2:02:94:de:
ad:96:fc:58:63:e2:57:48:c7:23:81:fe:2f:55:bc:
16:3d:aa:3a:67:1d:50:44:cc:6d:10:00:b4:e5:92:
f5:d2:d1:89:60:60:51:24:ac:29:ed:b2:19:b7:e0:
27:85:70:fd:da:b6:54:d8:c3:2c:e3:11:0f:6d:84:
25:28:11:0c:90:d8:b9:64:03:9b:2b:c7:5c:2b:0c:
a2:57:f1:9f:69:b0:5b:7c:f8:16:26:da:8f:bb:3d:
08:70:86:46:b8:4c:af:ed:f4:60:a9:60:b6:b1:1b:
99:8c:ef:1b:45:66:65:8d:5e:ef:ca:1b:ca:c3:66:
a2:e5:36:06:74:e7:28:2b:61:cc:d3:90:2a:97:0c:
fe:bf:ed:52:0a:1c:f2:71:2b:02:00:cd:e2:4c:ed:
5a:6e:de:e5:61:38:41:24:2e:16:19:c8:7c:9f:f7:
36:8b:74:14:dc:11:e9:41:9f:9a:a8:a4:e6:43:65:
1f:14:ec:72:8c:27:e9:7a:87:83:4e:3c:e7:dd:aa:
79:aa:cf:8d:72:bf:f2:8b:47:a8:44:f4:db:9d:7c:
13:8c:1b:71:bc:bc:c7:49:82:c6:9e:45:09:10:6c:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:CE:CE:DB:16:EE:AD:02:2E:5F:35:04:DA:89:E5:73:41:71:01
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4f:5e:45:0d:e2:bb:8b:6b:3f:46:c4:ec:c6:75:d0:82:4a:
61:f4:b2:e7:04:3c:ec:1e:12:53:30:53:a4:08:96:06:2b:2d:
d3:bb:4e:34:5e:a7:34:31:d2:96:24:5e:ed:fe:b5:26:49:22:
ad:87:53:72:5c:be:6f:fe:a5:08:68:be:fc:6f:3e:91:66:a1:
8c:eb:fe:54:67:53:2f:24:ef:4a:4f:1d:f9:36:70:41:8d:47:
15:6f:ac:8f:bd:c5:74:42:43:46:f6:ae:3e:6c:4a:2c:e3:55:
3d:20:a4:03:6d:8b:54:43:6b:6d:84:d6:c3:dd:16:d8:28:b3:
ac:04:b3:6b:03:78:c3:a1:08:f6:c7:d2:f0:f4:2a:08:02:f1:
f7:be:d7:8c:3d:57:ce:3e:e4:6d:e9:02:f4:d4:ef:bb:14:b8:
bc:50:79:26:d9:b2:e1:a8:19:e7:63:78:af:45:7f:70:da:83:
47:75:ed:7e:03:4c:38:8c:70:d1:0a:54:29:bc:6b:b2:07:92:
a9:17:29:36:48:6c:d9:ff:9a:d3:d7:1d:8b:07:74:73:c7:8d:
ae:7f:fc:a2:8b:38:47:c6:8a:38:65:f8:ec:2c:18:3f:b7:bb:
f6:45:3b:93:ee:1f:d1:ba:3a:83:6d:31:ec:d1:3c:89:10:ca:
49:d5:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:42 2026 by rpki-client