Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
File: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft (raw, json)
Hash identifier: 8E6GuGr2F2fd9m42SfX3JF6jas47v4VzZlFpxkL4WqU=
Subject key identifier: 7C:3C:AD:40:EB:20:34:B4:84:3D:00:74:ED:68:45:6A:42:05:44:6B
Authority key identifier: C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
Certificate issuer: /CN=c25ed6de23b320e302888f9427723f2201f2919f
Certificate serial: 019F8F7FA8A2121650B1F1ECE706CE87DB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
Manifest number: 0140
Signing time: Thu 23 Jul 2026 15:02:15 +0000
Manifest this update: Thu 23 Jul 2026 15:02:15 +0000
Manifest next update: Fri 24 Jul 2026 15:02:15 +0000
Files and hashes: 1: IR-d51vm-EzO-y0ahHT7GPsKa_s.roa (hash: 9bFsqn1B7GFofQPFT4XuTf48JjlvEIGyTh6l5dNJXig=)
2: i9kzZBEPSIQwbMZfNqvulYgSaao.roa (hash: 9Og3ibdmWGNSIjDGBXMLymE/K8GzzlULzDfKShanqjc=)
3: wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl (hash: wYGQdDXxmSFpXoAg581aGsk8Dg0XJtnlsJNdkb5BVKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a8:a2:12:16:50:b1:f1:ec:e7:06:ce:87:db:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25ed6de23b320e302888f9427723f2201f2919f
Validity
Not Before: Jul 23 15:02:15 2026 GMT
Not After : Jul 24 15:02:15 2026 GMT
Subject: CN=7c3cad40eb2034b4843d0074ed68456a4205446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:17:58:ad:29:46:ce:37:d6:a3:74:7a:aa:
59:21:f9:e1:9c:73:8e:81:4c:32:a9:2f:01:27:da:
50:ef:df:e7:07:dc:dc:ad:0e:98:c8:3d:7c:fe:34:
c2:dc:e7:ca:48:0e:59:ad:d0:4b:0f:01:d0:70:61:
42:f1:e5:19:ec:4c:9e:1d:45:fa:50:00:99:98:70:
44:a7:ff:35:66:dc:ba:22:04:72:eb:e2:58:65:94:
74:b2:c5:6c:78:eb:60:b0:8c:77:4e:ad:92:5b:d7:
e1:3c:3c:7d:66:94:6f:d4:cc:76:00:bb:3c:08:3d:
fe:e4:ef:3e:a7:03:c7:52:a3:b0:a8:67:a4:d9:a1:
cf:f7:fe:5e:1f:a9:df:41:e3:36:55:b0:b9:0b:d5:
e4:e1:0a:96:7b:07:a1:c2:11:a3:6d:3f:be:f2:b2:
97:4b:b3:9e:39:30:48:bd:46:77:eb:37:3e:60:d8:
8f:ac:23:bb:0b:14:10:98:46:34:e4:c5:3f:d7:0d:
88:37:ce:3f:6f:c5:68:c7:84:3a:d1:c6:19:8a:65:
35:5b:3b:6f:81:24:52:01:7c:ce:f8:5a:dc:2a:55:
aa:c2:ac:7b:db:8c:3c:54:68:77:5a:b3:fd:65:fb:
0a:77:4f:f9:de:c0:f2:48:45:06:c9:27:97:a5:5e:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3C:AD:40:EB:20:34:B4:84:3D:00:74:ED:68:45:6A:42:05:44:6B
X509v3 Authority Key Identifier:
keyid:C2:5E:D6:DE:23:B3:20:E3:02:88:8F:94:27:72:3F:22:01:F2:91:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd4401-78f2-465a-9dc0-33caae0e4376/1/wl7W3iOzIOMCiI-UJ3I_IgHykZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:f0:57:33:45:18:d9:1a:02:a7:31:22:0b:b8:47:ea:05:
c4:a9:31:70:44:60:fd:7b:55:8a:eb:22:cd:89:05:15:61:ce:
a8:88:ae:37:c5:5d:dc:0d:96:f0:1b:79:a8:d8:9f:f3:87:76:
43:5c:e5:95:f4:b4:d9:8c:d3:88:df:4e:eb:68:95:6c:98:5c:
1b:1d:55:8c:a6:0e:64:11:c1:ab:e7:ef:2f:f7:93:8a:04:a7:
33:97:47:c3:9a:9d:53:2a:8b:cb:06:7a:8f:a3:73:0f:b2:1d:
cc:43:c4:a5:0f:c7:a7:e3:53:3a:32:9c:8f:fe:e8:8f:62:48:
91:59:46:94:0c:4f:88:4a:5b:b3:55:b5:af:82:7b:79:2c:ed:
26:ee:33:e8:96:a7:bf:5d:ee:2b:a8:7f:4f:22:b4:29:39:0f:
1a:c8:b6:1e:f8:a2:9e:b8:0b:50:4c:31:8b:f4:26:a3:80:aa:
26:19:50:5d:38:6a:3f:aa:5c:b6:da:f4:e8:be:51:0c:74:f4:
3a:95:a0:6c:90:e8:99:cb:7f:a9:eb:22:c9:f0:f9:14:64:9c:
09:b0:5b:6d:85:bd:20:f5:26:f9:20:8d:93:09:df:f5:83:c2:
59:5a:3b:c8:cd:67:52:0e:58:23:c6:37:56:42:d8:e8:93:e3:
dc:2e:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:14 2026 by rpki-client