Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: GvvL2rkLk4mC3fP2VhzDtId1akfKlbmBZFTfKhzR5mU=
Subject key identifier: 16:54:64:B8:91:92:33:65:91:CC:D1:45:C3:20:C2:23:24:27:64:A5
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019F921144F8DEFBA7BFBE66F19FD46F2B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0C40
Signing time: Fri 24 Jul 2026 03:00:33 +0000
Manifest this update: Fri 24 Jul 2026 03:00:33 +0000
Manifest next update: Sat 25 Jul 2026 03:00:33 +0000
Files and hashes: 1: 3DSxcK9BYX9k5tvNNrwWZ7kYjz4.roa (hash: LlbtQ15mDycazVoOyoBxW8uz2UEgpVUqP+tEU+6Dy34=)
2: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: ESczh+sAGZF/jh6fJhnPzvZ0fm5fVMVOh4IUaSO8wDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:44:f8:de:fb:a7:bf:be:66:f1:9f:d4:6f:2b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Jul 24 03:00:33 2026 GMT
Not After : Jul 25 03:00:33 2026 GMT
Subject: CN=165464b89192336591ccd145c320c223242764a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:fe:db:31:6c:4f:d9:28:5f:43:47:96:5a:02:
22:8b:be:be:5f:97:27:92:8e:b3:cb:15:15:5a:93:
e1:bb:9f:54:55:1c:93:84:22:42:4b:6a:0a:5b:07:
c2:97:40:85:6e:71:1e:cb:72:60:d4:58:39:c1:a6:
a1:60:cc:21:04:7f:b2:38:3a:1a:85:f8:d6:0e:f4:
63:42:51:32:55:33:fd:fc:d7:7e:95:e3:b3:6a:45:
3f:c4:11:f7:f5:25:f5:55:6d:db:ec:26:eb:a8:8f:
d2:e2:46:eb:f5:49:c5:e7:9e:98:94:51:a4:ca:30:
ef:02:11:6b:5f:00:a6:5d:2e:a5:73:ee:8d:e9:c7:
2a:54:b3:44:43:9c:10:dc:47:e3:2a:f6:5a:30:6a:
a5:da:2e:dd:9a:08:75:cb:23:8b:b8:e3:cc:38:fc:
74:10:27:06:a2:4b:46:a8:24:23:51:8d:4b:b7:50:
e3:d6:9c:27:bd:ff:69:40:47:8b:d0:64:da:90:c0:
ad:7e:cd:41:b6:13:16:b8:ec:14:aa:7b:69:e5:5b:
c2:f8:a5:ae:60:b7:c3:6e:6a:34:65:db:1d:c6:0d:
19:8b:fc:a5:70:5b:85:b2:ba:9a:4d:8f:47:66:d2:
61:dd:05:69:91:68:52:70:8c:e0:76:e1:93:bc:f4:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:64:B8:91:92:33:65:91:CC:D1:45:C3:20:C2:23:24:27:64:A5
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7a:60:79:ee:81:22:28:4a:a1:0e:01:48:6e:4d:2e:64:f2:
d3:f7:81:83:a1:84:70:be:10:2d:08:84:3c:31:1a:dd:9b:dc:
d7:d0:90:54:63:fe:cd:c5:fd:75:9d:5f:2b:e0:3d:e2:4d:76:
76:4d:4d:1d:6f:4a:fe:f5:28:1d:04:a2:86:d3:a9:07:4b:f0:
54:84:50:7b:a8:d7:72:af:cc:41:6f:45:2d:c8:8c:76:40:23:
e3:05:29:25:1b:3b:6c:60:e0:27:f3:a3:0f:6b:1b:11:4f:91:
dd:a0:57:98:07:3a:fe:8b:67:10:eb:01:53:79:3b:fd:56:63:
98:e1:77:b0:9c:dc:d5:0a:df:0a:c3:02:10:da:b1:cf:a5:70:
e6:84:ee:19:39:79:fc:69:ce:02:9c:a0:2d:1f:fd:92:e5:df:
a1:81:bf:fd:3d:4f:0e:3a:c5:d3:b1:f3:ca:1e:3e:6d:6c:f6:
82:98:0e:21:51:48:0c:82:6b:2e:3c:77:a8:ff:29:8d:a9:b1:
86:af:6e:3c:dd:5b:78:93:42:cc:9c:fc:6e:dd:6c:1c:9c:f3:
43:bf:6f:cf:4c:6c:d4:08:b2:98:9a:8f:04:d8:0c:95:a6:f2:
f9:eb:b3:d5:65:15:70:ac:41:c2:a0:36:99:c4:c7:c7:82:d1:
6a:f4:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:41 2026 by rpki-client